Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
File:                     8642C6D6582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier:          3qnOXrnSYilkPrzc6qI1Kjq0gVZpAPwCQX12gHkKLIA=
Subject key identifier:   1B:A5:BD:63:A2:11:96:5A:49:D3:8E:E3:28:28:44:D9:01:E8:51:28
Certificate issuer:       /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial:       0583
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
Signing time:             Sun 04 Oct 2026 23:45:01 +0000
ROA not before:           Sun 04 Oct 2026 23:45:01 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138997
IP address blocks:        103.171.176.0/23 maxlen: 24
                          2407:c640::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
                          rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
        Validity
            Not Before: Oct  4 23:45:01 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2e4fd-af14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:1a:f1:3f:bf:22:46:af:69:dd:e6:b1:34:
                    84:f7:a2:b0:1e:ba:e2:67:37:15:72:79:38:f4:ee:
                    83:bc:11:e2:76:02:b9:61:7a:91:ac:69:73:c9:18:
                    70:f9:36:7e:58:38:49:b6:be:24:43:fe:59:bc:9a:
                    51:92:59:14:9b:1d:3d:a3:8b:12:57:44:87:22:d0:
                    72:64:c0:da:d0:40:ac:4c:9c:ac:b4:e7:f1:40:f7:
                    2d:58:33:e0:b3:66:45:d2:7d:b3:b3:36:34:23:5c:
                    b9:f2:73:51:25:18:64:eb:a8:23:25:6f:3d:0c:cf:
                    2d:be:6a:4c:e5:0b:c0:77:e4:f5:44:46:7f:84:f0:
                    e2:73:cd:0b:28:7d:36:cb:63:2e:62:83:66:c3:cc:
                    58:78:2e:0b:10:30:ec:db:e9:c8:23:e0:6f:13:db:
                    68:82:97:fe:2d:25:89:ab:9c:bb:48:ec:fb:88:ef:
                    4f:99:a3:fd:de:ee:26:b2:40:94:40:2f:76:8b:ae:
                    e7:00:56:39:9e:6f:3d:90:a3:b2:a5:8b:a4:8a:0e:
                    43:4c:71:72:a7:37:81:28:39:f9:e5:4d:f5:7d:c1:
                    dd:57:ab:bb:fa:a2:b9:6c:90:1d:03:fc:44:84:87:
                    70:5f:d5:6d:02:a9:01:e4:6d:08:c3:95:ed:2a:49:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:BD:63:A2:11:96:5A:49:D3:8E:E3:28:28:44:D9:01:E8:51:28
            X509v3 Authority Key Identifier:
                keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.176.0/23
                IPv6:
                  2407:c640::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:7f:7b:18:bf:26:b6:54:93:f8:c7:13:5b:4e:8f:7e:2e:b2:
         53:45:81:86:95:70:78:d4:fd:92:4a:b4:2c:f7:65:47:cf:77:
         74:9c:0c:b0:16:a2:25:ec:27:33:69:9a:08:fe:d4:0d:1e:04:
         c2:d4:fa:61:db:23:d9:71:15:1a:44:84:a2:e9:8d:e9:61:82:
         1d:f0:9d:69:2c:68:df:2d:c2:af:60:ea:0b:f3:60:f3:21:7e:
         54:cd:61:39:55:a0:8f:57:7f:3f:ef:e8:eb:66:53:5d:37:2b:
         af:03:09:58:b5:c2:c2:ef:e4:31:1f:80:8d:6d:8a:fb:b7:88:
         c4:64:54:79:ea:f9:e3:78:2c:73:97:25:10:4c:2f:fe:7f:59:
         b5:d8:f4:a7:b3:57:6f:e1:c6:b7:b0:20:e2:60:5b:2e:d7:48:
         39:d2:d9:47:1a:a2:2d:ee:d5:b4:08:61:ec:9e:9f:0e:28:f6:
         5a:a4:84:0b:5f:c3:e4:cf:87:70:38:2b:5c:8e:00:97:09:bf:
         b9:fd:46:e9:9c:44:c2:a0:12:0d:f3:f0:b3:24:7c:5b:00:55:
         21:b2:fd:68:6d:2b:89:9e:3e:25:f7:dc:ed:cb:bd:2a:68:cb:
         e0:11:a6:b1:20:26:02:6b:62:1c:2a:40:8c:59:af:98:ee:e1:
         8d:b9:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:21 2026 by rpki-client