Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa
File:                     3F6AC59EB27A11F095B9C63DC4F9AE02.roa (raw, json)
Hash identifier:          ke0toGO035Z69Inr4Sq8z7Q3Xv7wkzEpWL2lK40GimM=
Subject key identifier:   3C:7B:04:08:1A:5F:3A:CE:8A:21:F5:E9:92:75:BB:ED:7B:4C:1E:91
Certificate issuer:       /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial:       0DDF
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa
Signing time:             Fri 04 Sep 2026 18:35:12 +0000
ROA not before:           Fri 04 Sep 2026 18:35:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        103.99.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 17:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
        Validity
            Not Before: Sep  4 18:35:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b0f5f-cbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:55:c3:18:65:5c:bb:18:82:fb:86:d5:ed:
                    06:71:93:7b:7c:2c:d0:ac:51:cf:54:21:d8:6c:11:
                    c9:22:57:a1:1c:92:c9:4e:93:55:0e:9f:42:99:67:
                    d3:4b:39:f9:cb:e6:b4:bc:ae:cd:e8:43:15:18:44:
                    cd:0e:11:24:0f:7c:b1:7a:b1:6e:ac:f1:b2:d1:65:
                    c0:00:77:51:89:f2:d8:a6:e1:3d:fe:63:3f:bb:42:
                    68:c5:af:b6:f3:e7:35:24:26:c3:8d:4b:59:f4:d4:
                    78:73:ad:55:12:77:e2:22:05:62:14:0d:d5:be:41:
                    49:0d:6d:2e:6c:26:d8:a0:38:49:5a:1f:d0:a4:44:
                    db:5c:44:f0:0b:00:a6:43:16:21:ff:cf:04:c8:1c:
                    fd:c6:2c:06:22:eb:c1:36:7a:6b:78:21:b5:b5:54:
                    3e:cd:16:f3:be:80:e2:57:f0:d2:43:f9:4b:60:bf:
                    56:84:0d:cc:e7:41:9a:18:ea:18:e8:7f:59:2b:ed:
                    7e:ed:88:28:c6:5f:5e:23:40:5e:cb:bb:21:72:68:
                    43:b6:36:1c:67:5e:43:3c:40:9d:18:31:7c:40:59:
                    5c:94:21:a5:a3:c1:9e:13:02:7c:33:c3:30:89:45:
                    26:07:5b:9d:56:26:d7:f1:a7:88:40:6f:62:1d:87:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7B:04:08:1A:5F:3A:CE:8A:21:F5:E9:92:75:BB:ED:7B:4C:1E:91
            X509v3 Authority Key Identifier:
                keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:c4:5c:e6:4d:62:3f:05:92:e5:6e:6c:0c:29:2c:84:e7:
         ef:7d:5e:f1:3f:75:9f:48:a7:e3:a2:e5:1c:93:43:6e:ee:0f:
         12:d0:85:6d:d7:c7:fe:13:55:c8:09:54:96:df:4a:03:4f:e3:
         41:7d:ab:98:d2:40:dd:e3:b5:10:72:f2:ee:c5:5c:83:ed:1a:
         c6:87:bc:d0:a9:af:ac:6d:aa:68:80:68:10:65:d0:d7:5b:eb:
         52:55:b3:86:a5:ea:62:22:7c:bc:97:52:b5:41:5c:d7:a6:ee:
         02:95:6a:43:1b:6a:8f:15:56:49:47:fc:85:3f:92:26:08:62:
         42:8f:cb:6c:97:6c:f0:1f:55:6a:bb:50:de:95:a2:32:7a:2d:
         93:ba:4b:cc:5b:a9:ce:17:24:2c:3a:dd:49:9d:94:9b:72:d3:
         87:74:a6:95:9b:56:ef:f2:53:13:bf:64:2e:87:be:99:f3:02:
         15:d9:8c:6a:68:54:48:2e:ed:64:27:06:85:45:8c:ea:32:eb:
         11:f9:16:b2:a4:72:8d:76:ce:0f:b1:ca:cf:b2:3d:41:c7:dd:
         b7:fa:8b:9a:eb:aa:d6:e6:fc:9e:28:c8:c5:6b:43:71:29:5c:
         ab:a0:ad:d5:f7:fd:59:f5:01:3f:58:40:4a:06:25:33:01:c8:
         e5:6e:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:01 2026 by rpki-client