Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/0F1831F8D64011F0B09E955FA6248E41.roa
File:                     0F1831F8D64011F0B09E955FA6248E41.roa (raw, json)
Hash identifier:          A+EKVL+YD5kNh42VjLlleMbOgF6QJXDn1Mtyd/s5yZ4=
Subject key identifier:   1C:B7:0C:06:D6:7D:FD:07:D2:68:E1:CF:9D:65:D2:1E:0D:8A:9C:72
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       143B
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/0F1831F8D64011F0B09E955FA6248E41.roa
Signing time:             Sun 30 Aug 2026 17:33:17 +0000
ROA not before:           Sun 30 Aug 2026 17:33:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133859
IP address blocks:        103.43.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5179 (0x143b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug 30 17:33:17 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94695d-7ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:3a:85:42:40:bf:d4:bf:26:7f:de:cb:75:
                    08:73:21:16:9b:41:58:12:48:24:3c:b5:18:6e:22:
                    06:18:96:47:1a:2c:f5:ad:a5:c5:06:90:df:6f:ed:
                    df:6c:16:37:7c:9f:45:e1:03:6a:36:72:b9:db:54:
                    89:ed:00:92:31:bd:c6:8c:cc:c6:74:29:dc:03:a3:
                    f8:d5:22:e5:f8:c0:aa:5b:45:2c:38:92:53:90:45:
                    3e:cc:a0:f3:4f:84:44:8d:25:11:7b:c4:ba:cc:d5:
                    73:34:42:6d:dd:09:a0:ad:78:a3:d2:9c:b3:08:f5:
                    01:ad:50:3d:53:19:6b:2f:26:33:cf:ee:80:46:27:
                    47:53:c9:49:b7:63:5c:b9:75:69:80:2a:c8:9b:0f:
                    f3:2e:22:9c:d4:b4:e4:b1:3c:2b:27:93:ef:39:2d:
                    f7:90:42:3b:f8:1b:e8:61:a1:c1:96:d2:74:fc:50:
                    25:da:a2:f4:6a:ea:c7:af:41:3f:a0:dd:ce:65:3e:
                    f1:00:ca:f8:12:6c:78:8c:ac:57:e7:95:9a:3b:9a:
                    08:5f:91:6d:f2:6d:e2:fd:cb:80:ea:df:d8:35:e5:
                    9d:27:2a:22:25:22:15:8b:ea:16:6c:4a:76:45:38:
                    d7:7d:08:36:ce:36:fa:74:f9:a4:76:24:08:5e:6f:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:0C:06:D6:7D:FD:07:D2:68:E1:CF:9D:65:D2:1E:0D:8A:9C:72
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/0F1831F8D64011F0B09E955FA6248E41.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:0f:35:40:55:c5:11:2a:c5:3c:9d:8d:5c:43:d6:d4:30:
         3f:67:b2:fa:07:a1:4e:55:12:98:9a:fd:b2:51:72:e2:0b:87:
         59:9f:8c:01:75:e0:9d:a2:88:61:0c:19:a1:01:ea:cb:af:21:
         bc:e8:1d:69:12:88:3a:ca:a8:91:9a:9b:8d:21:dd:0e:66:b7:
         75:47:14:8d:a6:a2:b8:c2:f4:35:92:06:d2:8e:a8:7f:1f:2e:
         9a:d7:00:48:77:19:e4:c3:13:6b:3e:94:0a:51:e1:0b:b7:dd:
         72:1b:bd:1d:91:c4:a9:10:02:01:5a:05:e4:e7:56:2c:f5:cd:
         00:9b:7d:a3:76:88:14:d1:41:41:55:ba:46:f6:6d:42:0d:8d:
         5a:e2:ca:25:02:e7:ad:18:6d:ca:e5:88:32:37:a5:d6:9e:6b:
         2a:a5:fd:38:6a:1c:78:a4:db:31:6a:e0:5c:d9:a6:16:9c:5d:
         d8:16:c8:74:9b:86:bc:b7:45:8b:33:e8:47:4d:2d:77:52:77:
         ba:c3:66:f2:41:fd:5a:27:c6:1e:c2:8e:13:05:64:9c:ff:ee:
         2b:dc:6b:9b:c8:d0:9e:42:b5:ee:7a:b0:32:fc:be:fa:36:67:
         f7:ea:67:d4:51:0f:50:30:8c:f0:1c:f3:89:b5:44:db:14:e8:
         02:b4:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:27:00 2026 by rpki-client