Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/88A00388193111EB9E0A6A49C4F9AE02.roa
File:                     88A00388193111EB9E0A6A49C4F9AE02.roa (raw, json)
Hash identifier:          DvevpJu7vWFY5EjSZxts3Sc7D51eP/pW+05crk3lgB0=
Subject key identifier:   20:99:EF:02:3E:6B:0A:B3:1B:3C:2A:A5:D4:69:C5:96:B1:ED:9D:91
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0F9E
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/88A00388193111EB9E0A6A49C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:35:54 +0000
ROA not before:           Wed 02 Sep 2026 18:35:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     41378
IP address blocks:        103.142.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3998 (0xf9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:35:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c8a-567b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:e4:66:39:5d:e1:03:a2:8f:17:f9:41:62:
                    3a:55:57:ef:32:e9:ed:7f:82:72:05:89:b1:73:76:
                    b0:07:07:d2:34:84:4d:50:20:ce:88:e9:0e:eb:e6:
                    6b:88:25:2f:3a:19:3d:1a:9c:13:5b:ee:e3:7c:b0:
                    c1:09:b9:05:37:57:1b:06:c9:ca:9a:4b:67:c6:e1:
                    47:fc:f7:ae:50:cf:8e:c2:db:65:ff:1b:b2:c6:c5:
                    95:ca:3e:9f:2a:39:f2:e2:60:96:72:a7:50:f4:9e:
                    ce:13:c6:47:3f:94:82:a6:cb:c2:d7:74:13:8b:53:
                    9b:f8:0b:2f:bd:3a:ed:ad:25:e8:89:f4:ed:0a:20:
                    1e:26:5b:f7:5a:33:95:29:2c:74:34:72:25:f1:8b:
                    53:c4:99:bd:50:cf:e1:4c:8e:e7:8b:0a:7d:e8:ef:
                    ae:6f:95:ab:25:77:8a:24:ce:9f:88:03:6b:ea:27:
                    59:69:f5:58:4c:ad:d0:29:07:df:5e:2d:92:42:20:
                    12:aa:9e:c7:9a:26:64:b7:65:1c:fc:66:3d:51:81:
                    4b:2c:72:cb:1f:82:6e:0f:09:15:11:a8:2f:09:25:
                    34:5f:da:fe:5d:fa:3e:8a:c3:02:5c:e4:ac:37:8e:
                    fb:1d:87:66:0e:b7:a4:42:13:ac:b7:e6:31:e9:06:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:99:EF:02:3E:6B:0A:B3:1B:3C:2A:A5:D4:69:C5:96:B1:ED:9D:91
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/88A00388193111EB9E0A6A49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:35:18:8f:17:f4:08:78:62:eb:f3:0f:df:c3:de:5a:d5:7f:
         51:1e:ea:b3:ad:34:ef:6b:df:17:00:a2:da:b3:8b:35:ae:4d:
         49:5f:1e:2f:3a:33:69:aa:47:f5:bf:16:c8:ab:16:1f:51:ec:
         ac:24:18:48:ff:de:99:e3:53:31:ab:33:08:73:e8:c8:f2:e7:
         84:0a:69:5c:4e:dc:f2:af:ac:3c:bf:d6:ab:6a:8b:ae:c6:6a:
         1b:e6:dc:a4:e6:6a:a3:8b:a3:f5:f4:38:42:99:41:67:60:73:
         ab:8b:17:06:53:b6:b7:08:18:5f:bf:92:8c:c7:ab:68:61:4e:
         60:b3:34:f1:9c:26:af:32:91:9c:53:7c:77:99:8a:35:e2:d8:
         fb:5c:bb:85:13:2a:44:48:c9:05:71:91:d8:d3:5b:43:7a:6e:
         f8:af:0b:48:ae:63:9c:89:89:c0:eb:cd:cd:c3:67:d7:2a:49:
         2b:f4:94:b7:34:34:14:df:5b:af:c7:b4:bc:fc:a7:e9:4c:40:
         41:04:c9:53:50:97:8b:3e:c2:e0:86:ae:a9:67:f8:09:5c:4a:
         8c:2d:1c:26:2d:1a:6d:0f:60:e8:b8:5f:49:6e:cb:fe:15:2e:
         6d:20:68:77:84:4f:ec:a9:19:60:96:ee:d5:1a:48:ab:37:39:
         d0:67:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:57:34 2026 by rpki-client