Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa
File:                     41121A8C9F5211EFA8F8A056C4F9AE02.roa (raw, json)
Hash identifier:          DgrISf8wMW93o1gP88Fcu6RvxMw+S3lnAYVwlOLIu3w=
Subject key identifier:   BA:51:A3:AF:42:8D:1D:6A:08:D8:8D:26:39:95:91:DD:42:69:3C:3C
Certificate issuer:       /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Certificate serial:       0153
Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 06:55:51 +0000
ROA not before:           Wed 05 Aug 2026 06:55:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139230
IP address blocks:        103.140.94.0/23 maxlen: 24
                          2001:df0:b780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
                          rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
        Validity
            Not Before: Aug  5 06:55:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72de77-e53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:12:6b:57:0c:83:9d:cc:20:8b:71:3c:9f:
                    fb:b4:75:85:1b:76:2a:de:36:c4:40:16:a2:a7:cc:
                    e1:1b:6a:82:1d:20:26:69:b9:d5:11:a5:79:b7:46:
                    0a:4f:5f:f0:d6:88:19:d9:0e:20:52:6e:0d:7f:8f:
                    6a:e5:69:a7:6e:ab:63:dd:0a:32:80:67:a1:57:93:
                    8d:6e:d3:14:45:2f:72:e7:66:e8:f9:1b:14:03:32:
                    66:d1:fc:20:a6:6b:b8:9a:0a:27:8b:59:75:d2:be:
                    e2:c3:81:41:2b:b8:05:5e:5d:46:4e:38:29:f8:da:
                    3a:42:d4:e0:5d:ee:17:17:9d:4e:29:7a:0c:03:88:
                    7b:44:69:14:02:c6:3d:d4:1e:aa:e5:51:10:f9:ce:
                    f8:be:39:13:d3:b6:61:6f:b3:d5:19:44:95:64:04:
                    7d:6f:8c:c3:cc:7e:e8:01:55:31:0f:28:53:54:c3:
                    d2:0b:1f:13:4b:34:aa:ac:ad:1b:d9:af:ec:77:d5:
                    38:d9:39:bd:bd:7f:12:43:5e:67:14:32:29:af:3a:
                    23:fa:70:1f:35:6d:fd:8f:6e:af:fb:ed:5b:8a:7e:
                    d5:ae:9b:95:c2:ef:4d:87:17:a5:46:25:5c:62:e6:
                    f5:c6:09:7d:f6:e5:52:96:a7:1b:0a:3e:dd:7a:d3:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:51:A3:AF:42:8D:1D:6A:08:D8:8D:26:39:95:91:DD:42:69:3C:3C
            X509v3 Authority Key Identifier:
                keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.94.0/23
                IPv6:
                  2001:df0:b780::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:df:8b:d5:37:a7:90:c3:7e:af:3b:f5:ed:ca:69:97:11:
         3e:fd:2f:a4:70:e4:da:24:c0:86:69:c1:21:d8:29:e6:b7:50:
         23:1f:d5:6f:7e:47:dd:0c:78:04:29:cb:49:f8:b7:e9:8d:ac:
         72:c4:48:cd:c4:6d:29:69:7e:21:5c:bd:b6:75:49:da:5e:5c:
         81:94:66:35:7c:9c:26:9c:66:70:80:15:87:57:51:05:3f:95:
         9f:65:94:5d:fa:51:49:f3:2a:07:28:20:32:01:5b:65:dc:23:
         a2:d5:cd:12:65:dc:76:41:9e:b5:de:a0:22:59:46:bb:c5:d3:
         96:f9:49:f5:cc:05:68:b7:35:08:18:0a:61:16:93:6b:9b:c8:
         4a:8e:36:26:f5:07:22:6d:d5:96:d9:74:8a:46:7c:4e:a1:82:
         1a:52:fd:76:6d:e8:95:33:14:34:4d:af:35:25:db:eb:df:a3:
         39:d1:9f:8f:93:67:28:f3:41:cd:0d:84:4b:7f:f3:a8:58:60:
         39:1b:19:ff:df:bc:4e:60:6b:b8:57:68:37:66:1d:3f:d3:04:
         a1:06:bb:eb:66:f3:4a:89:7c:d4:db:df:51:e1:45:40:06:20:
         d7:22:13:e5:7c:bf:00:62:f8:cf:97:cb:87:b8:98:6c:6b:65:
         0d:f8:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:01 2026 by rpki-client