Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/D994A1B2500C11EE83562B60C4F9AE02.roa
File:                     D994A1B2500C11EE83562B60C4F9AE02.roa (raw, json)
Hash identifier:          OXtGQAmVv6/zcLdy3u3i2oyqHV0zpKuoz/3nmtWN4+c=
Subject key identifier:   A7:D5:E3:96:49:67:5D:ED:7E:29:16:78:F1:B0:A0:0D:4D:E3:29:5C
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       024B
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/D994A1B2500C11EE83562B60C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 03:52:09 +0000
ROA not before:           Wed 05 Aug 2026 03:52:09 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     932
IP address blocks:        103.247.28.0/23 maxlen: 24
                          2401:1fe0::/48 maxlen: 48
                          2401:1fe0:1::/48 maxlen: 48
                          2401:1fe0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 02:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Aug  5 03:52:09 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72b369-fc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:46:c6:af:ef:52:5f:06:d5:50:61:9e:67:
                    d3:41:41:bc:c8:8f:dd:fd:5e:23:90:d9:fc:df:96:
                    05:ef:d0:31:ad:a2:67:84:28:c2:a4:df:1a:e7:6a:
                    69:f7:d0:81:a6:50:11:d6:6f:1e:58:63:2d:cc:7d:
                    cd:15:37:15:f5:ed:d4:0b:a9:67:53:30:e4:7d:df:
                    a1:58:37:12:62:7d:f2:83:f2:80:fe:5d:ba:96:54:
                    22:bf:40:6b:bd:44:49:69:ba:8d:6d:10:34:ba:78:
                    e8:0e:2e:22:71:48:48:46:ea:89:9d:51:71:d0:93:
                    fb:8c:2e:fe:51:52:aa:27:29:bd:bc:40:d2:0e:b9:
                    36:67:80:3a:c2:e7:75:bc:3e:9f:ad:7b:44:29:7d:
                    28:8f:8e:3d:7c:30:de:19:b1:95:c1:b4:d1:ff:15:
                    47:e8:f8:40:6b:47:3a:55:0e:5a:78:4a:33:57:64:
                    32:b8:fd:55:85:b9:e2:98:be:7a:0a:34:cb:30:3b:
                    15:12:af:44:a9:96:15:40:ff:3f:2e:39:ae:25:d5:
                    ac:55:35:5b:06:70:18:23:44:80:2c:95:59:e6:de:
                    4d:82:cd:30:75:17:54:9d:f4:b1:42:70:ff:bd:c1:
                    ec:c4:c2:f9:ec:10:51:12:5e:07:bc:7f:15:9b:3a:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D5:E3:96:49:67:5D:ED:7E:29:16:78:F1:B0:A0:0D:4D:E3:29:5C
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/D994A1B2500C11EE83562B60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.28.0/23
                IPv6:
                  2401:1fe0::-2401:1fe0:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:b6:9d:ce:d4:35:83:90:22:63:3b:97:23:f3:84:ac:79:
         f8:4f:98:1e:6c:c5:10:21:f6:91:93:8e:a8:7d:99:54:9e:f4:
         b9:56:f6:c5:20:bf:ca:9f:6d:61:41:e8:7e:09:a7:e0:5c:0b:
         fe:8f:38:ce:52:6f:88:75:a6:c5:46:b2:e5:d5:a8:9c:58:5e:
         bd:d8:85:bf:fa:c2:65:77:29:0a:e1:dc:30:9b:65:d9:1f:e4:
         d4:97:95:07:d8:c4:dd:cf:6a:91:d2:de:6d:c8:c2:49:83:28:
         74:74:19:b0:b2:12:db:15:5a:8a:73:37:36:85:5a:e2:a8:73:
         07:32:e1:46:c9:93:0f:57:85:c9:02:b1:ca:63:90:4a:dd:4a:
         c0:c9:ee:52:89:53:1b:88:59:b3:d5:bd:6e:ba:96:c0:e0:c6:
         46:98:87:35:39:38:12:8b:89:47:44:93:9c:81:94:e8:f5:75:
         0e:49:f0:cf:5d:71:7c:d3:7c:f7:90:9b:b7:fa:a0:36:b4:ba:
         5d:61:13:50:ec:e1:4b:01:7c:d6:1d:ee:33:48:e2:54:e9:89:
         78:8c:bb:3c:a9:e4:c1:29:36:ec:f4:cc:d9:14:a2:70:05:34:
         c5:1b:3a:64:e5:72:c6:b6:bc:ef:4d:d2:52:08:e8:83:bc:9e:
         6d:3e:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:44:19 2026 by rpki-client