Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa
File:                     2C08945405B311F1930B3931093D8C67.roa (raw, json)
Hash identifier:          Y9SYZchw4WIRvIQyocFHO0pka+LuGXmAUwGDk93qFtU=
Subject key identifier:   09:1A:63:3B:2A:34:94:78:FA:C9:8D:BF:71:9A:E2:12:9D:65:B5:BF
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       025B
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa
Signing time:             Sat 29 Aug 2026 02:52:48 +0000
ROA not before:           Sat 29 Aug 2026 02:52:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63969
IP address blocks:        103.236.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Aug 29 02:52:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a924980-2b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:36:f1:0b:1c:38:81:1a:3e:9d:7d:ab:0c:da:
                    d2:a3:bf:b9:1e:09:15:5c:70:19:10:6e:32:76:16:
                    05:b7:0a:cd:48:02:eb:22:17:59:c8:31:2d:ec:7c:
                    30:a1:00:31:b2:a6:7b:0c:11:cb:9e:35:39:5f:28:
                    2b:33:97:88:30:06:a7:af:f8:98:de:77:08:45:29:
                    02:c5:cd:e2:be:69:0b:bc:fe:c6:ca:b8:f0:a4:94:
                    e3:fd:77:7a:24:f0:34:6d:35:53:94:43:96:36:70:
                    b9:e5:55:2f:39:ef:42:ce:6e:c7:e2:5e:0e:dc:cf:
                    a6:c9:52:98:f7:34:93:ef:44:dc:50:bb:73:6d:1f:
                    86:7e:10:bd:bd:76:f2:c2:46:45:f5:e7:3b:35:f2:
                    67:0a:2c:73:b6:4f:a9:b4:9b:41:fb:94:86:1a:9e:
                    ca:28:85:8b:58:f1:44:5b:43:94:d5:aa:23:59:2f:
                    6d:13:e4:c3:24:83:81:ee:57:2d:45:f0:20:17:64:
                    da:3c:53:90:b8:9d:0f:2c:8d:38:04:02:42:7c:a7:
                    f0:0c:1f:b4:20:54:16:66:db:63:bc:1d:3f:d2:72:
                    e4:9d:a0:33:0a:34:5c:01:96:c4:80:b4:d6:99:51:
                    89:fe:46:8c:ae:72:bc:f8:53:d4:83:8e:f4:73:e6:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:63:3B:2A:34:94:78:FA:C9:8D:BF:71:9A:E2:12:9D:65:B5:BF
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/2C08945405B311F1930B3931093D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:dc:0b:cd:0a:aa:7a:73:77:f7:7a:9d:7b:91:5e:f1:f7:
         c6:45:0a:e4:c1:fd:2a:b4:1b:5f:71:8e:8d:13:dd:5a:3e:a8:
         56:41:22:7e:b1:b2:ad:26:76:11:82:a0:56:58:d4:cd:5b:2f:
         bb:07:b3:fb:8d:60:ee:aa:d2:b9:5b:6f:1b:cf:48:26:31:a0:
         ea:36:86:52:f6:7a:d9:01:31:27:ab:0d:e1:30:8e:80:b0:42:
         5f:ea:ab:0c:56:4a:a3:34:73:71:81:14:be:6a:83:ba:8c:5f:
         c5:ca:09:91:13:58:8b:b4:55:d5:a5:46:e2:60:0d:36:0d:92:
         08:66:4f:3d:b1:c2:06:32:e2:9d:a1:7a:99:03:71:44:ca:0d:
         8c:3a:20:21:22:77:e8:74:78:26:cb:0c:41:5d:36:53:3a:1f:
         6b:ac:34:2f:94:a1:30:68:0e:22:25:82:39:22:df:93:e8:04:
         84:f5:87:80:e9:21:16:e1:da:23:9f:92:19:72:dd:b6:91:29:
         8e:29:34:d3:0c:be:9e:b4:31:f4:63:c9:63:cb:95:44:0b:cc:
         ee:d1:a2:23:26:73:2f:f2:78:00:7f:2f:02:b8:de:db:71:b8:
         ba:cf:8e:ae:74:77:8f:bb:aa:b5:50:f2:0a:56:ab:3c:e1:76:
         ee:da:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:20:32 2026 by rpki-client