Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa
File:                     230A1090248C11EEA9EE1935C4F9AE02.roa (raw, json)
Hash identifier:          rkU50GhDXfA75Ey44jTzfhYBTmuiCkN9RKfLyY3jdes=
Subject key identifier:   A3:71:46:5C:51:30:C7:ED:70:F9:B8:92:9D:4E:6C:10:FB:A2:F3:9D
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       0259
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:52:57 +0000
ROA not before:           Sat 29 Aug 2026 02:52:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        103.238.216.0/23 maxlen: 24
                          2001:df2:b240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Aug 29 02:52:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a924989-69cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:9b:dd:c8:c4:30:1e:9c:75:32:dc:ec:e1:
                    54:18:73:6b:42:81:d5:af:a3:9a:a9:b3:64:4a:2d:
                    32:21:f4:9d:75:f6:0f:ea:e2:ee:db:45:08:99:d2:
                    73:e5:24:cc:89:1b:9a:36:82:44:43:64:42:0b:5e:
                    bc:4b:ec:aa:9c:7a:72:c9:99:db:85:30:82:9e:8d:
                    55:eb:69:b6:0e:e3:c8:d0:8b:63:02:ac:41:e5:f7:
                    ee:fd:f1:1e:75:15:c2:21:21:53:8f:de:a9:71:f5:
                    fd:06:6e:f3:95:21:c4:f9:c4:f8:39:6b:70:eb:4e:
                    39:63:07:e1:1c:9a:a5:93:18:b5:c5:c7:a5:bf:96:
                    3d:7f:3d:ca:0e:4b:66:67:b9:5a:b0:07:c9:e0:01:
                    2c:1e:89:97:38:13:29:c4:bd:2f:f8:cb:07:80:fe:
                    dc:b8:c2:8e:67:10:2e:b1:9a:07:9d:62:9f:52:64:
                    60:c5:20:96:66:88:a0:12:fb:99:d1:9c:00:72:67:
                    91:8b:2b:71:3e:77:e6:f5:45:98:2a:1f:32:7c:9d:
                    6e:f5:d7:2c:1a:3c:cf:3a:f6:30:72:72:f8:60:8a:
                    13:a9:8f:60:57:61:52:7b:bd:83:42:b5:e6:d1:36:
                    b4:3c:42:aa:04:4b:17:0d:a7:c2:47:f3:2b:0c:e4:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:71:46:5C:51:30:C7:ED:70:F9:B8:92:9D:4E:6C:10:FB:A2:F3:9D
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.216.0/23
                IPv6:
                  2001:df2:b240::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:a3:15:6f:59:86:da:4e:6c:17:15:e0:46:64:d7:ef:a0:
         a6:a7:21:80:80:0a:db:21:e6:33:f4:3e:17:b6:7b:08:bb:0b:
         69:1c:89:5e:b8:3c:79:7d:60:f9:58:5b:59:10:e9:dc:02:d6:
         50:13:d0:fb:9b:d9:7b:bc:23:9b:15:d7:5f:ea:55:92:05:6b:
         8b:05:3a:03:fd:e0:ba:74:2a:eb:cf:7d:4e:af:17:38:4c:95:
         74:de:51:d2:73:34:93:75:bd:c1:d0:c0:89:4c:60:0c:8b:1e:
         a3:10:10:4b:09:63:15:f8:94:7e:ff:77:69:29:53:dd:49:ea:
         c2:fe:3a:b9:49:b5:1e:54:48:51:f8:6b:74:c4:07:79:8b:10:
         3a:dc:1e:be:c6:fc:d8:2c:9a:d7:13:17:b2:fa:c6:3b:8b:86:
         77:81:16:ed:4c:57:98:29:ff:2a:3b:71:86:41:e7:46:7f:0c:
         17:51:21:83:8f:9e:4f:22:94:1b:af:07:1e:11:c9:51:e6:c2:
         8d:da:5b:d3:be:80:1f:fd:61:b7:52:70:54:61:98:53:1b:83:
         98:4b:d2:7b:08:3a:91:1b:cd:83:b7:6f:2d:5f:1f:37:7c:b9:
         5d:74:f5:64:a7:50:4e:de:7d:ed:d3:4b:b7:75:f3:10:4c:27:
         df:81:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:38:38 2026 by rpki-client