Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
File:                     511564A2ED2B11F08C401BDD456F56BC.roa (raw, json)
Hash identifier:          vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=
Subject key identifier:   99:E0:0D:40:72:9F:F4:4D:EF:5B:71:82:4B:24:8E:02:7F:2B:7E:84
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0271
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
Signing time:             Fri 31 Jul 2026 03:52:20 +0000
ROA not before:           Fri 31 Jul 2026 03:52:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     148996
IP address blocks:        103.141.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul 31 03:52:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c1bf4-7043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:d7:28:bc:99:fe:f1:6a:69:83:d7:2f:a2:
                    73:68:89:ae:94:8c:2b:fe:51:1b:cb:c0:c8:d7:3b:
                    10:95:24:27:22:21:de:9f:e6:aa:f7:b9:be:43:ee:
                    fb:86:c9:0e:24:a6:59:8e:54:cd:cf:36:ef:76:56:
                    a4:fa:0c:2c:09:fb:94:f5:e3:25:a8:b8:0c:13:01:
                    4b:7b:cc:ae:1c:27:71:b2:53:4e:d0:33:c8:4c:5c:
                    cb:7c:ea:77:7a:92:e9:13:c6:2b:65:54:87:d7:28:
                    39:f1:77:4f:08:84:e0:57:8c:87:fe:0f:9a:93:81:
                    e0:b1:57:2e:01:70:84:f2:4a:a7:a2:45:51:7f:84:
                    1c:d6:24:22:b9:11:85:c6:9a:aa:3f:29:92:de:e0:
                    d4:c7:2c:c0:80:8b:42:67:bc:6f:4e:92:26:db:b2:
                    6e:b4:be:a4:4b:34:2b:74:48:b1:39:12:4c:f2:eb:
                    14:95:b3:ce:3c:59:fa:24:89:e7:57:bf:47:fb:3e:
                    6c:b8:08:99:95:00:6c:b7:19:f5:cb:7f:2f:2c:be:
                    0e:a9:fc:b6:88:2b:ee:ab:72:d1:36:8a:27:6c:25:
                    78:cf:53:cd:a1:da:e3:02:7a:ab:81:41:05:a0:8a:
                    23:01:97:ab:88:f8:34:4a:37:06:a3:9d:b0:52:3f:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E0:0D:40:72:9F:F4:4D:EF:5B:71:82:4B:24:8E:02:7F:2B:7E:84
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:17:15:54:9c:ce:31:3d:18:2d:57:5a:11:2a:48:d9:3f:
         f1:29:90:11:57:a1:9f:4d:2a:d8:7d:11:0a:cd:68:21:b0:30:
         dc:27:f6:1e:e8:f6:8d:f6:b0:2a:78:83:8b:90:7a:07:67:03:
         56:ff:4a:b6:f1:d3:27:1b:80:83:44:6e:87:e0:a2:b6:3f:18:
         71:ba:3e:de:ab:e1:88:22:ba:82:3e:c3:5a:5c:2f:56:7e:a4:
         7e:83:3e:20:8b:f8:7c:f5:12:0e:24:85:1d:df:51:ac:6a:a6:
         70:62:bc:f3:26:e6:b6:e8:b7:c9:ac:83:ef:f2:c7:04:72:89:
         4a:5d:88:96:dd:e8:8b:6a:45:0b:06:1c:c7:cf:0f:9c:7f:a1:
         06:d2:77:d6:cc:d5:06:dd:98:53:86:e3:47:97:89:fa:16:9c:
         c4:06:ac:5a:db:55:e5:58:65:ac:5e:f9:08:aa:c3:c4:0b:a2:
         f2:0b:8d:5a:b2:b5:e1:b0:b6:dc:17:64:be:18:e1:a2:1d:c0:
         9b:a1:ac:ed:90:fe:81:db:a6:bd:19:d6:b3:1a:19:c7:55:9a:
         5f:c3:99:12:e6:eb:50:cc:01:6d:65:af:30:ce:86:af:cd:85:
         af:82:c0:61:7a:b5:7d:d4:54:e5:f5:db:7c:21:1d:1f:f9:84:
         9b:6f:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:50:44 2026 by rpki-client