Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa
File:                     A1B8513612FE11ED8A1DA356C4F9AE02.roa (raw, json)
Hash identifier:          BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=
Subject key identifier:   5B:BB:6F:7F:FF:36:92:15:A6:48:DF:1F:7E:40:F5:66:B3:26:70:67
Certificate issuer:       /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial:       0359
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 01:50:59 +0000
ROA not before:           Wed 05 Aug 2026 01:50:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150150
IP address blocks:        103.8.215.0/24 maxlen: 24
                          2402:3960::/32 maxlen: 32
                          2402:3960:1000::/48 maxlen: 48
                          2402:3960:2000::/48 maxlen: 48
                          2402:3960:3000::/48 maxlen: 48
                          2402:3960:4000::/48 maxlen: 48
                          2402:3960:5000::/48 maxlen: 48
                          2402:3960:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
                          rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
        Validity
            Not Before: Aug  5 01:50:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a729703-707b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:a0:11:17:f5:f6:df:8b:bd:73:10:5d:71:
                    ef:80:b4:87:b3:63:7e:1a:d6:22:30:af:08:7d:90:
                    c0:84:40:e6:40:f0:f7:6b:25:40:0e:41:2b:d7:bf:
                    e7:43:52:46:a2:81:17:e9:ac:5f:d8:76:7a:09:39:
                    48:70:20:13:0e:3d:cf:ff:1e:ba:cd:1e:f2:66:41:
                    f6:b4:f8:c8:0b:8e:51:95:e1:9b:ef:24:f7:bb:dd:
                    5f:8a:6a:11:8c:49:bc:cc:16:ab:2d:b9:fd:74:3a:
                    c7:7d:f8:f4:43:dc:d4:03:6d:60:5e:2b:26:ba:16:
                    71:13:e5:61:23:fe:67:09:07:3e:70:cb:c2:87:30:
                    28:8b:4e:ff:3e:96:4f:28:b0:b7:64:95:a2:25:ae:
                    d6:0b:5b:2f:b7:fa:d7:62:5e:63:3c:06:45:b3:3c:
                    6d:58:df:78:d6:40:3f:d7:a6:c2:aa:fe:4a:f1:bb:
                    ff:2a:7e:3c:26:c7:c1:6b:e4:9a:27:ba:ef:af:81:
                    b8:0e:a6:dc:b5:60:89:c6:af:ea:34:20:36:9b:86:
                    e7:e6:5b:e5:5d:9e:20:c1:33:7b:ef:15:b1:0c:89:
                    b6:f8:07:5d:39:ec:0a:2e:70:01:5c:27:f1:ed:be:
                    78:dd:50:a3:f6:98:94:81:2b:ee:d1:df:82:51:9e:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BB:6F:7F:FF:36:92:15:A6:48:DF:1F:7E:40:F5:66:B3:26:70:67
            X509v3 Authority Key Identifier:
                keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.215.0/24
                IPv6:
                  2402:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:8e:b1:63:f2:fd:6b:e2:49:8f:ec:e2:c4:5d:7d:db:13:
         52:c0:3f:e2:48:77:62:85:53:86:92:a6:63:2e:5a:24:1d:61:
         2c:8e:3a:9f:31:de:91:63:12:cc:f9:73:3f:f4:7f:3e:c8:e2:
         9b:70:5d:76:9f:74:fd:83:fb:4f:cb:ff:18:1f:3e:b5:96:81:
         28:b5:ea:a5:83:8d:c3:4b:3d:2f:63:fd:f4:f5:d9:28:51:21:
         25:ac:52:06:39:c2:0d:27:2d:fe:a7:df:61:c1:81:d1:bd:c4:
         7b:bc:ed:73:a2:bf:0f:98:70:1b:35:9f:c0:a5:58:a3:f4:c4:
         a1:5f:d0:d9:71:b2:22:69:a3:ed:3d:92:46:d3:a2:66:11:f2:
         e6:ed:fd:d9:6a:d9:1e:f6:66:94:b6:cd:af:ab:3c:e4:b5:84:
         bf:c3:f3:cd:68:2c:c2:19:43:cb:6d:d0:27:e6:f6:80:2e:9a:
         1a:af:30:6e:1b:ef:07:fb:e7:fe:1c:34:24:ee:85:74:e4:2e:
         b7:18:ba:53:be:f5:8a:49:f6:64:1f:89:d0:0b:24:28:0d:13:
         5f:81:8a:55:25:e7:48:93:16:fb:bd:91:0f:f9:e8:88:43:65:
         a6:d5:af:15:16:53:58:1f:e4:c5:76:04:41:96:6a:16:bc:35:
         62:52:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:21 2026 by rpki-client