Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa
File:                     0CCA4B88A67511F191E1E1506911F970.roa (raw, json)
Hash identifier:          i1CYj7mYFYaOrrPQe64Ujwrd3nJ16BaOONLJpzmNsR4=
Subject key identifier:   7E:D7:CB:AB:56:61:8F:BB:B7:B0:97:91:3E:F2:6B:2A:BA:7C:CE:5B
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1CD4
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa
Signing time:             Wed 02 Sep 2026 02:21:48 +0000
ROA not before:           Wed 02 Sep 2026 02:21:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136049
IP address blocks:        103.80.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7380 (0x1cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Sep  2 02:21:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a97883c-de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:9f:2a:b0:50:ff:9b:db:16:a0:8e:ca:06:
                    c4:36:7d:b2:5d:c0:e7:96:f5:98:60:81:d5:ad:36:
                    1f:00:af:52:0f:1a:6b:72:58:30:1b:92:6b:f8:78:
                    a0:1a:1e:62:46:41:4e:fb:90:e4:47:f9:00:cd:52:
                    d2:c3:f1:c0:e3:ce:6a:1a:49:7d:35:c9:cb:79:32:
                    41:01:34:c4:75:2b:bc:c8:5c:f8:28:d2:36:74:fc:
                    d4:ec:49:8f:71:4c:16:7c:23:a4:ef:86:58:fa:8b:
                    46:a5:e9:9c:bc:70:9f:28:f6:1c:92:69:25:60:01:
                    ef:25:bb:84:5c:4c:ae:84:e2:8c:9c:a3:e7:1b:07:
                    70:bd:ca:e4:0c:04:7f:22:39:92:f9:bf:a9:54:ad:
                    f1:a9:ef:bb:12:9b:81:54:6a:12:7e:a3:c9:92:07:
                    7a:02:d8:26:84:79:13:71:c9:40:58:83:70:83:7c:
                    af:5c:6c:ec:aa:8f:8c:a9:57:1e:45:95:0e:ed:e9:
                    8b:7a:46:9f:9b:83:73:ff:d1:5b:cd:59:df:c3:d5:
                    45:5b:9a:c1:50:92:6e:0c:cb:5e:2c:af:a5:ef:95:
                    c9:aa:1b:6d:f1:fb:a9:d5:c8:4d:0e:da:0f:9c:0e:
                    0c:eb:fb:4a:8f:ab:6a:02:af:90:23:0f:7d:90:b6:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:CB:AB:56:61:8F:BB:B7:B0:97:91:3E:F2:6B:2A:BA:7C:CE:5B
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:df:e1:78:8c:45:a1:4e:4d:55:4d:f0:c3:a6:50:4c:f1:
         d6:3d:d5:e6:19:71:0e:b9:85:de:89:83:c9:43:d5:12:c4:36:
         86:26:a6:e9:a4:dd:0f:ec:15:3e:36:f5:c0:b1:68:3e:ed:d8:
         18:6a:06:50:4c:0f:ce:a7:20:88:81:8f:8e:9b:5d:18:98:c4:
         0e:3f:7d:fd:1b:c4:5c:2f:c8:38:3b:67:b6:d9:d4:fb:93:0d:
         cd:91:6e:43:76:89:7f:1c:ec:c9:69:01:c7:4c:42:38:d3:27:
         79:ca:ff:bd:f4:c1:e1:f2:75:af:f6:0d:80:0e:4a:87:a5:2d:
         40:8c:90:1b:32:61:d9:9c:f5:48:6b:f1:b7:56:81:49:ec:45:
         60:f2:47:ad:3b:9c:bf:8f:b6:b8:ca:af:1f:a7:75:85:70:51:
         18:78:92:af:ef:a4:db:1a:88:9d:d8:e6:23:41:35:d7:93:61:
         d3:2f:e8:9a:e2:74:27:a3:0c:0e:02:9b:02:c6:ea:a4:1d:2c:
         75:2b:50:db:67:d5:97:42:06:0e:cb:38:43:2b:49:db:f9:44:
         ff:61:97:e5:12:6c:6a:62:9f:f2:48:b1:01:96:ab:9b:29:f7:
         57:db:86:0f:93:45:b4:30:5c:09:32:2e:d0:b6:77:15:3b:34:
         04:43:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:52 2026 by rpki-client