Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AD595B62A08911F19CA560C95111F970.roa
File:                     AD595B62A08911F19CA560C95111F970.roa (raw, json)
Hash identifier:          iXQSgfzv5Du+4aXNbNxkvvRFO9z0pwgmujIi9v8pcPI=
Subject key identifier:   61:48:31:93:3F:6F:9B:4B:08:96:BF:03:9A:C5:D0:E9:53:D9:CB:96
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       043E
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AD595B62A08911F19CA560C95111F970.roa
Signing time:             Tue 25 Aug 2026 13:34:21 +0000
ROA not before:           Tue 25 Aug 2026 13:34:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     208185
IP address blocks:        103.209.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 00:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Aug 25 13:34:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a8d99dc-7696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:2c:09:17:8c:89:b0:ca:d3:db:1b:69:d9:
                    b6:50:ca:be:d0:53:43:4f:f7:87:64:d2:46:dd:ae:
                    9e:24:30:6b:17:89:b9:8b:19:fd:44:16:c4:e8:dc:
                    f2:bf:cc:7b:f6:0d:2e:fa:d5:37:5f:ad:5c:be:ac:
                    43:05:dc:ac:6f:e0:4d:cc:6b:96:b4:6a:fb:42:64:
                    df:5c:86:9b:27:d9:bb:e7:25:b2:9e:69:12:4a:9a:
                    3b:fc:32:f5:20:4d:ec:43:fe:3b:a1:62:1d:13:43:
                    c1:3e:aa:f6:89:b3:1b:74:37:d1:da:43:1e:b0:2c:
                    47:ae:2b:80:b2:52:f2:93:94:68:f1:e6:9b:1b:8e:
                    d1:9b:0f:13:78:85:44:04:55:18:63:c6:c7:d7:ec:
                    49:d9:66:e8:b0:50:2a:f2:d2:ab:79:cc:0a:67:ae:
                    29:9d:f6:47:48:23:c3:dd:57:ef:36:39:c4:2f:e9:
                    63:d7:97:08:58:48:63:3d:66:1b:a8:6d:30:b6:8f:
                    0a:cd:3c:ef:87:8d:8d:e3:9c:71:40:6d:f6:47:71:
                    06:56:da:74:b7:7e:7a:8c:01:e6:2a:ee:e7:b8:8e:
                    f5:c2:23:4b:28:bd:d6:60:0a:87:ac:c4:ca:ac:90:
                    79:64:87:e4:a0:89:4c:97:4e:32:37:51:bf:b7:85:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:31:93:3F:6F:9B:4B:08:96:BF:03:9A:C5:D0:E9:53:D9:CB:96
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AD595B62A08911F19CA560C95111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:45:4d:e6:91:e7:6f:21:72:9e:00:51:7d:9c:bc:8f:88:
         b6:05:c2:7c:98:88:aa:e4:5e:fa:5e:62:39:d6:5e:0a:d3:6e:
         b5:ba:36:2c:7e:b1:25:0d:56:14:4c:5d:01:49:6b:0a:ab:cb:
         f4:d3:1a:0f:3e:05:45:ea:8c:e8:d3:3d:cf:cc:0c:8d:d8:cb:
         c2:2c:55:cd:11:6a:98:99:7b:c2:e5:47:0b:89:0d:d3:64:c6:
         c7:69:2d:ac:40:56:bd:e0:c8:0f:e1:b7:d6:6b:4d:30:d9:e2:
         06:0c:17:55:91:0d:bc:b1:ac:00:50:7e:b1:14:f1:27:75:9d:
         be:3d:e1:15:fd:86:99:78:96:22:8e:86:75:f5:39:a9:6b:b1:
         c4:62:be:61:91:79:72:92:0b:8f:8b:45:c0:53:ad:4f:34:0a:
         65:ea:93:02:44:13:d0:2e:25:30:e0:80:e9:08:c5:ee:e0:cc:
         4a:1d:8d:5c:75:e6:70:cf:0b:09:5d:45:ad:d3:ee:fe:b1:77:
         c4:fb:ed:e9:c0:bf:fa:d6:03:be:3d:a7:9f:85:83:a2:c1:fd:
         b2:dc:23:64:b1:2a:a3:c8:b7:4c:55:64:b9:cc:42:3b:ab:1e:
         bd:7d:8b:f1:fa:dc:0d:ae:f5:60:85:2c:6e:aa:4c:3f:cc:c5:
         21:6d:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:32 2026 by rpki-client