Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa
File:                     BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (raw, json)
Hash identifier:          x5ZS6yGt30KTQdKh6kaStCXr+hMjFUnATtJrqBSb2II=
Subject key identifier:   E2:A2:88:33:EB:13:A3:30:5F:25:4B:BF:DA:03:FA:AA:77:C8:7C:A7
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       025D
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa
Signing time:             Tue 29 Sep 2026 02:53:22 +0000
ROA not before:           Tue 29 Sep 2026 02:53:22 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153800
IP address blocks:        103.6.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Sep 29 02:53:22 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb2822-a484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:c2:6b:4c:eb:29:a0:6b:e2:06:74:e0:a1:
                    ba:1f:9c:35:c9:80:e3:d0:f8:f5:3f:e4:1f:0c:ff:
                    4e:94:47:23:3b:59:08:b3:19:bc:c4:32:ef:b7:62:
                    c6:ae:ef:0a:da:0f:f8:a3:b1:d3:55:f8:80:ec:be:
                    b7:bf:e0:bc:7a:71:12:16:bd:9a:16:c3:d3:57:68:
                    f1:fa:b4:25:94:be:a4:4c:18:a7:c8:d6:54:a0:d9:
                    c9:ad:7a:cd:0f:20:4c:ed:c8:42:4c:7a:fc:b8:0f:
                    8d:12:ae:cf:82:1c:b6:77:1c:28:42:17:8c:cc:4c:
                    c9:5a:4b:72:5e:52:bd:3c:04:4c:4b:4c:c6:fc:3b:
                    1f:6a:55:84:76:38:13:03:32:93:d8:9d:af:a5:95:
                    44:d8:63:b1:e7:cb:1d:1a:a3:e2:32:5f:fb:af:45:
                    67:8c:77:34:d2:c4:45:1c:1b:1e:c5:d2:5b:ac:47:
                    58:40:99:a6:59:e2:b7:5e:cb:4c:98:00:07:c4:8f:
                    ac:4f:e1:3a:77:75:0a:6f:22:a2:56:85:cd:87:13:
                    09:e0:74:9f:e4:79:54:a6:01:01:b6:2e:bd:68:d1:
                    e3:74:96:62:f7:1a:b7:58:48:b0:60:18:88:ac:b9:
                    cb:e3:e8:3a:ea:5f:58:1f:d0:52:ad:ce:67:17:32:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:88:33:EB:13:A3:30:5F:25:4B:BF:DA:03:FA:AA:77:C8:7C:A7
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/BF685A9E232E11F0B8BD6F6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:7c:5f:f9:ed:f9:d2:03:09:0d:83:75:9b:2e:35:02:ce:
         d7:f9:82:b3:b0:d3:6b:26:13:c6:94:7f:d8:66:5c:51:5a:d9:
         f5:fb:05:07:ab:cd:c5:01:d4:84:ca:73:d7:94:0f:db:69:c9:
         5a:a1:e6:71:12:b8:73:06:b2:dc:bf:71:48:f9:0f:eb:98:08:
         05:9e:ae:bb:9e:f1:54:24:09:95:b4:a2:06:39:d1:76:4f:fd:
         56:ab:93:de:8d:3c:31:f2:c9:f1:44:70:c1:66:29:d5:c4:2d:
         e6:6c:91:2a:1e:ba:e2:ab:f9:e4:d7:cd:f7:6b:dc:ba:b8:43:
         bc:a6:12:9c:b8:0e:58:00:f9:f6:a1:8c:c6:29:b5:23:0b:e4:
         6e:76:24:97:5a:3c:15:06:93:dc:6a:89:aa:71:b9:68:3b:7e:
         8b:c1:65:e8:73:8d:62:72:ef:f9:3b:6a:7a:55:4e:2e:8b:95:
         60:67:ef:90:49:2f:da:6e:ae:32:81:02:3b:1d:9d:e1:45:da:
         e6:ad:64:93:3e:7d:78:dd:d6:4a:ea:f6:ce:3a:f8:7d:40:4f:
         8d:30:0e:09:7e:62:fd:05:f8:11:7f:4d:3f:e0:70:15:6e:45:
         5d:9b:22:6e:8f:66:9b:f4:d1:cc:2e:dc:94:82:45:9f:b9:8f:
         c9:7e:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:51 2026 by rpki-client