Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
File:                     AE14DBAA997711EAB12AD74CC4F9AE02.roa (raw, json)
Hash identifier:          eiFsQra4izZ1Ft6NObzxVBe1XhaUNrSOkIyzQ7PhFr0=
Subject key identifier:   32:21:67:E4:5A:73:F1:56:69:73:79:DC:76:EC:9A:68:F6:38:55:02
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0EFF
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:35:19 +0000
ROA not before:           Thu 06 Aug 2026 17:35:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134963
IP address blocks:        103.141.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 17:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3839 (0xeff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Aug  6 17:35:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a74c5d7-f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:08:63:44:01:ac:ab:92:70:15:38:43:1c:
                    75:d8:45:c6:d4:2c:42:5a:99:97:79:62:13:c6:c1:
                    b1:c9:d8:69:66:c4:cc:b7:c1:e5:3d:5a:b7:b2:73:
                    6a:38:2a:09:08:72:91:0f:24:62:d8:fe:2a:8c:6e:
                    06:b7:f8:6f:81:0b:47:45:33:3b:38:1d:68:13:32:
                    b3:90:57:e8:df:7b:f6:66:97:f0:08:16:a3:5f:11:
                    af:21:5f:d7:88:5d:25:d0:61:cd:36:34:e5:e5:e5:
                    0a:ce:f2:6e:46:56:e9:9d:4e:bc:d6:a4:09:fc:4a:
                    d6:26:bb:58:db:a9:aa:f5:47:10:f6:2e:64:89:6a:
                    38:d0:98:2c:e2:bd:e9:bd:00:c0:3e:9e:53:2c:40:
                    e1:4d:1e:8b:90:ef:46:ef:0a:57:2b:af:4b:90:c5:
                    0e:b6:23:6a:37:96:85:a1:46:cd:6d:94:f3:35:43:
                    ed:a8:ec:38:f6:d8:84:e4:2f:41:4d:85:e0:92:15:
                    f7:51:cd:9b:b7:af:a2:4b:04:c7:94:1e:00:f3:bc:
                    a6:88:8a:8d:e1:de:5f:e8:c8:dc:ac:f8:65:11:24:
                    86:6c:d2:03:7c:85:48:82:86:99:4e:fb:62:07:9f:
                    58:8c:4c:14:26:30:e7:8f:4c:d0:d6:07:e8:40:c4:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:67:E4:5A:73:F1:56:69:73:79:DC:76:EC:9A:68:F6:38:55:02
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:7e:be:ff:19:ea:3f:e7:99:27:cf:6a:3f:68:c5:fa:7b:01:
         af:13:46:c9:22:75:fc:52:b3:f9:dc:63:33:56:f9:ac:d0:78:
         c0:32:f6:fa:78:ae:89:cb:63:08:c1:69:f7:f4:74:3b:76:7c:
         75:f5:c8:61:21:69:4d:8f:a2:a1:47:11:fd:0b:a2:a3:83:22:
         ce:3e:dc:fe:6b:6b:83:b3:76:65:aa:10:fe:d2:7f:a8:30:c0:
         59:5d:cf:20:94:41:87:47:4a:6e:73:93:fc:b0:c3:6e:31:b5:
         28:00:5a:a9:98:55:a1:5e:f5:30:31:b6:53:49:97:a1:20:e9:
         d5:61:6e:cc:a8:e6:48:f0:cb:10:d1:05:a8:f0:5a:dc:a4:a4:
         6e:c1:c2:96:fd:6b:35:09:f0:2e:33:51:e9:ed:47:14:db:70:
         9d:fd:f5:bf:57:3d:a8:df:12:44:9c:51:b1:ff:96:66:8a:db:
         c5:a3:84:c9:18:8c:fe:68:2e:87:54:e4:6c:a7:e1:af:9a:cb:
         5f:45:39:f8:5d:a3:70:59:66:55:c6:2c:ee:3f:c6:20:39:04:
         e6:47:0d:ae:e3:78:77:c6:0e:70:77:91:c2:7d:32:7c:de:51:
         b7:8a:43:37:c4:f4:c4:75:05:87:02:35:98:4b:04:cd:9c:5c:
         b1:8a:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:58:41 2026 by rpki-client