Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/7544E998CB7D11F1826C8EE23511F970.roa
File:                     7544E998CB7D11F1826C8EE23511F970.roa (raw, json)
Hash identifier:          QCzCyJdRETPcLtnTXbtGdh8W1Lu3AIjlFmnSSXgG604=
Subject key identifier:   B2:FA:1F:64:2D:1D:1B:B0:AB:5E:61:96:F2:D2:E7:26:3F:15:19:4B
Certificate issuer:       /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial:       04BB
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/7544E998CB7D11F1826C8EE23511F970.roa
Signing time:             Thu 12 Nov 2026 23:47:11 +0000
ROA not before:           Thu 12 Nov 2026 23:47:10 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     141210
IP address blocks:        103.144.0.0/23 maxlen: 23
                          103.144.0.0/24 maxlen: 24
                          103.144.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
        Validity
            Not Before: Nov 12 23:47:10 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6af64ffe-53ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:69:dc:b3:46:91:0a:ff:c0:8b:30:2f:bb:
                    55:e3:37:bd:9e:5c:f1:f8:0d:f5:12:33:d6:87:d0:
                    c9:f1:1f:a7:01:be:0c:b5:28:0c:38:1a:51:36:10:
                    b6:b4:20:0a:b7:4b:d2:3a:ab:e4:98:b0:bc:b1:d8:
                    4f:e2:77:b6:b4:8e:68:ef:a8:7a:b5:48:11:e6:fb:
                    60:aa:b7:a3:eb:76:cd:4d:67:e4:d3:0e:86:2a:37:
                    f1:1b:3f:9c:75:30:5b:af:ac:99:d6:e1:08:08:36:
                    e4:71:b0:61:d1:13:68:c2:04:77:35:a9:d4:24:95:
                    49:15:1d:2b:7d:54:e4:42:4e:65:8f:43:4b:ba:01:
                    0b:9a:0b:de:95:7b:63:83:c3:36:7c:b3:12:55:27:
                    ce:37:8e:33:43:93:76:46:e4:50:5c:8e:d4:fa:a3:
                    66:69:bc:de:d7:72:c6:49:15:71:b5:10:13:83:8e:
                    1b:e7:c2:66:e5:91:8e:d3:0b:f9:45:bd:f8:69:7d:
                    d1:19:3d:a3:37:92:d6:69:af:85:db:48:8e:b8:e4:
                    8a:f8:0f:e4:27:ae:d6:88:f2:26:ec:67:62:52:eb:
                    57:70:9d:78:8b:0e:7f:93:59:00:1c:ff:56:55:64:
                    0c:19:23:91:be:7e:75:61:c2:51:80:50:aa:f1:2f:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FA:1F:64:2D:1D:1B:B0:AB:5E:61:96:F2:D2:E7:26:3F:15:19:4B
            X509v3 Authority Key Identifier:
                keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/7544E998CB7D11F1826C8EE23511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:96:f4:b6:cf:87:27:33:c7:57:c4:04:4f:1d:83:6b:ac:
         0e:e2:98:68:ff:86:74:db:f8:19:44:86:bf:cc:1a:14:8d:48:
         6a:42:c1:7a:8a:7f:05:26:ef:ab:88:39:39:ca:7f:70:d3:c3:
         49:23:a4:bd:3f:fa:52:22:f8:6c:0f:47:ea:dc:c1:35:ab:df:
         55:73:f3:ea:8b:e8:99:a9:e8:b5:bc:ed:3a:25:9f:7e:43:7e:
         cb:fd:b2:c2:a4:3e:65:6b:be:78:df:e8:f2:eb:4b:ef:61:0d:
         6d:2a:c7:d4:03:66:ba:ef:84:15:41:44:75:3c:af:a0:88:4f:
         72:2b:c4:0d:92:ad:7a:22:7f:a6:f4:e2:87:87:95:0d:c6:cd:
         ad:8e:93:64:ac:af:8b:54:3c:20:9b:6c:52:53:5b:c5:26:d8:
         0a:35:1b:b4:a9:b4:5e:0f:d7:34:67:77:39:13:03:7e:60:87:
         b9:ae:a2:9f:8f:be:a7:87:5a:07:46:12:14:53:6e:92:4c:73:
         ae:69:01:2e:28:aa:bb:77:35:8e:f9:1b:60:b9:33:8b:4f:3e:
         82:fe:9b:45:24:ea:2b:b0:6d:4a:3c:ee:aa:b0:e2:3e:f8:0f:
         0e:5e:45:13:50:6b:cf:bd:ca:51:ee:65:e6:fe:60:81:b6:7f:
         7f:57:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:26 2026 by rpki-client