Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa
File:                     76EBCD3E8C9911ECB051A327C4F9AE02.roa (raw, json)
Hash identifier:          OGqOgm3nQncPcQUxx+QCyB0KfEtllMtvhNbnJdM5GOE=
Subject key identifier:   8E:40:3C:80:27:D9:7A:1B:0E:66:BE:59:B0:6E:C1:9F:F1:C8:E9:44
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       04C5
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 00:49:37 +0000
ROA not before:           Wed 09 Sep 2026 00:49:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139652
IP address blocks:        103.143.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Sep  9 00:49:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa0ad21-eea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:a7:67:19:c3:32:4b:aa:de:df:d8:ef:f4:
                    5b:17:d9:d9:14:84:cd:79:98:32:d2:2a:36:53:b8:
                    62:ed:75:47:07:44:c3:0c:dd:0a:27:ee:dd:51:39:
                    a7:d8:d2:02:9e:33:fc:01:8f:26:27:ee:f5:a1:5c:
                    f4:89:bb:58:6d:3a:f4:b8:60:bd:68:84:23:36:f2:
                    7c:0c:5d:36:4a:3e:08:08:10:be:fa:9d:bb:82:22:
                    a4:5f:67:15:d5:73:3b:5e:a7:44:77:19:67:ee:30:
                    ed:bc:5f:92:33:4c:84:9a:8e:14:1d:aa:43:61:ab:
                    97:8d:d1:ba:80:80:87:06:46:06:1d:eb:87:42:1b:
                    3e:4d:ce:a6:48:f0:93:f4:cc:28:71:1f:87:7d:6a:
                    f0:a6:4f:70:37:65:98:cd:20:b7:7a:ce:92:bc:72:
                    c0:be:12:26:34:40:37:0e:c9:e1:e0:86:e0:d2:69:
                    1d:48:ce:ec:dd:4a:62:20:ba:63:50:bc:c5:66:52:
                    3c:5d:ca:05:86:0e:e7:0b:18:9e:ca:d0:7c:e0:7d:
                    6a:26:72:2c:2b:06:fe:46:76:31:ea:ac:0f:54:d3:
                    aa:63:16:12:b9:b9:75:a4:15:ad:d8:16:44:f2:9d:
                    fa:9a:0f:e3:56:cf:c9:8c:f7:a6:5a:fd:c3:89:8f:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:3C:80:27:D9:7A:1B:0E:66:BE:59:B0:6E:C1:9F:F1:C8:E9:44
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:94:b4:ae:28:77:e7:61:f4:31:01:8c:0d:d4:bd:22:fd:
         e6:04:1c:4e:be:78:8a:cf:0a:0b:d8:8a:30:25:9a:d7:a0:9e:
         b9:44:af:b7:80:48:f1:98:0e:1c:db:aa:a5:32:cd:3a:85:28:
         8e:01:e7:b8:a6:35:7d:80:2c:3c:22:89:5b:07:50:3a:d1:e1:
         20:70:61:de:00:53:82:26:9c:09:70:bf:39:86:b7:66:99:a7:
         c1:bf:6f:fc:8c:7c:a9:3b:ee:fc:9e:4b:56:ee:69:06:8d:40:
         eb:10:ea:c7:15:c1:bc:11:4e:37:72:ec:fa:83:19:95:ed:ad:
         bc:be:52:b6:c4:18:d0:83:4c:bb:e5:12:03:1f:6b:e4:31:80:
         af:25:32:18:86:97:0f:38:be:87:45:cd:78:bd:07:e6:f0:6b:
         2c:3a:fb:08:16:00:04:f6:49:d6:2d:aa:2e:5e:b0:49:99:ef:
         72:39:e5:75:ad:ef:10:38:f2:d5:c0:2d:bc:7b:82:be:1e:ab:
         a2:a8:14:96:eb:83:bc:f8:22:be:56:3d:5b:83:9b:5a:24:35:
         24:06:1f:8d:31:56:e7:56:7f:d1:94:9f:e0:a3:3e:01:00:18:
         c2:e9:f6:3c:16:cf:02:c4:ac:e9:65:87:dc:c5:99:e7:2f:41:
         45:3f:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:47 2026 by rpki-client