Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
File:                     A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (raw, json)
Hash identifier:          QCQ6bR1pTD4SeCn2i94ZFGCJ6By44dRRF5BHDZRZ55w=
Subject key identifier:   20:90:F5:28:FC:AA:1C:1B:D4:DE:C8:E2:D0:A8:DA:D3:87:37:02:67
Certificate issuer:       /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial:       090C
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 20:40:15 +0000
ROA not before:           Wed 30 Sep 2026 20:40:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140993
IP address blocks:        103.154.156.0/23 maxlen: 23
                          103.154.156.0/24 maxlen: 24
                          103.154.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
                          rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 20:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
        Validity
            Not Before: Sep 30 20:40:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd73af-e32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:55:03:e0:a3:9d:15:2f:e5:35:4d:5c:2b:
                    2c:4f:7e:ce:5a:30:8e:4f:8a:3e:2d:47:e1:23:5c:
                    72:e5:b9:96:5e:b7:59:c9:1c:91:6e:2e:2e:ce:3a:
                    f4:c4:47:ab:e9:6c:02:6d:e5:b8:0e:07:df:18:64:
                    72:d3:fe:91:b7:68:80:1e:86:24:92:26:5b:f8:66:
                    a5:14:9f:08:d0:3d:2d:ff:d9:37:68:12:45:27:18:
                    33:5a:a1:c0:4e:8c:84:8d:1e:cb:26:87:c8:52:2d:
                    be:af:ab:20:9a:60:34:57:e5:ca:6f:b0:b5:d2:9a:
                    96:93:42:be:bc:a7:3f:e5:d3:60:40:cd:e2:69:3f:
                    dc:73:54:51:bd:7b:ef:8a:d5:14:cb:51:a9:39:22:
                    09:9f:52:97:dc:06:12:e9:c2:2b:ce:97:ee:6e:53:
                    15:62:7f:b9:c4:02:af:dd:75:cc:81:e8:11:5a:c1:
                    bc:72:6a:ae:75:dd:9f:4f:ee:5a:f8:ab:5d:2e:f6:
                    ea:8a:d5:a0:f7:16:83:19:02:8c:99:d0:13:3d:8d:
                    30:8d:88:43:f6:34:8f:47:2e:a6:da:b0:46:46:ee:
                    63:bb:85:6d:a2:5b:23:46:c3:80:73:d4:8c:65:c8:
                    13:74:ea:aa:b4:71:69:0d:f3:5b:a8:e0:84:dd:1d:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:F5:28:FC:AA:1C:1B:D4:DE:C8:E2:D0:A8:DA:D3:87:37:02:67
            X509v3 Authority Key Identifier:
                keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:23:d2:e0:d3:6f:df:1a:86:8d:85:fd:70:3d:e6:36:14:
         33:90:c6:26:d3:59:e2:fe:e8:50:d3:9b:84:f7:34:99:6d:14:
         0d:da:da:1d:d1:1c:10:c2:cb:9e:e4:8e:0d:bc:e4:f5:99:70:
         f3:d4:9a:0e:19:02:1d:b0:29:63:07:1b:14:9c:bb:a5:d2:7d:
         26:73:4a:15:65:9c:af:d9:dc:3d:82:af:03:c4:a8:c9:bb:6a:
         6b:d7:a2:f9:64:e0:50:20:5b:9d:60:4e:a6:ec:76:b3:59:b5:
         7f:37:43:25:a8:8b:58:93:3a:72:17:cd:25:7d:8e:b5:b5:89:
         4b:29:08:8e:c0:c6:70:63:4e:e0:82:b6:e6:38:18:b9:ad:09:
         b6:48:7c:9a:23:d9:01:90:47:56:fa:41:33:0a:3c:1b:f6:a2:
         7e:69:2f:39:f4:a5:3d:ac:bf:73:9b:02:48:31:11:ca:3d:1d:
         9e:f4:91:c2:a4:5b:4e:62:59:0d:ce:84:fd:73:e3:70:1c:ed:
         f3:4c:2c:5e:44:2c:0d:92:a0:a7:31:64:10:4d:d7:10:86:6f:
         4a:fd:70:39:bc:7d:2c:14:06:46:72:5a:64:cc:77:ca:1e:6b:
         73:f9:00:70:86:d8:52:2e:45:4b:93:ef:b6:1c:a9:c0:f6:08:
         fd:0e:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:42:37 2026 by rpki-client