Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa
File:                     3D0E47EC7EAF11F1AD3956B567A30FBC.roa (raw, json)
Hash identifier:          YvojBqn8SWkr/riiUGs8sdpBKcnb4P/8+RaY1QooLjU=
Subject key identifier:   36:E4:EE:85:AD:CA:3D:90:A5:54:2E:24:84:C0:2A:6F:99:4B:F7:9B
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       076E
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa
Signing time:             Thu 08 Oct 2026 22:43:08 +0000
ROA not before:           Thu 08 Oct 2026 22:43:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7029
IP address blocks:        103.97.228.0/24 maxlen: 24
                          103.106.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 22:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Oct  8 22:43:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ac81c7c-43c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:44:41:65:a6:d0:35:10:1c:69:be:ae:20:
                    d1:44:aa:d7:62:a0:f4:2c:9c:d5:65:5e:41:22:ce:
                    d3:8c:e0:01:a2:71:11:6a:f1:50:03:b8:d7:0d:5d:
                    eb:66:10:91:03:fb:53:95:3e:17:ee:74:ba:38:5f:
                    26:82:3b:2e:71:2f:fd:df:30:76:01:4a:b4:a8:8c:
                    76:7a:d3:78:ee:03:95:4c:84:8e:ab:7b:22:a6:6d:
                    19:ba:d1:6e:f8:a2:77:8a:33:5c:ee:0a:45:68:97:
                    07:50:d9:f0:b8:34:2f:1c:eb:d3:cd:67:86:ba:f8:
                    a4:86:06:ae:f9:f6:36:b6:c9:43:c0:13:fa:ea:ee:
                    2f:82:69:98:30:67:e6:ab:be:7f:39:e3:40:e5:f0:
                    a3:bd:aa:a0:07:3d:f2:d4:ec:e3:dd:c4:af:bf:50:
                    62:11:e6:bc:1f:f3:cd:34:d2:f2:99:a6:78:8a:13:
                    66:96:8f:87:32:8f:b7:15:b2:03:db:12:46:61:b5:
                    ea:1d:8d:4b:85:20:b6:0b:1e:90:24:3a:ac:31:10:
                    60:08:1b:e4:d9:bc:10:b9:34:b1:e9:0e:fc:b2:a1:
                    eb:e5:3b:d7:53:34:0c:2a:33:6d:1f:74:93:8d:27:
                    c1:df:2e:63:35:17:04:eb:0a:b0:31:b9:49:a3:12:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:EE:85:AD:CA:3D:90:A5:54:2E:24:84:C0:2A:6F:99:4B:F7:9B
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.228.0/24
                  103.106.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:e5:39:2a:fe:a9:39:43:26:aa:fb:2b:24:38:4a:86:bf:
         99:14:1d:83:52:73:59:08:bb:b7:80:6e:4b:78:54:9c:a6:ff:
         39:a7:7c:4c:78:ca:4e:5f:9f:9b:f4:3b:2f:a4:e5:ab:fd:17:
         ed:4e:d9:a4:fe:a6:2e:b2:c5:f5:84:c6:d4:00:cc:c4:a3:3a:
         ea:27:59:e8:20:fb:48:ad:4e:57:8b:5f:36:fe:70:97:57:f6:
         73:46:fd:7c:50:2d:0a:1c:b5:00:2b:1c:dd:1b:52:44:c3:05:
         3f:99:f8:67:09:ea:a8:11:63:f7:66:f0:2c:6e:0c:0f:7c:4b:
         6f:9f:fc:9c:92:b9:62:fb:b0:51:c8:a6:c5:ab:cb:58:78:cb:
         26:1b:b5:7c:ff:17:91:79:7a:e4:bd:4d:9b:01:ac:74:45:5d:
         77:33:96:56:8c:8b:c1:fa:84:cc:bf:02:87:38:99:18:a6:15:
         46:db:ad:4f:13:19:46:d9:b6:8d:be:79:3e:22:87:bf:e9:9c:
         27:64:8b:13:ec:2b:fc:c3:5b:b1:ad:31:8a:ab:8c:85:97:7a:
         04:9b:d4:93:2e:b5:11:07:53:e4:c0:f7:ab:b8:4c:4a:f5:da:
         f7:da:23:7d:88:3e:d7:87:98:3d:e7:b1:17:4c:59:cb:d5:de:
         e4:ce:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:49:44 2026 by rpki-client