Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
File:                     0153CD24917111F1B35E84E13111F970.roa (raw, json)
Hash identifier:          gpbfqZ64C5JfvxlcGssQB3FMKbhNFMGDd3/tTDBuG6k=
Subject key identifier:   D6:48:6B:FF:1D:89:21:CA:DC:DB:BF:05:40:09:39:AE:63:DF:AA:E2
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       018C
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
Signing time:             Thu 06 Aug 2026 08:29:57 +0000
ROA not before:           Thu 06 Aug 2026 08:29:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7607
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 05:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Aug  6 08:29:57 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a744604-e3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:08:5d:f7:ad:ec:df:fc:a7:7e:8c:92:ac:
                    af:c1:dd:2f:35:8e:c7:16:21:6b:e6:28:cf:69:de:
                    39:0e:c4:82:25:5a:63:47:41:01:68:90:0f:df:b1:
                    0a:44:6c:04:cb:dc:85:32:c3:fd:aa:f8:52:d7:ee:
                    2b:06:dc:2b:d2:d8:15:22:fc:5f:be:97:1a:cd:03:
                    3e:59:3c:6a:19:71:fa:39:3e:7c:8e:fa:7b:90:7a:
                    b2:ef:92:b8:be:87:c3:20:6f:ef:75:1d:d6:a8:35:
                    06:ce:6c:d4:aa:96:b0:2f:22:85:be:22:f2:d3:4c:
                    6f:6e:58:ab:52:78:0e:db:ea:9e:db:37:f0:cf:5c:
                    f6:c4:b0:bd:a2:6a:e1:57:8f:1d:0a:56:cd:3d:64:
                    5b:4b:c0:ab:11:d9:d8:97:ba:c8:e4:f4:84:e1:85:
                    21:97:08:e7:ab:a9:61:90:59:4c:4f:28:fa:02:53:
                    31:39:02:64:18:07:b8:d4:6d:84:a5:41:a7:d9:74:
                    bc:eb:b6:4e:b4:dc:0d:fb:05:35:db:cf:5b:77:08:
                    0e:d6:17:9e:6f:fe:bb:68:6e:f3:c8:41:c0:6e:af:
                    7e:49:9a:09:93:17:d1:9a:60:ba:fb:ce:5b:c8:81:
                    1f:0d:cf:7f:f6:98:bb:7b:a6:46:c5:0c:05:ee:20:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:6B:FF:1D:89:21:CA:DC:DB:BF:05:40:09:39:AE:63:DF:AA:E2
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:85:f7:af:5e:78:c0:e8:43:d9:76:75:4c:d2:c8:23:ac:
         96:01:a8:15:80:f6:71:16:41:7c:76:4d:8d:68:94:57:a0:a1:
         d0:87:e5:63:3e:79:19:b5:89:5e:41:bc:87:87:7b:c9:1c:04:
         d3:80:78:c6:b0:79:41:dd:78:95:94:0f:30:5a:bf:9c:b9:17:
         df:8f:0f:a6:ce:1b:af:69:7d:7f:cf:9f:e4:28:45:c5:48:6b:
         c9:42:3d:79:e5:4d:d9:3e:6c:fe:04:f4:2a:d4:4f:92:e3:a4:
         22:66:8f:dc:e7:19:19:b0:ba:ed:a3:80:65:f6:00:ed:50:f9:
         54:c9:f1:33:a2:9e:69:46:2a:90:d8:3b:82:a5:75:5e:75:e6:
         b1:8b:82:fd:48:5e:be:9a:fc:4d:ce:0a:2a:a6:cd:3e:ce:1f:
         97:7e:3c:2f:89:d1:25:7c:40:6b:59:21:88:27:7e:62:9d:2d:
         2a:18:1e:f3:50:f4:e1:0e:84:9b:37:1c:47:8f:e4:2d:a2:42:
         58:a8:3a:3d:a0:41:ab:a1:fe:a9:fb:1e:d7:ec:2d:ad:3f:b3:
         1f:8d:80:bf:c5:ce:52:85:e7:dc:8b:e7:d6:0c:05:e1:76:ad:
         84:a0:43:04:21:48:08:8f:d8:85:ea:5c:14:a0:d3:2d:c7:fa:
         96:1d:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:39:24 2026 by rpki-client