Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
File:                     583FA34E672E11EEB31AC02CC4F9AE02.roa (raw, json)
Hash identifier:          kaLK3qkJjr5B6YzqosqWnp6DpzhQianLGcWIznsmusM=
Subject key identifier:   57:FF:EB:47:26:EF:04:42:88:0A:EF:C9:00:63:3F:2A:86:D7:BD:A3
Certificate issuer:       /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial:       023C
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
Signing time:             Thu 01 Oct 2026 03:52:19 +0000
ROA not before:           Thu 01 Oct 2026 03:52:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        103.10.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
                          rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
        Validity
            Not Before: Oct  1 03:52:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abdd8f3-1c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:58:11:01:e5:26:30:e2:63:e2:61:77:21:
                    cc:63:3d:98:a5:30:12:c1:1d:22:72:40:93:7b:74:
                    d7:85:cf:e6:c7:fc:22:04:70:9e:a5:80:d5:c7:9c:
                    db:54:90:ac:9f:29:5e:b9:85:22:b8:ef:ad:20:47:
                    03:f0:dd:5f:6f:b0:ab:dd:a7:fa:74:68:4c:5d:c0:
                    65:c6:cd:27:40:fc:47:ef:37:1f:22:ae:01:ba:91:
                    ed:88:94:c1:8b:e0:89:70:68:a9:87:a7:99:80:73:
                    54:11:ee:0f:41:9b:c7:b7:63:96:b9:bd:81:6f:f0:
                    e7:a7:fb:cb:98:eb:ac:82:f6:89:86:6f:13:13:29:
                    01:09:de:d7:8d:17:ad:a8:7c:a4:53:f2:da:5a:19:
                    3b:82:a4:d6:88:80:b6:3e:60:05:d7:8e:7a:e8:c2:
                    8c:e1:0d:66:ca:93:7c:b8:ce:27:55:ce:fe:33:1e:
                    47:6c:71:92:50:bb:51:44:44:55:13:b2:5c:8b:b0:
                    5f:a2:19:85:aa:05:77:58:83:c9:88:88:fc:48:68:
                    b9:56:45:77:60:30:fc:5b:ba:f5:b1:4e:f5:bb:78:
                    69:94:36:b9:71:68:7a:66:93:a1:bb:29:5e:96:4a:
                    3c:10:db:8e:f3:82:65:ef:3e:c8:38:31:a8:26:e1:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:EB:47:26:EF:04:42:88:0A:EF:C9:00:63:3F:2A:86:D7:BD:A3
            X509v3 Authority Key Identifier:
                keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ae:b4:06:bd:44:ae:46:f5:50:ec:42:ca:20:6c:95:aa:4c:
         b4:96:21:ce:76:c8:7a:b8:9b:cb:ff:d2:70:06:49:b2:b1:73:
         f7:b5:39:30:93:05:58:14:75:ec:05:fa:4a:b3:03:f6:18:1e:
         f9:e1:8c:5e:4e:d5:0d:ce:bc:bd:d9:2b:11:a2:85:92:30:57:
         7d:89:0d:69:ab:21:35:d9:cf:4c:e7:fb:d1:fb:50:77:6f:f5:
         c8:ea:2a:29:36:b0:e9:0f:5d:55:f5:12:5d:c2:41:ba:74:76:
         0e:9b:77:ff:19:f0:00:4c:e9:02:1f:c8:ec:6d:e3:44:80:e9:
         e4:0c:8b:cc:62:d4:83:1f:55:50:d9:6e:dd:e4:aa:90:47:bf:
         15:2f:52:15:47:15:d1:77:6b:69:65:71:14:a4:f3:e3:0e:fc:
         20:8c:17:03:b1:58:29:4d:97:97:64:64:51:26:f4:00:ba:66:
         ca:a2:18:b3:4b:a1:1f:52:a7:49:21:b2:c5:50:95:9b:4e:16:
         a5:76:9e:ff:45:cc:97:3f:82:74:af:50:08:4c:3f:fd:9f:23:
         9d:6a:cb:8d:ce:a4:4b:80:22:4e:36:97:4c:bc:0f:4e:f0:58:
         ec:59:25:96:6c:74:4e:61:20:f9:92:6c:10:c5:ae:37:41:ce:
         88:d4:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:05 2026 by rpki-client