Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
File:                     B7BE1DAC482511ECA1A68F13C4F9AE02.roa (raw, json)
Hash identifier:          fVN7ID39HNCpnRV8S+Whh99Ve1RP28iOGdWT0us3J5E=
Subject key identifier:   F0:39:80:36:85:38:C7:D2:76:BA:AE:4F:A7:FD:78:10:29:A9:5E:D2
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       0575
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 23:44:18 +0000
ROA not before:           Wed 30 Sep 2026 23:44:18 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139597
IP address blocks:        103.142.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: Sep 30 23:44:18 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd9ed1-27c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:eb:d2:1e:5d:1d:8a:72:23:63:34:9b:08:
                    b3:4c:7b:a1:8e:17:ea:ec:c9:f8:6e:1a:14:03:27:
                    a7:02:b1:26:c8:d1:96:47:d7:0a:86:f1:4a:8d:79:
                    13:86:ed:70:ca:55:6a:22:b5:a4:b6:17:f2:c3:7d:
                    72:e4:7d:d2:f7:c3:16:8b:1f:a7:76:16:db:bf:49:
                    de:d4:65:2e:84:a5:7e:d4:0c:0d:7e:ab:3d:12:2a:
                    1d:2a:af:66:59:fa:d2:f7:8b:6b:64:28:06:46:c1:
                    ff:18:70:3b:39:38:db:a8:03:70:68:4f:f1:4b:5b:
                    14:ef:a8:f2:13:99:dc:b9:dc:b6:2e:e2:33:b9:65:
                    12:16:67:8b:e7:db:81:b0:d9:b4:41:2d:00:d8:dd:
                    8b:64:01:93:f4:08:e9:df:06:2e:ab:25:5a:00:b9:
                    c7:5e:90:f4:42:f1:41:8e:4e:3a:04:a0:33:e0:54:
                    79:ff:98:12:bc:0d:d1:26:9f:4a:50:5b:27:d5:da:
                    33:1a:4e:32:9c:9e:6c:8d:1a:a6:a5:0b:4d:f0:54:
                    4b:2b:86:68:81:ed:fa:e0:77:27:24:e5:72:f5:ff:
                    00:63:82:43:c0:a0:64:c8:aa:39:e1:36:0e:f5:14:
                    df:19:84:50:02:f5:b2:3b:6c:18:99:c8:27:ad:b9:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:80:36:85:38:C7:D2:76:BA:AE:4F:A7:FD:78:10:29:A9:5E:D2
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:96:3f:06:3f:01:10:2d:5e:a3:df:83:94:dc:c7:24:24:39:
         76:b5:ca:e3:48:d1:24:e4:25:56:da:de:86:d3:3a:33:6a:31:
         a6:7d:1e:ca:f2:95:52:51:e6:1d:28:64:a6:ad:1d:4f:59:6d:
         c6:67:bc:67:18:a2:fd:6f:97:e3:f0:fd:c8:4f:0e:53:28:1b:
         78:d4:b3:b8:37:b1:58:b6:89:82:8b:da:41:e2:4e:f5:6a:1e:
         e3:ed:3e:8d:e6:ff:e9:b3:98:4e:1d:37:89:72:16:de:66:61:
         3b:22:81:09:66:4c:0b:98:f9:13:df:6d:d5:f6:fe:cb:db:ef:
         0c:fe:aa:4b:20:c9:bf:98:90:b1:66:79:c0:b0:2e:99:41:71:
         2f:2c:d6:d7:27:4b:5d:bd:a1:4d:0c:cb:68:2c:bd:aa:c7:d5:
         26:f1:a7:1e:44:4c:18:1d:75:a3:f4:4c:4e:b4:6e:ab:17:98:
         93:1c:af:ad:fe:56:8e:8c:b6:38:1f:30:51:d4:68:9d:60:87:
         6c:2f:d7:8e:38:f3:d9:6b:cf:38:67:39:28:6d:74:40:35:d3:
         96:42:a7:e1:62:5e:1c:35:e7:84:7f:7b:0a:71:c0:12:ef:d3:
         28:7b:66:95:ec:30:94:5d:70:48:bf:77:dc:af:dc:60:ff:aa:
         41:19:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:13:58 2026 by rpki-client