Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa
File:                     E11FA920F11A11EB9F005358C4F9AE02.roa (raw, json)
Hash identifier:          x0u4J3Ru2QqZ97xOZDUimIcw5xB+wheRg/RnoO7aroY=
Subject key identifier:   88:EF:6C:E7:07:8A:86:2B:B9:21:CE:F0:BC:D9:66:B4:66:B0:F6:EF
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       062D
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 23:43:58 +0000
ROA not before:           Fri 31 Jul 2026 23:43:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137398
IP address blocks:        103.167.80.0/24 maxlen: 24
                          103.169.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
        Validity
            Not Before: Jul 31 23:43:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6d333e-40ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:9d:46:33:be:97:7d:18:be:3e:40:da:1a:
                    93:41:f2:25:2f:89:4b:92:c3:52:6a:be:2e:b8:ef:
                    3b:24:a6:82:d4:4c:8d:bd:e5:47:6d:89:4c:14:39:
                    f4:0b:a9:a4:51:3a:94:5a:75:f5:43:e1:b6:48:b5:
                    c1:3a:a3:10:32:4e:05:56:ca:12:8b:49:98:89:77:
                    7f:7d:8b:63:b4:64:2f:17:78:8e:58:ca:68:29:9e:
                    da:e6:2e:ea:f1:07:01:37:13:61:19:1a:eb:d3:d5:
                    8c:4d:75:c9:49:45:c6:9b:d0:da:fe:d2:b4:03:c1:
                    a8:b1:c9:4c:75:f7:17:1d:6f:2f:fd:94:d1:74:a0:
                    dd:da:cc:e5:0a:ee:59:a3:df:da:56:c5:a9:fd:86:
                    b2:08:df:23:a3:eb:f3:05:ad:1e:9a:21:ce:22:8a:
                    46:a4:b3:e2:6a:cf:1a:5e:a3:5d:e4:fe:75:b8:db:
                    19:61:89:bc:8d:f9:8c:aa:6e:10:66:e6:de:e7:e1:
                    34:09:65:3b:78:20:1c:c2:1b:a6:4b:90:1e:59:d4:
                    2d:5f:86:79:7c:1e:31:12:a7:be:bb:8f:12:a4:30:
                    bf:3b:93:a6:31:c1:39:f3:79:bf:25:49:00:b7:d3:
                    cd:fc:32:90:b2:f1:17:06:9f:3f:bb:62:66:16:10:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:6C:E7:07:8A:86:2B:B9:21:CE:F0:BC:D9:66:B4:66:B0:F6:EF
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.80.0/24
                  103.169.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:1f:7f:b3:b0:6b:34:34:2b:aa:89:62:3c:71:5b:c4:18:63:
         1f:5e:c6:3c:4e:05:13:3a:cb:7f:3d:a5:4d:74:a8:90:21:49:
         2e:6c:0f:fe:2d:59:b0:c4:05:72:83:f5:4d:57:10:c8:a9:88:
         4f:86:98:10:a8:63:1e:41:6f:74:40:25:73:bc:ac:fd:5e:a8:
         4c:d9:76:46:28:fb:5a:ba:b3:ea:fc:ae:93:30:81:06:13:f4:
         d1:20:cc:f7:2d:cf:6f:37:ba:f7:5d:f0:7b:0f:da:f1:37:ba:
         c6:10:f1:68:eb:b5:a8:d3:d0:bf:b1:bb:12:f4:9d:57:01:cb:
         b1:ba:1e:14:fe:41:63:fe:8a:14:6b:3a:af:c1:7a:88:88:d3:
         d4:05:23:24:cd:0f:ec:b0:67:d8:99:df:05:e4:ac:82:83:f8:
         5f:04:87:09:ee:01:c8:51:53:bf:03:09:cd:f0:00:1e:66:54:
         b6:c0:3e:60:e7:3a:6e:10:e5:28:c7:19:5f:a3:cc:b8:7e:23:
         2b:81:94:ff:45:ba:01:69:80:ef:e2:ff:ab:df:ab:b9:6b:c8:
         6d:37:24:95:c4:85:42:87:75:63:91:96:d1:2e:2e:4e:75:70:
         36:5e:f0:53:4b:47:57:49:a3:06:34:f1:55:5e:56:4a:29:73:
         1e:b8:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:49 2026 by rpki-client