Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa
File:                     85521A14F2B911ECB45D2B31C4F9AE02.roa (raw, json)
Hash identifier:          C7w7LKU1l4FZuPC9RggB2MHIxMPXJkT6gHYW0Bj0W3E=
Subject key identifier:   01:62:65:02:22:13:5B:B0:05:01:A0:8E:34:0B:EB:2E:3E:E2:3F:F1
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0D8E
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa
Signing time:             Sat 22 Aug 2026 18:35:51 +0000
ROA not before:           Sat 22 Aug 2026 18:35:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137422
IP address blocks:        103.233.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Aug 22 18:35:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a89ec07-846d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:51:15:b0:d7:b1:f9:6f:b3:96:4f:76:c7:
                    fb:ac:c7:0f:d6:15:23:a5:33:b0:5e:9f:77:9c:7e:
                    2c:6d:6f:c1:81:b9:aa:06:ad:32:d0:8f:5c:1b:a7:
                    62:b0:04:98:2f:3f:bd:3f:6d:b0:17:97:49:8b:9c:
                    b3:ec:57:e4:bb:1b:ec:9c:ef:e8:0e:9d:0a:bc:23:
                    81:53:7c:1a:57:e9:82:9b:69:65:0b:a8:71:98:18:
                    0e:3d:38:8a:40:98:7f:cd:70:0a:a3:5a:af:c7:9a:
                    a2:42:55:03:f2:49:bb:f3:ea:8e:3d:78:50:16:5d:
                    d7:a4:ec:cd:d6:fe:4e:65:5e:d3:c4:e2:16:4e:72:
                    67:7e:9a:0a:92:fb:fd:a6:e7:67:44:d7:67:67:92:
                    e6:e2:2b:79:46:cc:a1:48:d3:88:c8:4d:ca:56:c7:
                    3a:ee:b1:1a:e7:ed:87:fc:10:c4:be:47:ca:81:63:
                    a3:a3:7e:47:ce:7d:50:9e:57:0d:dc:dc:cf:29:4a:
                    a1:c3:e1:5f:18:8b:ee:27:08:20:bc:a2:6e:a7:e3:
                    52:76:14:84:0c:7b:bb:5f:b4:3d:10:dc:43:ba:63:
                    cb:d3:e3:3e:22:d0:1f:03:8e:6f:42:3c:ef:51:93:
                    3e:73:89:8e:bb:e7:e3:15:94:29:53:c0:88:ba:30:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:65:02:22:13:5B:B0:05:01:A0:8E:34:0B:EB:2E:3E:E2:3F:F1
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:64:69:51:2f:bd:1e:74:0c:dc:81:df:5e:d4:ac:e8:bb:
         b7:15:3d:1a:10:ae:1b:4f:a9:22:58:81:93:6e:d3:e2:ca:89:
         cb:c3:95:58:03:04:93:b4:b3:2d:3a:6a:54:c2:fa:ad:cb:a8:
         d1:e9:54:94:c4:e0:9f:46:28:ce:a0:94:05:c3:94:62:e6:4b:
         d5:18:d5:7d:44:12:74:99:12:cd:9c:b3:b7:41:65:2f:ed:45:
         a1:d2:1b:23:0d:54:fa:0e:00:9c:64:0a:75:41:4d:2a:5e:32:
         74:a5:48:af:98:57:5b:a1:cf:62:36:d0:f2:d6:ae:b2:9f:29:
         b2:cc:15:8b:60:95:a6:63:47:68:08:c9:63:e1:27:ae:57:cd:
         ea:d2:32:9a:c3:8f:61:cd:b0:57:3d:16:31:17:17:22:37:75:
         f4:72:59:ea:6a:34:a0:69:95:c7:60:81:d9:8e:59:97:57:1b:
         18:d5:37:c2:e5:73:7b:cf:a8:47:12:6e:91:c1:dc:30:44:ea:
         a9:b8:84:61:56:04:91:f7:9b:59:e9:06:f1:cc:9c:7e:6a:f3:
         f2:f1:e8:d5:42:06:a6:10:0a:21:2f:11:2e:49:e3:c4:b7:aa:
         52:e9:c7:96:e6:ca:61:8e:39:a5:a0:59:2d:69:3a:f1:e3:3a:
         36:b1:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:29:56 2026 by rpki-client