Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/F3F26EF496D111F1990F93435711F970.roa
File:                     F3F26EF496D111F1990F93435711F970.roa (raw, json)
Hash identifier:          XTEe9TFeknA6sdG1O05Wt++tUOF+FPYtRLyfhwrlC04=
Subject key identifier:   BF:31:B3:0F:25:C5:CC:86:A0:C7:81:9F:DE:D5:9C:45:16:DE:68:FA
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       07A0
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/F3F26EF496D111F1990F93435711F970.roa
Signing time:             Thu 08 Oct 2026 22:42:50 +0000
ROA not before:           Thu 08 Oct 2026 22:42:49 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 21:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Oct  8 22:42:49 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac81c69-d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:0a:f3:44:5a:4a:f6:4d:e5:8f:cf:ef:a0:
                    40:f9:9e:26:69:9e:d8:d3:cc:67:47:ff:1b:0e:97:
                    86:b8:11:b4:ea:31:59:76:9d:a8:45:d9:f7:f4:64:
                    c6:13:c2:f0:20:35:ac:f8:99:04:35:35:cc:54:34:
                    78:3c:9c:1c:7f:84:94:03:4a:3b:e1:58:92:28:76:
                    4b:e9:fb:50:1a:2b:75:97:99:a8:8d:89:08:f3:e4:
                    b8:40:10:7d:4d:72:d4:60:fd:0c:2c:c1:d5:3b:64:
                    08:ab:96:c3:6b:1f:a4:98:16:99:45:54:85:96:47:
                    3a:b8:9d:b6:cd:88:50:7e:b6:05:eb:6f:9e:a8:dd:
                    36:2d:43:34:40:53:30:b8:b4:a1:6f:12:ed:5c:2a:
                    c0:97:4a:9f:48:eb:35:5a:15:70:c0:c7:d6:97:3b:
                    cf:c0:31:9f:69:fe:47:c6:c2:7e:da:f7:1e:97:bb:
                    21:e0:2c:41:16:ed:c3:bf:a4:67:ce:53:49:02:25:
                    3f:fc:16:cd:bc:4a:e3:2c:64:5d:36:61:f1:e7:11:
                    9b:b7:51:bf:b6:5f:4b:58:e7:38:b6:84:98:4d:ba:
                    29:e5:3b:62:7b:23:42:ac:e7:a7:c6:80:92:b2:1b:
                    0a:48:af:54:7f:62:55:ba:05:73:1d:b1:9a:dc:06:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:B3:0F:25:C5:CC:86:A0:C7:81:9F:DE:D5:9C:45:16:DE:68:FA
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/F3F26EF496D111F1990F93435711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:b5:f4:4e:75:9c:87:d1:df:60:b4:71:e6:cf:29:c3:79:
         ff:61:79:e9:b3:a8:0a:9b:6b:36:da:b4:45:a2:1e:c3:c9:e1:
         56:a9:e4:46:63:72:89:07:74:88:35:39:6e:c0:b3:b2:e5:ed:
         ed:6b:93:9a:e8:72:6d:5b:ab:c1:c2:c0:08:19:b1:d7:c6:e3:
         a9:69:55:17:f9:36:6c:0b:da:15:d8:32:07:ec:ec:4e:c1:e7:
         18:77:cd:5f:75:f1:b8:07:68:76:c7:b1:b4:bf:6d:77:77:b5:
         2d:39:ef:90:05:1d:b1:91:c0:48:07:e0:31:75:d3:27:e6:ff:
         2d:49:84:e0:f6:ff:5d:a2:92:af:8a:dc:93:35:2a:29:d9:7d:
         b0:ff:65:9e:5c:45:ec:33:2e:43:df:2f:7c:2a:bb:3d:4f:a8:
         ed:1e:4f:df:c9:43:3e:74:72:0e:cc:8f:de:05:8b:7e:4b:d5:
         3a:6b:cc:2e:45:1b:aa:76:da:c0:2f:4b:bc:29:ac:de:35:ca:
         8d:ee:2f:45:e6:9e:62:f6:ad:7c:12:fa:73:0b:1b:d7:12:00:
         e4:99:9a:8f:d3:ad:d7:88:95:be:c0:09:17:37:f0:b9:7c:21:
         49:b0:1a:1e:e0:2a:4a:af:c5:80:7b:06:3a:ea:de:b6:7e:55:
         57:b3:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:17:01 2026 by rpki-client