Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/07BB530CF1B511EEACF12582C4F9AE02.roa
File:                     07BB530CF1B511EEACF12582C4F9AE02.roa (raw, json)
Hash identifier:          oxRH/FtaAdPMYWN/lkzxOotTfl395O31d3r/LMbHvxs=
Subject key identifier:   5E:16:27:C9:49:84:39:EF:CC:E3:03:08:78:2C:3F:C2:33:19:6A:48
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       0727
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/07BB530CF1B511EEACF12582C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 22:43:39 +0000
ROA not before:           Wed 02 Sep 2026 22:43:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136897
IP address blocks:        103.97.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Sep  2 22:43:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98a69b-1e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:20:6a:48:7e:5f:56:67:b0:0b:e6:f1:40:
                    15:0c:3f:a0:e6:0f:c5:86:dd:da:1d:6a:ae:38:18:
                    73:ce:09:e2:d2:0c:39:9b:a5:0c:7b:fa:0a:2d:83:
                    b9:59:81:cb:e6:a1:cd:03:52:a4:1d:cd:a7:ac:0d:
                    de:44:8b:01:5f:ac:ff:d2:81:75:41:0d:4d:56:1c:
                    38:57:4a:38:a4:62:ac:e5:6b:27:a1:93:c9:49:fd:
                    b9:80:1a:63:80:c6:56:87:07:17:0e:af:c8:bc:4c:
                    e9:70:5c:d1:48:87:82:04:61:b9:32:a3:4d:30:52:
                    3a:29:95:f3:85:1b:19:9f:74:b3:78:d8:5b:72:ed:
                    00:14:ea:37:85:d8:27:40:7b:4d:69:75:20:70:f4:
                    08:53:7e:d3:53:81:0c:bd:24:ac:9d:d2:93:b3:17:
                    41:51:b6:75:67:44:b6:a9:be:82:9f:fc:c1:5c:4a:
                    a4:7c:90:90:51:18:4a:9d:5b:8a:73:c1:f9:3f:77:
                    f7:c3:52:5c:04:cc:97:11:b7:77:09:8f:28:53:47:
                    da:84:bc:58:4c:73:25:c8:73:fa:3a:92:7c:90:53:
                    51:21:ec:95:17:a4:65:70:f7:ed:1c:33:ad:62:63:
                    cb:6e:f4:a0:0a:3f:09:dd:9e:b8:c7:6b:fe:4c:6b:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:16:27:C9:49:84:39:EF:CC:E3:03:08:78:2C:3F:C2:33:19:6A:48
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/07BB530CF1B511EEACF12582C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:63:4a:0a:34:69:e5:51:17:a4:6d:31:73:24:bf:38:c6:4e:
         b6:ec:dc:70:71:a4:27:d1:82:1a:5d:20:c9:08:44:00:b2:34:
         71:9d:45:f5:90:79:f9:de:84:5c:c3:07:ba:95:15:13:00:05:
         27:e7:cc:2f:23:e2:ea:41:0c:ac:7a:43:29:d9:11:12:0b:e1:
         eb:06:ec:a6:7e:ee:6a:02:46:88:25:d0:ba:8a:73:40:7c:76:
         dc:3c:14:b3:c2:c7:0b:a6:49:f7:a5:9a:c8:6e:d0:ba:43:59:
         71:1a:ec:26:86:03:cc:d6:7a:63:ec:68:3d:3d:6e:77:f8:4b:
         62:88:b6:6f:6f:f2:d4:50:15:0d:6e:24:96:7c:41:49:ac:5f:
         9e:b0:bb:bb:85:9f:29:d8:4b:9e:fc:85:e6:84:6d:68:4e:c8:
         b6:80:66:ee:19:37:3c:86:1b:d6:ca:3b:07:8d:f1:3e:4e:46:
         5b:aa:f3:ae:5a:b5:58:02:70:2d:e2:14:4f:f2:be:4b:fd:77:
         5c:1c:e9:eb:a9:0d:b1:48:65:06:bf:36:85:6d:2b:72:14:de:
         0b:81:7a:d6:31:69:6a:9d:2f:ec:19:a8:fd:1c:f7:12:7f:42:
         f4:0d:76:b2:91:57:4f:7c:df:bd:99:42:f8:e1:e3:43:bc:3c:
         28:3b:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:39 2026 by rpki-client