Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/13542BE28C9311F099562747C4F9AE02.roa
File:                     13542BE28C9311F099562747C4F9AE02.roa (raw, json)
Hash identifier:          g3qHGchC2MRE6maT5MMTBcDZRfr2ovCWYxvhahEPRjk=
Subject key identifier:   95:A5:6E:06:56:90:5A:7D:75:4A:32:AA:E4:BC:9A:DE:B4:14:77:20
Certificate issuer:       /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Certificate serial:       CD
Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/13542BE28C9311F099562747C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 08:56:09 +0000
ROA not before:           Thu 01 Oct 2026 08:56:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139082
IP address blocks:        103.139.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
                          rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
        Validity
            Not Before: Oct  1 08:56:09 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6abe2029-ecaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:d5:e1:e5:bf:d7:03:65:5a:b2:f3:b0:1d:
                    95:c6:aa:50:dc:07:e9:8f:72:72:e8:11:ae:d6:53:
                    10:c5:f8:f0:0c:fa:4a:11:ff:ee:22:3f:7c:61:2b:
                    f9:ab:bd:73:4a:0a:08:1c:83:4f:c4:bb:62:57:ce:
                    54:6e:6a:a2:15:f2:d9:b2:d4:00:66:22:6b:8d:cd:
                    b4:d9:78:8a:80:b0:78:fe:98:23:ef:ee:60:58:a0:
                    a9:a0:15:8f:69:da:5f:f9:67:aa:6c:4d:74:0f:3f:
                    6d:c3:fc:4d:60:57:b2:82:ce:7d:8c:e5:4e:fa:b8:
                    bd:14:86:6f:28:93:c7:5b:9f:e6:3b:89:34:f9:58:
                    2a:43:eb:ce:d5:82:a2:5e:86:f2:b5:5b:91:95:3a:
                    68:9d:24:dd:c7:3a:40:ff:ea:f5:85:24:fe:55:7e:
                    40:3f:14:cc:0c:62:dd:b7:43:da:78:32:08:5d:32:
                    eb:28:ce:98:3a:01:2d:58:bf:bd:9f:8e:9e:24:b4:
                    d7:6a:57:44:18:be:82:4a:c7:2f:3e:79:47:fe:16:
                    da:04:e7:05:37:88:5a:09:2e:69:91:27:87:e8:99:
                    29:38:bb:80:a6:4b:cb:20:6d:2c:65:18:58:e8:73:
                    0f:a6:03:f1:eb:5f:7c:d6:01:db:03:54:d5:4c:5c:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:6E:06:56:90:5A:7D:75:4A:32:AA:E4:BC:9A:DE:B4:14:77:20
            X509v3 Authority Key Identifier:
                keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/13542BE28C9311F099562747C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:d6:b7:e9:b4:e4:b2:a2:c0:2e:18:66:d5:60:00:60:88:
         29:9b:10:c6:e8:80:f3:5d:91:a1:93:10:75:b6:51:56:ec:0c:
         0f:7a:18:08:35:bc:78:77:c7:12:1d:7f:bf:37:2b:b3:3d:d6:
         03:60:fc:f9:66:8b:fb:f0:1d:bb:d6:46:12:ce:f6:c5:60:27:
         1c:b5:e3:6c:60:30:99:0a:b9:a5:52:72:71:89:c3:33:f7:24:
         e8:6c:58:ce:7c:3e:3e:a6:7e:a5:af:a7:66:d4:e4:5d:83:f3:
         a6:9e:a5:70:25:bb:fc:a0:8e:bd:54:88:bc:e3:d5:3c:26:5a:
         15:b5:9c:00:7a:21:70:56:ef:3f:53:82:9d:e2:c7:43:ea:6f:
         43:14:d0:81:47:a4:bf:5b:92:4b:84:e3:af:cb:68:2d:12:62:
         52:19:c1:1a:55:11:2a:cd:3e:da:1a:7f:cf:36:1f:5c:86:18:
         de:6b:a8:4c:cf:ed:54:46:aa:a0:08:0d:24:78:8a:b5:38:40:
         9b:ba:4b:23:17:fb:1c:00:2b:98:c4:85:34:7b:ec:b2:be:e0:
         ae:cd:52:73:2a:2d:16:a4:7e:d3:5d:82:f9:5e:51:00:75:a8:
         48:d5:fc:a9:ca:74:f8:91:dd:3a:74:1c:a0:f0:4b:23:8f:3d:
         bf:79:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:31:58 2026 by rpki-client