Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa
File:                     40C76F3ACC1611EC80603209C4F9AE02.roa (raw, json)
Hash identifier:          hZYrCpklqd9PCFPEadJ7jkWv+ryJ31eleAk679Pe1vI=
Subject key identifier:   F2:34:2F:C2:B0:50:B3:69:D5:53:FB:01:4C:C2:00:90:5D:93:69:CF
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0428
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa
Signing time:             Sun 27 Sep 2026 00:49:43 +0000
ROA not before:           Sun 27 Sep 2026 00:49:43 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     38549
IP address blocks:        103.196.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Sep 27 00:49:43 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab86827-dd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:f6:3a:fe:7a:28:5d:59:d0:97:15:35:5b:
                    7c:2d:5d:28:da:2f:a6:34:a6:5f:7d:03:8b:3f:02:
                    dc:5b:12:52:b4:0b:e4:a5:07:49:bb:91:aa:38:2a:
                    7f:8a:4e:ac:9d:e8:32:28:82:f3:fb:10:66:7b:79:
                    b8:3c:cd:a0:c6:df:b3:31:f1:d5:bc:72:bd:82:42:
                    54:0e:c5:aa:1e:9f:a8:9c:2b:1c:fa:6a:c1:66:f9:
                    e0:aa:2c:42:a5:5a:98:ec:b2:6f:ad:b4:1d:53:fd:
                    e1:62:ed:7f:0a:5f:20:e1:21:43:f9:58:4f:05:ad:
                    b1:0e:ca:20:9f:4f:15:a7:4e:a0:81:2b:f9:b8:21:
                    d8:5d:6f:24:31:07:89:af:e3:c5:ba:94:d5:49:ca:
                    7d:35:9f:4e:f7:7f:47:17:2b:34:2b:29:3e:d4:7c:
                    52:bb:af:46:6c:bb:c0:e9:e9:f0:d6:66:46:6b:60:
                    d7:aa:33:e2:33:d5:fd:00:5e:21:45:0c:d1:af:39:
                    c1:8c:af:0a:d9:45:a7:12:2f:92:9f:27:ef:3d:50:
                    35:b2:02:62:37:d5:6f:0e:36:f6:03:e4:db:99:e8:
                    93:6d:9b:ee:f5:e5:9e:ed:20:56:d4:02:94:a6:a6:
                    1e:77:fa:e7:6c:78:52:95:b6:14:9a:8b:e5:69:67:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:2F:C2:B0:50:B3:69:D5:53:FB:01:4C:C2:00:90:5D:93:69:CF
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c1:21:d5:c8:79:ab:9e:d7:39:9e:46:a3:c8:1a:38:5d:18:
         1e:f7:59:80:6d:42:a7:1d:39:83:11:b6:ad:a7:74:67:69:34:
         4c:0c:a8:fb:56:82:c2:65:c1:10:fe:e4:8a:b8:d9:1c:64:79:
         ed:83:e0:4c:9b:70:79:ed:1b:85:c4:f6:bb:c6:30:a8:1c:fd:
         f5:68:06:4a:cf:9c:a3:ec:62:db:27:2b:b4:ea:88:74:11:3b:
         77:a2:65:6a:9c:8c:53:7a:85:c3:bf:af:0a:d8:0f:f3:fc:50:
         d5:33:26:bf:04:4b:ce:1a:b7:34:ac:1b:fe:64:aa:f2:ed:04:
         b5:4d:e8:28:58:11:46:12:71:30:a6:47:a4:ed:19:33:18:52:
         29:1a:05:c9:94:b5:2f:7d:63:96:2c:90:ca:98:5c:e5:5b:9b:
         65:25:64:26:c4:83:db:ef:3f:db:3e:08:a5:96:e8:ba:1e:e4:
         d3:d5:2e:ce:52:7f:7f:7b:bd:db:fa:ad:f3:27:ee:52:7f:1e:
         ee:71:69:e1:3b:4d:d8:ef:fb:43:34:37:41:aa:59:c4:8c:53:
         72:11:71:73:6c:10:c3:d2:58:4a:b5:a2:48:6c:aa:e7:41:62:
         d0:a2:44:6f:03:50:43:7f:cc:6a:3b:76:f7:a3:91:f8:92:23:
         bf:11:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:53:09 2026 by rpki-client