Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa
File:                     598530DEA4F211F1BB2027D16C11F970.roa (raw, json)
Hash identifier:          EaE91WXjJWbW3fCVES8Ru8qj3BMxMU6C2qjYRywgXf4=
Subject key identifier:   8B:F8:BB:A5:CC:9F:65:C3:74:B1:FB:7A:DA:A9:93:9F:35:28:12:31
Certificate issuer:       /CN=A9175848/serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
Certificate serial:       26
Authority key identifier: 57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa
Signing time:             Mon 05 Oct 2026 09:58:28 +0000
ROA not before:           Mon 05 Oct 2026 09:58:28 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     42960
IP address blocks:        103.71.148.0/22 maxlen: 24
                          103.234.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl
                          rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175848, serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
        Validity
            Not Before: Oct  5 09:58:28 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac374c3-2e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:1c:de:a2:68:96:83:b5:3e:fc:d9:2e:5a:
                    4b:79:b6:70:c8:a6:d4:3b:26:45:96:ea:2a:a4:91:
                    c7:5d:b1:54:f5:97:5f:be:9f:72:4e:1b:ee:22:15:
                    86:ff:93:ae:7f:52:b9:1d:d2:ed:12:e9:13:13:52:
                    2b:aa:9e:34:b5:da:8a:20:7d:b1:99:af:91:01:9d:
                    9c:4d:fa:ed:f8:be:fd:cd:2a:27:c5:db:e7:66:c6:
                    34:3d:e9:ae:2f:c0:1e:13:f3:33:06:5e:bb:37:9e:
                    99:bf:f2:dc:15:29:c3:f8:21:c9:8a:90:06:df:77:
                    be:5b:ef:7f:9e:97:8e:92:db:bd:a3:e1:74:88:6e:
                    b5:ea:a6:19:bc:a6:45:ae:0b:a0:a6:bd:c0:6c:22:
                    85:a0:c0:1e:f3:72:d0:52:07:1e:3b:3f:da:28:38:
                    21:b4:e3:c6:1f:44:09:9d:18:c5:2f:4b:bb:69:97:
                    46:66:48:20:a8:f0:55:db:7d:c8:67:0d:0f:9c:30:
                    df:f6:ad:1a:b7:d0:4f:4e:06:1f:50:8a:64:13:02:
                    c6:df:02:05:79:31:60:de:4f:c8:f8:27:cd:c9:d4:
                    79:72:2f:a9:f1:a0:46:ea:f1:26:01:3e:66:04:ff:
                    35:dd:d2:82:02:8d:9d:74:3d:71:97:2c:a8:47:fc:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F8:BB:A5:CC:9F:65:C3:74:B1:FB:7A:DA:A9:93:9F:35:28:12:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.148.0/22
                  103.234.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:89:9d:f6:96:07:3e:df:f6:d3:0f:0a:77:e8:5c:66:b5:9e:
         48:d9:a7:0f:e2:96:15:52:75:84:1e:b3:2d:86:51:c6:f2:f6:
         cd:45:1f:d4:3a:47:80:e3:e4:3e:ba:c5:98:a2:4d:08:92:d9:
         7e:5f:d1:35:6e:af:34:e8:e1:25:0d:9c:c5:94:9d:a7:5d:59:
         a3:d8:03:f4:de:75:ba:ba:29:4a:a7:fe:a3:e7:36:dc:a5:ef:
         80:9e:4c:2b:bd:e6:86:c2:2a:20:0c:87:5a:c4:7e:c5:28:77:
         47:9b:29:b3:3a:df:f5:3d:09:ce:1f:06:0e:14:5e:95:10:11:
         56:6b:b1:76:af:3a:a9:e7:52:30:a3:c0:a6:d8:26:33:d2:55:
         20:a9:aa:09:02:87:cf:83:96:32:91:57:05:68:67:ea:c4:4a:
         ea:66:ea:58:8f:4b:9b:9a:80:1d:65:6a:1e:55:13:46:3f:c2:
         a4:7e:0e:66:8e:ca:ad:4b:df:c5:da:d3:fc:0e:cc:c4:82:7b:
         2c:ff:c7:00:30:96:11:cb:75:bb:d0:7b:08:51:9a:53:76:49:
         6a:21:34:f8:5e:23:2f:4e:23:b9:2a:4e:bc:68:7d:68:3c:16:
         33:9e:1b:16:b8:36:fb:06:ea:27:46:b8:ab:3d:ea:2d:0d:e3:
         7d:5b:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:15:41 2026 by rpki-client