Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa
File:                     3B31153A7EAF11F1AD3956B567A30FBC.roa (raw, json)
Hash identifier:          +FSo/bLhL935Bd0K6YMZLsxFgcC1GeAnpkcOFnacIto=
Subject key identifier:   0C:F7:31:D3:71:29:2F:2B:D2:78:74:07:90:61:15:86:C2:D0:16:19
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       072C
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa
Signing time:             Mon 13 Jul 2026 11:38:27 +0000
ROA not before:           Mon 13 Jul 2026 11:38:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     12083
IP address blocks:        103.97.228.0/24 maxlen: 24
                          103.106.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Jul 13 11:38:27 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a54ce33-aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:f3:2a:ac:2e:08:e3:de:6e:c1:72:69:1e:
                    9d:88:af:1f:39:7c:0b:1f:bd:5f:37:98:e6:1d:98:
                    94:36:c1:c1:3a:d1:e7:7f:e8:40:43:94:95:16:99:
                    4d:dc:aa:3b:c9:ac:a4:71:d9:40:48:3d:92:1a:6c:
                    27:02:19:f4:33:6f:4b:e8:f0:43:e1:6c:eb:77:c1:
                    cc:5e:4d:f6:8a:c4:90:6f:78:ea:e5:7b:2e:c0:82:
                    f3:5e:f7:cb:e3:10:43:5c:14:af:7c:3a:0c:68:dc:
                    22:fe:4f:b4:22:3f:02:9b:d3:12:03:82:a2:77:5e:
                    ef:ec:6a:1e:cc:4c:c4:a1:18:9a:80:d5:22:18:13:
                    53:ab:d8:7d:4f:c8:c4:05:21:6a:e1:4f:2d:63:a3:
                    76:9a:e6:96:59:ee:d1:41:7c:98:20:61:8a:70:98:
                    18:6a:80:74:c2:e8:a2:27:ff:29:2a:9e:25:14:ac:
                    54:84:a1:a8:f9:cc:b4:dd:f3:e7:2a:93:03:0c:66:
                    22:99:c7:a9:24:eb:4d:76:3f:33:43:71:c4:57:61:
                    eb:d9:c7:c0:22:17:94:ce:1a:fa:13:1f:e3:86:bf:
                    25:67:80:b9:cd:38:a8:b5:cd:56:da:fc:a9:71:bb:
                    d4:a0:5a:e4:f7:6e:d8:d8:b5:82:fb:f2:8e:50:99:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:31:D3:71:29:2F:2B:D2:78:74:07:90:61:15:86:C2:D0:16:19
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.228.0/24
                  103.106.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:f7:2a:75:0c:f1:cb:9d:3d:32:30:db:8e:37:79:93:3f:
         a7:64:db:5c:24:f6:e0:fd:02:d7:3c:cb:e3:b8:df:be:a9:2b:
         c0:2c:27:d2:c3:a3:a4:6c:3c:b9:ea:a9:89:2f:7e:3e:ac:55:
         8f:c3:a4:81:d6:11:cf:8a:ea:9a:4d:0f:41:d6:8d:57:64:c9:
         c0:ac:85:c5:88:81:c0:c7:19:4e:b0:b4:28:03:fa:03:44:54:
         be:ee:02:59:8d:35:62:7d:ff:69:ef:b9:8a:ab:82:4c:8a:cd:
         87:e5:45:72:a8:79:d3:c5:d9:e1:96:00:4d:c0:8e:86:04:65:
         eb:67:12:37:84:75:4f:e0:57:29:6a:b9:77:ed:d3:24:e4:a2:
         c4:1a:e1:e6:60:13:b9:0d:4d:0e:4e:41:60:a0:24:21:cd:df:
         be:4a:12:5e:77:a3:e3:7c:f8:81:19:a5:2f:2c:7a:ff:8a:53:
         2d:80:af:c2:5e:91:c2:68:a5:4b:6d:24:3a:c6:35:f7:b5:92:
         5d:8e:97:b2:ef:e2:b6:aa:3c:c3:59:6a:78:1f:b4:da:79:9a:
         1e:ef:0f:0d:da:97:0d:91:f0:e5:cb:cc:ad:1b:b5:05:ad:69:
         c0:a8:46:32:6d:c1:35:e3:dc:78:7b:c2:42:47:1e:64:22:0c:
         d8:5d:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:16 2026 by rpki-client