Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BCDF62CC7E011F1A235F1C85C11F970.roa
File:                     4BCDF62CC7E011F1A235F1C85C11F970.roa (raw, json)
Hash identifier:          rZwwA7qUAFHrVb1D4WPPdg9qknwYBOalTIHAZSp0mFA=
Subject key identifier:   6E:53:A4:A8:CE:2B:08:6D:7C:29:66:71:AB:7B:3C:ED:4E:88:37:D8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FE4A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BCDF62CC7E011F1A235F1C85C11F970.roa
Signing time:             Wed 14 Oct 2026 15:02:39 +0000
ROA not before:           Wed 14 Oct 2026 15:02:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154784
IP address blocks:        103.56.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65098 (0xfe4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 14 15:02:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6acf998f-51e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:ec:e0:c0:9a:d3:9b:e7:6f:c7:09:92:09:
                    59:5a:11:26:d7:f8:4a:58:f8:a5:29:ec:6c:40:a2:
                    ba:c7:9f:cc:6a:a5:d0:0b:77:80:48:d3:6c:28:25:
                    c1:02:74:cc:64:1b:a0:a6:c0:cd:8e:3c:78:dc:38:
                    72:7c:52:b2:df:46:eb:82:7b:03:44:fe:9b:49:4d:
                    86:76:6d:41:c2:9a:cd:87:d7:6c:8f:56:b4:7a:d9:
                    36:c1:8d:6e:26:7b:5a:8e:13:c8:44:c2:7b:73:70:
                    f6:34:4d:19:c8:8f:9a:13:33:83:49:d9:20:5a:42:
                    71:db:09:70:17:2a:be:3e:5a:1c:ce:91:40:85:96:
                    1f:01:30:c0:ac:73:2b:ba:7f:71:fe:01:c5:29:fe:
                    21:85:0a:4c:0d:f9:33:c8:74:52:f7:20:de:8b:c3:
                    3c:52:7b:99:41:90:0a:60:6d:56:f8:55:e8:9d:14:
                    41:87:0f:7e:3e:18:58:14:24:b6:58:53:9b:ca:71:
                    f1:09:8f:79:43:6a:8a:35:7b:69:90:4a:b6:d0:9c:
                    7b:c9:1a:87:7d:cc:d2:00:6e:45:35:e6:82:eb:18:
                    5d:84:b8:8d:ee:35:5d:ad:63:7b:2f:0e:9b:86:2a:
                    df:d2:8e:54:65:85:22:ad:73:30:bd:2e:25:f9:8b:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:A4:A8:CE:2B:08:6D:7C:29:66:71:AB:7B:3C:ED:4E:88:37:D8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BCDF62CC7E011F1A235F1C85C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:8f:6a:82:2f:0b:57:a8:9e:e3:7a:ba:35:7d:0d:c0:ce:
         0f:f8:c7:ab:d3:42:0c:a8:ee:27:47:10:20:97:03:76:5e:c7:
         0a:d6:4e:01:dc:9e:12:5c:f4:18:b1:3f:ad:60:61:31:3b:d9:
         7a:d3:37:86:f7:33:41:45:8e:70:c4:0f:35:18:c5:6e:12:a2:
         98:da:6e:06:41:8d:65:7c:c5:d3:dd:bc:29:b7:03:a2:7f:b9:
         19:33:59:98:96:2d:96:ad:48:e7:9f:12:90:0c:55:b3:b4:51:
         9e:78:bc:5d:57:56:d9:72:4b:92:bd:72:f6:f9:e9:1a:71:ed:
         f9:00:d3:08:aa:cb:82:01:d4:9a:f8:05:1d:38:5a:0d:cf:01:
         94:6e:80:69:b4:39:50:88:87:a5:70:8a:a0:d3:7b:f6:2a:38:
         6c:df:4c:be:14:cf:1d:29:aa:2c:b5:01:34:e8:f8:af:65:6a:
         dd:db:6e:12:52:c1:8a:32:a4:90:56:da:be:0f:cd:6d:b4:00:
         43:4a:d9:db:5b:a3:a3:7c:c3:a1:d0:7a:6a:93:54:88:45:da:
         51:a9:2b:51:54:f7:0b:5e:f0:67:76:2f:65:c8:dc:d2:7f:25:
         77:1c:8e:c1:bf:fe:d4:ea:ff:10:83:08:91:22:8a:97:e7:40:
         12:45:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:22:00 2026 by rpki-client