Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
File:                     385B6DAE577411ECBF021B66C4F9AE02.roa (raw, json)
Hash identifier:          b2Il84vwzqv/ef+O+Pns3mkcqkG1cdU06P6OcqDISP8=
Subject key identifier:   83:F3:F2:4C:F8:C1:D1:79:2E:89:00:38:78:01:B5:75:89:09:B8:2A
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       0537
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
Signing time:             Wed 19 Aug 2026 00:47:27 +0000
ROA not before:           Wed 19 Aug 2026 00:47:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     56311
IP address blocks:        103.168.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Aug 19 00:47:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a84fd1f-cf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:b2:e3:1d:36:0d:89:56:84:29:a8:a3:78:
                    ac:ed:df:2c:59:82:64:7a:f6:af:78:b9:2b:c0:f4:
                    ed:3a:fb:07:1c:20:c6:47:be:bd:37:da:03:19:7a:
                    4b:7c:b4:5f:83:6e:76:25:82:8b:ab:ed:03:3f:2d:
                    cc:0a:88:34:b8:92:c3:93:ce:34:88:57:92:6f:ce:
                    e3:61:68:4e:c5:57:ad:58:e7:f9:e0:f7:94:cb:37:
                    38:23:ab:82:56:ec:e1:9c:6a:6a:51:31:dc:4d:d6:
                    69:b8:f7:92:9d:ef:a6:d3:42:53:ed:75:56:f6:71:
                    7d:79:d0:10:ab:d0:3e:29:1a:3e:cb:a0:88:c5:a4:
                    e4:b0:03:a9:82:ad:bc:7b:e9:86:19:8d:e3:5e:47:
                    d5:6c:84:ca:77:51:5a:4a:2e:79:ce:a2:68:ab:46:
                    47:4f:fb:98:4c:c1:01:bf:7c:3e:1c:0b:4e:47:06:
                    5a:5e:ff:7d:2e:3e:9a:47:0d:e1:c7:f5:81:83:3a:
                    ba:c6:77:49:4b:6e:21:6a:0e:57:13:0e:c0:0b:0c:
                    71:65:e9:e7:e0:7d:99:b5:a6:31:0d:c2:c1:01:c3:
                    fd:8f:2c:8d:7f:b0:32:27:cc:05:52:48:0a:87:43:
                    bc:37:06:98:71:78:06:e0:9c:29:e2:8c:44:55:44:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:F2:4C:F8:C1:D1:79:2E:89:00:38:78:01:B5:75:89:09:B8:2A
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:1c:30:f9:15:1c:4d:02:b8:50:5a:dd:39:fe:de:3e:ff:
         55:f7:2e:38:c9:44:ee:2a:fd:c9:33:9b:4d:e1:95:69:fc:31:
         81:7f:1c:62:ce:c1:4b:61:84:40:21:5e:8a:fb:15:54:b6:b2:
         ff:1c:a9:20:02:d3:bb:61:a1:c4:5c:1a:a9:f2:03:7b:be:a9:
         24:4f:f2:25:d2:f0:cc:04:db:f7:ff:2f:64:f3:e7:e5:bc:66:
         0c:de:28:a1:79:3f:57:74:4b:e8:51:07:8a:e6:bd:ad:b2:cf:
         d1:c0:38:eb:8b:65:96:f8:35:28:dd:e5:66:e0:71:2b:f8:fd:
         18:e8:0a:8f:6c:26:82:18:25:51:6f:ea:d1:50:80:8f:fe:a5:
         f3:24:36:f0:0e:05:90:92:bb:6d:47:1f:6f:d8:1c:38:75:15:
         6e:a1:a4:12:87:d0:18:04:9c:72:7c:ba:95:c7:a2:7d:d3:71:
         4b:a2:01:b4:07:ae:dc:38:dd:82:03:af:45:a0:f0:45:7b:a1:
         06:91:a6:08:e5:54:76:9b:6f:7c:58:59:0d:01:e1:fa:d1:b2:
         33:ea:a8:72:8f:08:64:5c:41:48:2d:09:15:87:09:eb:8e:4f:
         08:a1:20:3b:4e:19:38:5a:3f:64:ac:72:c9:63:37:37:dd:79:
         6e:f8:92:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx
QzUzMDMxQTcwHhcNMjYwODE5MDA0NzI3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ZmQxZi1jZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYKy4x02DYlWhCmoo3is7d8sWYJkevaveLkrwPTtOvsHHCDGR769N9oDGXpL
fLRfg252JYKLq+0DPy3MCog0uJLDk840iFeSb87jYWhOxVetWOf54PeUyzc4I6uC
VuzhnGpqUTHcTdZpuPeSne+m00JT7XVW9nF9edAQq9A+KRo+y6CIxaTksAOpgq28
e+mGGY3jXkfVbITKd1FaSi55zqJoq0ZHT/uYTMEBv3w+HAtORwZaXv99Lj6aRw3h
x/WBgzq6xndJS24hag5XEw7ACwxxZenn4H2ZtaYxDcLBAcP9jyyNf7AyJ8wFUkgK
h0O8NwaYcXgG4Jwp4oxEVUSRZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPz8kz4
wdF5LokAOHgBtXWJCbgqMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3
NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkEwMjcvMDQyMDdERjg1NzcwMTFFQ0I5NTc3QTVCQzRGOUFFMDIvMzg1QjZEQUU1
Nzc0MTFFQ0JGMDIxQjY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6hYMA0GCSqGSIb3DQEBCwUAA4IBAQA+wxww+RUcTQK4UFrdOf7e
Pv9V9y44yUTuKv3JM5tN4ZVp/DGBfxxizsFLYYRAIV6K+xVUtrL/HKkgAtO7YaHE
XBqp8gN7vqkkT/Il0vDMBNv3/y9k8+flvGYM3iiheT9XdEvoUQeK5r2tss/RwDjr
i2WW+DUo3eVm4HEr+P0Y6AqPbCaCGCVRb+rRUICP/qXzJDbwDgWQkrttRx9v2Bw4
dRVuoaQSh9AYBJxyfLqVx6J903FLogG0B67cON2CA69FoPBFe6EGkaYI5VR2m298
WFkNAeH60bIz6qhyjwhkXEFILQkVhwnrjk8IoSA7Thk4Wj9krHLJYzc33Xlu+JLT
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:02:46 2026 by rpki-client