Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa
File:                     7AAA81CC97A211F1B4CCDFD05411F970.roa (raw, json)
Hash identifier:          tmTcUM1Gt6DkqNwBrnAaOzy4iBZeySyylbDIucJKHRw=
Subject key identifier:   73:44:A8:5B:22:D7:EF:AE:B6:07:63:22:F0:3B:47:3F:6F:27:D2:26
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0AB3
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa
Signing time:             Thu 08 Oct 2026 20:39:20 +0000
ROA not before:           Thu 08 Oct 2026 20:39:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139293
IP address blocks:        103.207.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Oct  8 20:39:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac7ff78-3a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:d1:86:95:84:a9:72:b4:54:95:ca:97:11:
                    05:d5:fa:4f:eb:ce:b8:48:52:7e:3e:e5:ad:12:b5:
                    2f:70:6a:a0:99:6c:c8:58:20:49:cd:78:e7:98:c6:
                    1f:98:53:67:41:ae:e4:66:76:ed:f8:15:5b:ab:7b:
                    ab:c0:d3:d1:41:c5:66:3f:ef:0f:e1:43:00:41:7d:
                    26:f4:d0:e1:fb:cf:cc:4f:26:ba:cd:c5:d6:5f:fc:
                    fd:24:40:a3:4a:07:db:9d:46:3c:95:2b:cb:cd:3a:
                    a6:96:ef:5c:27:cd:c9:7d:a8:4e:dd:3c:59:8f:54:
                    06:2d:5a:85:bc:56:fd:f7:2e:40:e1:aa:d4:59:89:
                    8c:92:e9:d6:02:c9:2b:0b:f9:4b:17:ce:68:98:6f:
                    82:f3:30:a4:d1:f8:6b:14:16:96:61:f4:4a:26:be:
                    c5:0d:f6:8e:72:40:46:f4:0c:15:22:b4:95:af:df:
                    27:06:11:eb:2a:fe:5d:d5:f0:47:22:78:fc:a1:d7:
                    f8:14:3a:85:f9:0f:46:40:6f:cb:be:38:cc:69:19:
                    68:41:84:17:70:04:9a:56:49:5a:22:49:87:1c:8c:
                    88:91:0a:bd:71:61:22:a8:84:f4:59:96:fd:f0:96:
                    2d:2d:5a:6b:0c:b9:cc:15:50:b6:db:63:f2:3d:6e:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:A8:5B:22:D7:EF:AE:B6:07:63:22:F0:3B:47:3F:6F:27:D2:26
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:b6:86:eb:79:c2:17:3c:ae:26:a2:94:f3:c7:1c:71:55:
         33:d7:01:8a:98:f4:d5:3f:05:b6:7c:4e:bd:2d:5e:38:62:75:
         ea:7b:c3:bd:e4:35:90:d8:ab:95:97:e1:df:42:e1:13:c4:c6:
         f6:6a:50:76:3d:44:ae:a8:3b:0b:2b:0e:dc:2c:fa:ab:7c:8a:
         1b:01:6b:9a:52:3b:a7:a6:0f:f3:8d:f1:1a:9e:ee:76:4d:f7:
         03:1a:e8:fb:5f:5a:22:a1:ba:c9:d6:f4:b7:1b:67:e4:e7:11:
         6f:f2:a4:ab:1c:94:a9:84:a6:d0:c2:26:b4:8b:4b:17:09:61:
         0a:1a:0a:03:36:6b:57:12:74:61:c9:8a:ae:7c:a3:3c:33:fb:
         fc:10:4f:7d:0f:f4:16:8f:6a:ad:dd:fe:89:ab:65:cd:12:26:
         a7:d0:14:1a:8c:55:1e:d4:64:ca:4b:f3:f3:4c:21:73:a4:9c:
         d3:fd:b7:f5:d1:a7:13:2e:33:98:75:bf:0e:80:18:3d:32:37:
         1d:aa:f8:86:2c:0b:67:ef:62:22:59:73:25:7f:c4:30:68:a5:
         c6:96:5c:61:b2:f3:de:42:2e:01:15:d5:0c:f7:f8:bc:02:e1:
         ec:c2:53:0b:8a:89:be:73:f7:32:06:97:2d:12:ad:c6:93:6b:
         af:21:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:25:45 2026 by rpki-client