Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
File:                     A8A940C6429811EDBB392C35C4F9AE02.roa (raw, json)
Hash identifier:          rplnaJ67VxiOnJgjcfATwPoNAL9GqguPItHXjjwHHMw=
Subject key identifier:   75:5D:F2:88:D6:93:3C:F8:A3:74:25:72:06:61:11:75:DA:07:03:A4
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       02E5
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 01:51:01 +0000
ROA not before:           Thu 03 Sep 2026 01:51:01 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136797
IP address blocks:        103.96.110.0/24 maxlen: 24
                          103.141.226.0/24 maxlen: 24
                          2001:df1:d900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Sep  3 01:51:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98d284-cf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:f6:fc:44:55:47:16:1b:e3:c2:cb:25:8a:
                    bf:e0:45:cd:d2:ba:75:49:70:0b:d0:23:95:c1:25:
                    5b:7b:5e:05:ee:55:51:b6:1e:f7:3b:d1:af:4e:d6:
                    a3:05:49:a5:6a:ed:1f:ab:98:b7:3a:df:8e:eb:75:
                    5e:88:64:27:4a:82:60:06:fc:de:1a:ea:c2:2b:c5:
                    18:2b:83:29:34:76:08:fb:41:54:fb:dd:3b:ce:4e:
                    49:c0:8e:c1:ca:d1:e7:ee:9d:30:29:1c:9f:22:cb:
                    c7:63:5c:81:7f:c7:0a:bc:a8:7d:d9:cd:89:d8:7e:
                    3a:42:42:34:f3:68:ba:33:ce:60:8b:c3:ef:f9:20:
                    5e:c4:fb:cb:40:3a:78:b0:cd:11:b1:64:3e:97:e4:
                    68:e7:6f:96:9f:e8:a4:fc:27:55:af:b7:76:d0:36:
                    ab:b8:db:ad:bf:47:c7:f0:43:2e:66:6d:22:25:53:
                    b1:65:2d:25:a2:29:30:48:62:d0:43:f9:28:25:db:
                    86:09:a5:71:75:c4:a3:c2:44:d6:61:50:86:0c:42:
                    1c:12:7d:08:05:98:0c:8f:df:2a:f4:bc:6b:f2:9b:
                    32:8a:3f:d9:9c:f3:ed:4c:14:93:9c:a6:e0:c0:a0:
                    b9:00:35:bc:1c:ea:75:be:6d:df:31:3e:78:7f:f1:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:F2:88:D6:93:3C:F8:A3:74:25:72:06:61:11:75:DA:07:03:A4
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.110.0/24
                  103.141.226.0/24
                IPv6:
                  2001:df1:d900::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:6f:a9:3a:1b:74:0b:af:f7:cd:2b:f2:81:b3:ba:c3:0a:b2:
         49:5a:1c:8b:ca:eb:60:92:ca:3c:df:45:f4:89:50:bf:59:a7:
         9e:6e:a2:7a:98:a4:d1:d6:04:6c:56:c2:b2:7e:da:d1:37:16:
         86:aa:77:9a:11:33:3a:46:49:aa:1e:f2:3b:5f:c7:c5:4e:c3:
         75:3a:0b:c2:f2:80:4e:eb:df:da:f0:9e:ad:f8:f0:33:02:be:
         2f:cf:26:ac:d5:46:a4:c2:02:55:6f:7e:a4:b6:25:c5:e2:aa:
         a1:10:b0:28:6b:f5:1a:0f:e6:51:dd:12:43:80:fb:ce:a5:99:
         aa:6a:69:5a:25:02:66:95:69:c3:40:ac:7c:04:b5:99:6f:df:
         69:cf:08:d9:f1:01:5d:25:4d:34:32:50:e9:61:60:1c:c8:84:
         35:d7:fb:f4:aa:bb:72:0c:cf:f2:81:f1:25:fd:35:54:ef:23:
         0e:f9:78:65:89:b5:90:d8:7b:fe:3d:ec:95:8a:58:e8:91:46:
         3d:50:61:1a:1b:22:01:90:a1:dd:77:31:a9:cb:cb:7e:d4:c4:
         35:7f:7f:8f:52:7d:69:75:7b:1a:e7:17:25:4b:6f:a3:ac:e3:
         28:0c:71:2b:84:ba:38:71:27:29:e5:cd:f1:e3:19:a2:b6:ab:
         70:c5:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:34:23 2026 by rpki-client