Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa
File:                     3FD07A88D42011F1A733CE073266CEF9.roa (raw, json)
Hash identifier:          eJYw2WqrusZ+33ghKTOPmQ2hxzrdq4e7LNKb6oq4tlQ=
Subject key identifier:   EA:9F:BB:6E:2B:F5:C2:DD:AB:B4:25:FF:8B:4E:A5:60:2B:FC:71:73
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       083C
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa
Signing time:             Fri 30 Oct 2026 05:10:40 +0000
ROA not before:           Fri 30 Oct 2026 05:10:40 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     211392
IP address blocks:        103.42.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 21:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Oct 30 05:10:40 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ae426d0-8980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:7a:b5:aa:59:85:e8:a4:1f:e3:40:12:e0:
                    33:a8:c0:75:10:35:02:16:b4:3e:c2:85:35:b7:29:
                    43:83:6b:dd:b3:a9:51:df:d4:79:4e:79:a4:05:16:
                    92:fe:d1:c0:5c:1d:9a:ce:c6:79:3f:bf:9c:3e:7e:
                    ec:4d:76:72:a1:41:97:65:b3:12:c9:9f:6d:b5:91:
                    ea:eb:04:b0:0c:a0:73:dd:43:c0:4f:3d:92:14:d6:
                    36:87:7b:b3:cc:73:aa:2c:80:31:8b:b2:88:ae:c9:
                    1f:ba:89:dc:2a:8b:b4:1d:ab:3e:8e:ab:84:0b:c5:
                    1f:e5:76:94:c6:30:59:07:8e:c9:a7:5a:ea:44:e4:
                    aa:85:0f:08:d6:22:c2:1d:69:80:44:9b:89:7b:0e:
                    4c:61:1e:e5:b4:5a:8a:3b:0d:ae:75:6d:f0:6e:e8:
                    be:62:9b:6e:21:6f:19:9d:99:ab:4d:a9:35:6f:e4:
                    aa:75:d9:68:63:53:55:e7:ef:55:34:31:62:00:d5:
                    1f:b7:ba:cd:cb:26:2f:d3:81:c4:8e:b8:72:17:6d:
                    36:16:15:32:b3:77:7c:a6:cf:fa:d0:3c:52:9c:77:
                    70:90:3b:6c:dd:7b:41:47:33:14:70:8f:84:71:aa:
                    3c:ce:a9:62:42:64:f5:2d:a4:34:a8:96:ea:49:3f:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9F:BB:6E:2B:F5:C2:DD:AB:B4:25:FF:8B:4E:A5:60:2B:FC:71:73
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:68:91:30:15:44:16:0a:e6:15:9d:d2:33:07:d7:7d:3a:45:
         eb:ff:5b:dc:69:f3:9a:b8:f6:49:15:84:04:e1:45:53:02:b7:
         da:58:50:0f:81:3f:9a:23:74:8a:a6:f8:bb:0a:25:50:81:5c:
         da:4a:00:eb:8b:89:ad:ae:f8:b8:79:f1:7b:59:ab:68:88:f5:
         e2:35:79:12:5a:70:62:09:19:56:f5:70:14:23:24:2a:76:28:
         79:10:db:2f:16:51:eb:04:aa:a3:38:a3:6d:fd:b2:4f:dc:0e:
         43:d8:b4:36:66:41:5c:76:d4:d9:d9:8d:a6:76:29:2d:43:7b:
         e0:cf:2e:51:ad:ab:af:77:43:63:ef:ee:7b:2d:f4:d1:ce:d6:
         63:ec:3b:91:78:33:2f:9b:a6:08:8c:c7:5c:ab:a1:fd:ac:a0:
         d9:ab:8b:2d:15:bb:9c:ef:68:8f:22:35:76:cf:7c:b6:0a:eb:
         0f:cf:c5:c3:6d:ce:4d:1f:50:d0:fc:cf:25:01:f0:51:f9:53:
         4b:34:54:f4:b5:57:47:cc:ad:a0:85:e2:39:c7:45:b4:77:b6:
         b6:80:61:66:fb:ec:58:ac:c9:ec:8f:92:fe:47:c2:c2:d7:af:
         a2:49:35:a8:66:97:83:bf:d2:b7:99:66:1f:19:0c:aa:27:f6:
         4c:ff:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:24 2026 by rpki-client