Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/914E7A440FE611EC8DD2020EC4F9AE02.roa
File:                     914E7A440FE611EC8DD2020EC4F9AE02.roa (raw, json)
Hash identifier:          NbSBIJWbwX7GxGOx+eupym42UBPEe/Q7PepWtLZTCpM=
Subject key identifier:   33:45:B0:DE:55:CB:F0:41:CC:01:72:6E:0E:4C:DC:0F:27:38:68:54
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       05DE
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/914E7A440FE611EC8DD2020EC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 23:44:38 +0000
ROA not before:           Thu 06 Aug 2026 23:44:38 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     147011
IP address blocks:        103.172.250.0/23 maxlen: 24
                          2001:df7:7f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Aug  6 23:44:38 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a751c66-8af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:2d:60:3c:ce:95:31:31:a9:8e:0e:11:87:
                    16:6d:b4:db:c0:43:ab:69:f7:8a:5e:25:6b:d6:87:
                    9c:f1:69:c2:c9:90:5a:fe:fb:d1:9a:59:2f:0f:88:
                    99:41:ac:86:32:04:c0:af:78:df:3d:96:71:93:1a:
                    9b:b1:da:d7:84:b7:5c:30:32:f6:99:04:72:f0:b5:
                    ed:75:48:68:98:9e:ff:d1:a9:d6:ca:0a:c6:5d:d7:
                    17:94:a8:70:19:5a:d1:73:d5:ea:9e:16:ad:44:a5:
                    df:d6:97:10:60:fd:59:d6:d8:f9:6d:2d:2a:73:74:
                    75:78:a5:1c:e9:1a:eb:2a:b6:28:b9:8d:b5:f3:0b:
                    50:75:da:7c:97:dc:d8:82:2d:dc:22:dd:6f:3f:a5:
                    4e:8a:fb:b7:bc:03:b3:40:62:37:5f:08:63:6c:36:
                    7b:6c:2a:9f:b9:bf:75:5e:ae:5d:f5:af:e4:76:5a:
                    17:39:e8:e6:ca:b1:a9:91:f0:99:62:5e:e4:76:e1:
                    32:a0:8a:ee:8f:19:47:b1:0f:dc:34:86:ce:44:34:
                    c1:06:31:4a:1c:ea:7a:59:65:71:10:e3:b4:af:83:
                    71:1c:4a:cc:72:7a:77:50:29:8d:05:fd:71:7e:d1:
                    04:57:66:82:02:c8:36:ac:c9:27:9e:2b:67:bc:a4:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:B0:DE:55:CB:F0:41:CC:01:72:6E:0E:4C:DC:0F:27:38:68:54
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/914E7A440FE611EC8DD2020EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.250.0/23
                IPv6:
                  2001:df7:7f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:4d:78:98:c1:2b:8b:c2:6d:7f:91:5f:9f:11:e3:51:aa:
         b1:52:9f:97:1e:c5:1d:2e:d4:68:5e:99:48:dc:72:1f:9d:55:
         08:88:dd:34:67:89:48:d2:8f:88:86:e6:4d:46:77:78:b1:55:
         62:96:e0:de:c0:b1:e8:c9:f8:e6:70:5e:0a:89:49:02:18:f5:
         bb:c3:29:5c:84:a4:1b:3e:59:63:f3:b4:e8:8b:f3:62:cd:1a:
         5a:fb:4c:0c:7f:2d:de:24:b6:93:eb:62:43:4f:90:fe:89:21:
         49:19:d5:9d:99:99:42:54:87:df:29:e5:1f:28:fb:0b:0a:57:
         e4:55:cd:22:e4:9d:92:47:75:f9:89:23:46:a2:54:d7:df:ff:
         e3:33:ec:dd:24:ee:3c:eb:ba:b8:5e:1f:f4:4f:1c:1d:8a:af:
         ff:aa:10:41:5a:80:e0:25:25:df:11:62:66:ec:48:59:d2:2e:
         1d:9f:e2:13:07:82:df:e8:ca:7f:6b:91:35:53:93:b9:e6:b5:
         f8:dc:dd:b3:88:02:ae:2d:52:ca:c0:8f:b5:95:e6:d0:04:cb:
         3b:64:8c:12:df:4b:37:d1:9b:ec:8e:df:ac:fe:d7:4a:89:3b:
         74:10:c5:5e:6d:c7:ce:a6:66:5d:d2:d7:1e:a5:52:3e:4a:ed:
         ee:63:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:21 2026 by rpki-client