Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa
File:                     D661BF1821E111EB85E9C824C4F9AE02.roa (raw, json)
Hash identifier:          4jkKfwKZKandpw6B9yIbljTyl/dPq2546IArmOtv6s4=
Subject key identifier:   12:D4:EB:AB:89:3B:4E:B4:0B:3A:A9:72:06:66:C3:F2:7C:6E:E5:08
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       0990
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa
Signing time:             Mon 24 Aug 2026 20:39:51 +0000
ROA not before:           Mon 24 Aug 2026 20:39:51 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.153.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Aug 24 20:39:51 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cac17-5e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:40:b6:ae:bb:f2:42:60:78:bc:8e:d4:31:
                    11:ab:f5:50:8f:2b:84:24:94:57:dc:57:57:d0:47:
                    91:3f:19:2e:ad:2e:38:0c:f2:8c:8b:01:d5:9f:93:
                    63:40:11:f1:d4:c5:39:ae:41:1a:03:db:f7:7a:d1:
                    80:60:83:87:5d:7d:58:0c:dd:d7:fa:b7:19:bb:90:
                    d4:cb:fe:d4:1d:a9:98:9d:c2:5f:8e:8f:be:5b:f5:
                    5b:9f:60:1c:39:b0:e6:7b:77:f9:a7:91:c4:96:9d:
                    02:0e:88:dc:c9:ba:37:45:6d:3b:38:47:01:ac:8c:
                    de:48:61:4c:4a:37:6b:20:94:da:1d:a2:cd:40:4b:
                    96:0f:63:e9:a4:91:83:7a:54:ed:d7:92:a6:2e:10:
                    7a:5c:fc:ac:5d:c1:56:0d:44:47:f7:f1:87:4c:7f:
                    1c:8e:64:74:d5:29:93:23:b7:4c:ec:ef:ab:b2:ce:
                    25:84:4d:19:bb:ca:45:a7:24:42:7e:9a:67:6b:59:
                    f9:a6:fa:5c:f5:7a:27:30:23:37:9c:f6:71:34:6f:
                    21:8a:8a:c1:b6:47:1b:7c:b7:e7:19:5b:ee:2d:f4:
                    41:1d:86:0c:80:2d:72:d2:8d:0b:32:27:ed:b1:a4:
                    5e:97:2c:fe:22:20:c2:54:b3:98:89:f4:7b:02:ab:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D4:EB:AB:89:3B:4E:B4:0B:3A:A9:72:06:66:C3:F2:7C:6E:E5:08
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:93:96:71:3a:d8:45:c9:7f:3e:72:f3:e6:d9:10:a3:f5:
         01:09:9c:44:0d:86:66:45:fe:af:17:e2:ee:85:be:1e:45:c9:
         77:ba:0b:c7:5f:2e:96:ee:af:51:3c:9b:8c:db:66:e6:65:d5:
         94:a3:22:09:66:a2:a5:0d:64:6f:ea:41:a4:24:11:dc:e7:40:
         f4:bd:4f:42:ce:bd:fc:00:25:0d:bc:7b:9e:48:d5:1d:71:24:
         3f:f5:63:fe:10:37:60:b6:ea:43:a4:d1:ff:b7:cb:3c:1b:09:
         cc:99:74:48:9f:05:68:4b:c6:b4:03:a6:ab:97:38:4d:72:65:
         64:d8:19:ae:83:03:8d:3f:16:29:ce:92:c2:ed:76:8d:93:88:
         74:25:7e:3b:9f:ca:da:4b:ff:b7:28:db:ed:5e:a2:ac:2d:37:
         d8:8e:8b:f9:2f:21:cd:93:c5:92:19:d4:0b:63:00:3d:f9:e2:
         48:1c:5b:3f:c2:7f:76:bb:1a:20:52:66:0f:84:c2:2d:13:20:
         ca:17:5e:4e:70:57:cd:73:85:f3:92:74:70:00:1d:7a:5e:04:
         7f:ec:df:a3:5d:49:91:12:d1:6c:9e:62:5f:d7:50:f1:9f:d7:
         ea:25:ae:d8:6c:37:0d:89:8d:35:b2:ce:74:c2:27:96:ef:80:
         df:62:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:11:24 2026 by rpki-client