Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
File:                     9F95B0B4232811EBB98A6C1AC4F9AE02.roa (raw, json)
Hash identifier:          5i6ST2LSrizD9I4LghvulNLuuamd82AI+Ulzn/hcuIs=
Subject key identifier:   21:C3:69:E5:77:EE:C4:92:93:9D:94:87:CF:EE:45:54:0C:0D:79:2F
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       0992
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
Signing time:             Mon 24 Aug 2026 20:39:55 +0000
ROA not before:           Mon 24 Aug 2026 20:39:55 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.153.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Aug 24 20:39:55 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cac1b-b2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:3b:d6:bf:0b:e4:07:a2:32:f1:bb:79:17:
                    d4:81:70:f7:06:c1:46:7a:20:1c:d3:bb:ef:22:66:
                    eb:9e:4d:ec:82:40:83:dd:e8:e4:c2:3d:04:3d:68:
                    81:52:d2:55:66:94:a2:32:7d:2a:0b:cf:8d:2f:32:
                    0d:9b:27:f5:cb:01:c7:59:d4:fb:0b:cf:94:56:a6:
                    f6:3c:b0:bf:ea:eb:f7:e3:d1:1e:09:79:30:e9:6d:
                    00:77:4c:f2:81:9e:6f:59:9f:78:43:27:a5:40:b8:
                    b7:7c:be:fc:4f:63:10:11:55:bf:88:b2:09:87:a0:
                    87:04:f0:e5:f4:bd:90:65:a6:b3:0c:10:35:94:78:
                    51:9a:c5:9f:19:d3:a7:2e:97:1c:03:b2:e0:06:4e:
                    7b:75:0a:ec:b7:12:35:c3:95:56:43:39:6e:50:d8:
                    ad:cf:09:be:6c:52:ac:01:95:53:95:e5:f0:68:65:
                    65:d7:d4:06:b2:dc:a7:17:b0:fa:80:aa:00:09:be:
                    fe:21:70:f9:cf:08:cd:e3:2b:e7:ac:5f:b7:de:f9:
                    38:6d:12:7e:88:2b:35:68:1c:42:d1:06:38:ab:3e:
                    da:e9:c0:40:db:5e:be:21:22:ab:db:1e:c3:f6:a5:
                    4c:0c:4e:01:c7:29:47:76:0f:0e:64:00:0f:90:64:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:69:E5:77:EE:C4:92:93:9D:94:87:CF:EE:45:54:0C:0D:79:2F
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:b7:63:67:32:e2:a3:0d:59:de:41:8c:86:12:c2:cb:41:
         1d:d3:22:a4:7d:e2:ec:27:1e:63:08:e1:f1:c6:a5:3d:1a:48:
         f0:ae:21:f5:9b:6a:5e:16:b9:f2:23:ac:d1:8b:8f:8b:88:91:
         de:93:cc:28:d6:1a:b7:ae:ab:bd:9f:e9:57:b6:7d:56:dd:94:
         d0:83:7f:fe:f0:92:20:06:d9:d7:23:f5:e2:d5:50:a3:43:e4:
         75:c8:36:00:9c:a2:ea:3c:84:ff:45:00:97:ee:5a:0b:50:46:
         76:e1:81:68:03:de:f1:43:01:5e:d7:81:1f:09:13:f5:ce:c5:
         fd:60:b5:2a:bf:4b:0e:b6:fb:8d:05:1e:86:d2:c8:cb:f4:21:
         67:ca:b3:ad:2d:53:c3:f1:1c:7e:fb:ae:26:db:ee:9e:3a:01:
         c3:74:0c:ac:fa:8d:ff:9f:c7:da:fe:34:5e:8a:f7:26:b2:da:
         e5:f6:38:7d:75:83:31:78:68:41:09:29:6d:b9:8c:b8:4e:c1:
         18:9d:f0:c8:db:27:79:af:72:ea:4c:ff:61:e3:09:c0:98:9c:
         f7:a4:00:5c:b9:53:ee:a5:0c:71:1d:92:54:43:d3:f1:a1:6b:
         ef:a8:3f:23:f5:dc:9d:de:57:ba:52:4f:b9:fc:60:d8:0c:b5:
         21:2b:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:50:28 2026 by rpki-client