Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D88897C8959711F1B1C0CE483911F970.roa
File:                     D88897C8959711F1B1C0CE483911F970.roa (raw, json)
Hash identifier:          XFrjknF1iD1/Ov/uYsOVrKtMu6G+33Z/B4hGjB7e8h0=
Subject key identifier:   96:1E:9F:09:3D:07:6B:AF:43:22:0E:87:D3:30:53:81:47:F6:1B:20
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       0219
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D88897C8959711F1B1C0CE483911F970.roa
Signing time:             Tue 11 Aug 2026 15:18:03 +0000
ROA not before:           Tue 11 Aug 2026 15:18:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        103.194.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 03:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Aug 11 15:18:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a7b3d2b-f6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:d4:f4:14:82:40:b0:8b:91:18:6b:90:2a:
                    88:f8:a0:34:ae:a5:2b:c2:9b:7d:94:b3:14:85:01:
                    32:97:52:f2:e4:64:9f:1c:85:91:52:4b:82:02:a6:
                    30:86:05:d0:c8:e9:68:74:27:42:b1:cb:27:16:97:
                    f1:1e:ad:cc:04:e0:48:cc:2a:38:15:30:73:64:02:
                    f4:cb:8c:02:ea:17:20:5d:3b:30:4a:52:06:17:a4:
                    e5:96:c5:04:1c:9f:8b:a0:f1:83:25:95:6b:bb:75:
                    d2:96:0e:50:6c:97:01:62:72:75:d3:68:71:3b:7b:
                    18:26:2a:9e:03:98:06:24:aa:a0:c4:bf:32:7d:53:
                    3d:13:86:f7:b4:2f:c7:50:6d:d0:73:8a:d7:e5:01:
                    64:df:8a:c4:4c:67:96:b0:93:1f:32:6b:c1:f1:19:
                    d0:fc:38:69:96:09:69:95:d7:ce:8d:19:3f:b7:0b:
                    39:cd:7a:ba:30:91:4d:2d:0d:63:81:56:a2:14:55:
                    9f:ce:39:b0:7c:c6:54:2f:40:77:8b:3b:cf:d1:26:
                    ab:42:b5:01:99:fe:1c:9b:36:c9:2e:50:c5:d4:7a:
                    df:e5:ff:97:0e:d4:31:b2:34:73:9d:57:e7:38:e4:
                    3a:ff:b8:47:6c:6d:c5:cd:6b:ca:a9:4a:27:39:cb:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1E:9F:09:3D:07:6B:AF:43:22:0E:87:D3:30:53:81:47:F6:1B:20
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D88897C8959711F1B1C0CE483911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:72:0f:75:b8:35:cd:33:4a:51:f1:50:96:e3:63:2c:da:
         2c:11:a8:71:91:11:2c:a6:fe:fd:c1:07:92:30:18:4c:81:c5:
         b5:76:6b:f4:56:2d:d5:88:79:6e:92:b1:45:c4:ee:8c:cf:6a:
         b1:da:a0:8c:26:42:ac:28:ce:f7:4a:4c:f7:b0:dd:09:0a:52:
         de:e7:ec:70:a4:69:c5:f4:6f:b2:6d:ea:f7:41:81:80:2d:20:
         81:39:e5:4e:d3:49:ab:55:4d:7c:0b:a5:66:6a:26:f5:21:f9:
         85:c5:d2:f8:fb:aa:4c:96:1c:66:9c:f8:1e:81:54:fb:89:2a:
         66:d9:92:94:9a:ac:e4:35:fe:18:9a:6b:04:20:59:98:51:75:
         ff:40:02:d3:fe:e0:2b:1d:e9:5d:70:a5:a9:e5:90:dd:e4:a9:
         3e:26:a1:85:19:d8:e0:f9:26:42:38:7c:ff:26:d5:14:ae:b9:
         a7:fb:42:c1:7d:ee:df:21:a2:f5:73:c3:26:93:7b:23:a9:f3:
         c4:44:8e:65:0d:f3:16:06:52:71:b2:1f:32:92:b2:a6:c2:9d:
         82:b0:03:13:3d:cf:b4:11:94:dd:91:c4:8b:01:eb:93:0e:9b:
         e5:e4:27:a4:fe:b1:bc:e2:8e:af:cc:7b:92:4f:9b:86:c0:e0:
         f3:c3:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:09 2026 by rpki-client