Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa
File:                     DC02E120A82511F0919E5F6EC4F9AE02.roa (raw, json)
Hash identifier:          ZggVt6SWEN07bjXxifdCPoJhavoeSZ05BOlpfM+5Gi8=
Subject key identifier:   10:E5:A1:E3:E8:BC:3A:D1:C5:67:BE:D8:E1:21:56:0C:36:9A:6B:18
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       012B
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa
Signing time:             Thu 01 Oct 2026 07:53:28 +0000
ROA not before:           Thu 01 Oct 2026 07:53:28 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135607
IP address blocks:        103.69.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Oct  1 07:53:28 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abe1178-9109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:3e:52:f1:fa:4f:ef:6b:a6:52:68:5e:08:
                    e5:5d:04:dd:d9:ed:80:dc:0a:1f:ac:97:9c:8e:47:
                    29:9a:78:d3:0a:0a:4d:40:30:ed:0c:ac:64:79:0e:
                    17:91:5d:cd:04:6c:57:9f:b7:0e:74:ea:15:6b:8d:
                    ec:1c:3d:4b:1a:53:d9:c1:f6:d4:df:2a:1e:2d:3d:
                    ce:b0:de:c9:39:1e:7e:0a:fb:62:55:96:b3:1f:43:
                    03:dd:2d:f6:db:cb:69:c0:de:16:54:d5:02:95:1d:
                    42:54:38:70:10:80:78:4e:71:53:72:c0:41:53:33:
                    58:3e:a1:a1:cf:5d:e4:84:9f:57:d3:d7:38:a2:98:
                    c4:92:7f:1a:a5:76:b1:99:34:17:1e:0d:ec:68:0f:
                    0d:45:ed:17:4c:6f:66:91:42:b6:be:c3:8c:52:65:
                    73:89:d9:03:f3:42:7a:04:cc:62:a8:3a:d4:f2:ac:
                    05:34:9a:54:f0:d1:ec:c2:0c:e1:c8:b0:06:08:9d:
                    c3:36:22:f9:78:bd:16:c6:81:cd:7a:8b:52:de:42:
                    19:31:9b:7c:0f:5f:5e:2d:65:51:b6:73:e0:bf:70:
                    c4:55:c1:1a:d6:7a:93:90:2b:e5:91:9d:f1:a1:ae:
                    42:ac:71:5d:03:4f:ec:bd:1e:68:52:2a:49:f9:ff:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:A1:E3:E8:BC:3A:D1:C5:67:BE:D8:E1:21:56:0C:36:9A:6B:18
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:c0:1d:53:2c:4d:b2:ab:04:4c:38:eb:2c:b4:c6:f0:ed:
         d5:70:30:63:4e:ce:fa:46:89:60:08:69:31:37:75:fe:36:4f:
         29:36:65:b0:39:21:54:ee:09:5d:01:7c:72:d6:69:1e:36:2a:
         d9:67:e9:30:46:7a:6f:e9:34:ce:c5:9f:57:26:f9:61:6e:47:
         bb:58:ee:11:e0:7d:7e:33:db:59:1c:e4:02:62:9e:16:a9:91:
         5f:54:40:fa:e8:ba:91:f7:fa:b9:77:a6:99:96:f8:d4:78:7f:
         6f:af:36:15:67:32:99:ae:f9:14:f4:dd:d6:9d:ae:10:0c:03:
         9c:6b:7d:ba:72:3e:ac:82:3b:e4:78:86:bc:79:96:97:58:9c:
         fa:fb:1a:54:1b:9d:b9:83:4e:7c:ab:08:aa:bc:84:26:09:e9:
         63:e1:f3:63:4d:f2:d5:45:64:01:26:0e:f3:c2:1f:ac:3a:b3:
         c6:e0:c3:5e:d5:ab:64:4b:18:18:27:11:21:80:7c:27:39:34:
         ac:a7:64:5b:fa:78:46:71:66:79:79:79:62:49:6e:ac:a7:26:
         46:c9:4d:d5:32:d6:60:9b:56:1e:72:9c:38:73:2f:26:20:fd:
         51:6a:4c:01:ff:b6:76:76:40:f4:ad:80:34:4b:1c:70:db:e7:
         80:57:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:52:57 2026 by rpki-client