Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa
File:                     50D040327CFD11F0B32D4522C4F9AE02.roa (raw, json)
Hash identifier:          ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=
Subject key identifier:   D9:0F:FD:10:42:E5:35:20:3C:A7:9F:50:BB:F8:8E:CF:C4:D6:F0:28
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       1261
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa
Signing time:             Wed 26 Aug 2026 17:34:52 +0000
ROA not before:           Wed 26 Aug 2026 17:34:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     32167
IP address blocks:        103.140.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 26 17:34:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f23bc-9e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:23:0c:20:53:35:c7:c2:88:6b:75:cf:3d:
                    f6:d1:e2:93:33:bd:e2:e6:e6:82:b6:64:d2:b8:2e:
                    55:ee:df:8c:49:2b:4b:be:6b:a3:f5:f6:5b:6e:a0:
                    af:f4:9d:28:e2:96:a3:42:9b:ae:e9:86:57:88:f3:
                    1f:07:a1:a4:d1:5f:3b:23:57:6a:03:53:a1:5c:e7:
                    05:d7:a6:da:5c:08:e1:b2:a0:f7:3e:91:78:61:1b:
                    ce:fa:1d:e0:1d:c8:c9:89:ef:95:3d:e9:15:b9:d6:
                    00:48:f8:67:b1:fe:21:56:ac:b0:fa:a6:e7:fe:ca:
                    df:a3:b7:f4:bb:9e:21:ec:23:5e:48:94:d2:4c:8d:
                    dc:59:31:55:bd:28:3d:1d:ec:c0:d7:e2:e5:c9:cf:
                    e0:03:a6:e7:6a:67:c6:02:65:d0:56:1c:7b:8d:0b:
                    96:d1:52:de:98:d4:53:ba:46:4e:ab:79:56:4a:55:
                    96:8e:c6:fc:fc:74:f5:bb:68:84:3f:a6:f9:25:17:
                    0a:95:94:f2:c9:76:b4:f5:c2:08:f2:34:94:6d:ff:
                    5a:8e:b8:57:e4:b7:78:d0:38:27:9f:7c:9c:f8:95:
                    30:cd:da:99:3e:3c:3d:aa:e1:05:ce:45:83:ad:a8:
                    0b:47:a4:e9:14:37:9c:c2:a8:a0:69:cf:52:33:bc:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0F:FD:10:42:E5:35:20:3C:A7:9F:50:BB:F8:8E:CF:C4:D6:F0:28
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:26:07:d8:29:f0:24:19:4f:26:1b:3d:98:0a:84:72:b0:
         26:f3:16:f1:bb:02:cd:10:29:8c:b3:c3:c9:c3:40:3c:9c:c3:
         cc:b9:19:35:6d:ac:47:14:22:d0:85:1c:96:06:d6:0c:ba:35:
         9d:e2:79:4e:47:6e:06:25:15:8a:37:85:ec:d5:96:01:90:9e:
         82:e7:20:10:7a:e4:c3:bd:d1:da:78:4b:28:54:74:86:ca:90:
         f9:35:03:06:14:2c:8e:c2:43:e9:d3:61:91:97:a6:68:12:7e:
         9b:b4:75:90:ff:1b:0c:49:0b:83:a5:f3:ed:84:d1:58:ee:c0:
         c5:0b:6a:b9:ea:34:1d:88:8a:8a:d0:27:cf:6f:5f:14:df:00:
         ac:24:b7:d5:62:e5:35:56:36:af:53:1b:da:c4:ff:fc:68:9f:
         9b:44:71:a6:0a:cf:78:a5:f9:56:d6:74:cd:e3:72:50:91:06:
         2c:b3:d2:55:26:73:3f:ae:fc:a4:1c:a0:94:06:aa:f5:2f:72:
         4c:81:9c:46:a1:06:d9:3f:01:de:d6:b4:c3:75:5a:5d:a6:f3:
         f7:80:1f:62:b5:2e:97:17:f3:9d:c8:42:06:ce:b0:ed:58:f2:
         81:bb:80:50:3f:97:3d:69:5c:c1:cd:5c:ac:d3:d4:42:84:1b:
         5c:e8:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:14:27 2026 by rpki-client