Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa
File:                     0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (raw, json)
Hash identifier:          dENkyXnpATnLgb025SowCVq24fI5D1cqXlVYxDEMzio=
Subject key identifier:   0E:BC:5A:1B:49:49:F6:10:91:87:E2:55:8B:DC:94:B1:51:F6:42:06
Certificate issuer:       /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88
Certificate serial:       0FD0
Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa
Signing time:             Sun 02 Aug 2026 17:34:47 +0000
ROA not before:           Sun 02 Aug 2026 17:34:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135413
IP address blocks:        103.139.8.0/23 maxlen: 23
                          103.139.8.0/24 maxlen: 24
                          2001:df0:6180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl
                          rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4048 (0xfd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88
        Validity
            Not Before: Aug  2 17:34:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6f7fb7-75e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:76:9c:68:79:69:d9:17:e0:b1:82:ac:d9:
                    07:c6:82:5f:76:64:b6:41:cf:23:f8:9f:da:91:04:
                    84:92:61:e4:39:b4:a9:83:9c:c0:cf:60:6b:53:d5:
                    da:48:f4:23:1e:04:ce:c9:2f:10:cd:e1:45:7c:0f:
                    b9:b0:0a:43:ae:7e:f9:5a:2e:c2:1e:fb:b9:52:37:
                    03:88:b1:2d:1c:4b:d7:55:62:fc:08:5b:80:55:75:
                    32:c1:e9:32:34:ec:13:c0:ff:58:2c:a1:9a:c1:c4:
                    ba:bc:95:61:12:47:3b:b6:e2:a8:67:90:b3:66:15:
                    c4:fe:ff:dc:18:39:e7:cd:46:c2:78:81:3f:61:6a:
                    30:50:01:2f:a5:00:2a:67:cd:38:43:c1:51:d6:bc:
                    c5:6b:b5:1d:22:66:d4:92:75:78:1f:53:98:7b:35:
                    69:dc:da:d2:0f:a8:37:c3:08:c2:ee:b8:e6:74:98:
                    2b:d5:9e:c4:7a:5e:a6:10:88:d8:e1:67:6c:2e:d8:
                    a8:9d:f0:11:a0:af:4a:83:9f:8e:71:ca:5f:39:d3:
                    98:bd:4b:e3:c2:0d:24:79:ee:97:a3:38:3b:4c:b6:
                    75:d4:aa:ab:1e:35:18:99:b9:87:1f:01:63:0e:12:
                    c2:ac:f1:54:14:00:b0:a7:71:54:4d:74:d5:6f:44:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:5A:1B:49:49:F6:10:91:87:E2:55:8B:DC:94:B1:51:F6:42:06
            X509v3 Authority Key Identifier:
                keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.8.0/23
                IPv6:
                  2001:df0:6180::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:b4:b5:f5:e3:45:06:18:40:f7:02:a1:33:bf:a4:2b:cf:
         a4:06:cc:c9:6a:83:84:ca:86:cf:f0:6c:24:b5:01:cd:dc:3a:
         61:2c:71:ad:66:a2:39:97:28:30:f8:bc:5e:3a:23:ec:ba:cc:
         b8:b3:b3:c3:d7:27:36:e2:07:cf:fc:14:2d:9e:d5:d5:22:6d:
         07:5d:6c:76:75:82:fc:db:df:ae:f0:57:90:31:4e:59:36:a8:
         9f:a4:06:d1:bf:1b:33:a7:a9:e7:d9:5e:1a:71:90:83:45:80:
         c8:aa:d5:f0:f9:be:bf:0b:28:8a:f6:c3:1e:9c:40:7f:21:3a:
         35:20:20:44:70:17:68:34:64:76:b0:0d:21:6c:4d:e8:78:fd:
         3f:c0:db:09:c1:02:0a:0a:7c:03:cf:37:df:b7:77:3c:95:e6:
         ec:a9:2c:19:f8:02:b4:b5:8d:3d:df:09:ad:c9:c4:ac:70:c8:
         31:2f:fe:5a:4c:b7:6e:5a:52:41:db:37:60:b1:0d:8b:a7:77:
         82:12:15:d4:67:1d:39:2a:76:3e:61:51:43:63:31:3a:29:27:
         10:76:ec:9b:e3:c7:6a:ca:1a:d0:fd:6b:aa:70:ff:0f:d7:27:
         1b:b7:d4:3a:5f:64:f6:4f:42:37:67:8f:38:9f:1e:51:99:3d:
         9a:b0:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:28 2026 by rpki-client