Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/6CD1CCC2936511F1BD100F9E4D11F970.roa
File:                     6CD1CCC2936511F1BD100F9E4D11F970.roa (raw, json)
Hash identifier:          dZ9acP+IC2vpWlnU3I1L/+m4j2givZ31tPSUaysK2oA=
Subject key identifier:   56:3A:5D:F1:00:3E:B7:2E:3C:D3:2C:38:9F:7B:A3:D3:23:EF:DE:DF
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       045E
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/6CD1CCC2936511F1BD100F9E4D11F970.roa
Signing time:             Sat 08 Aug 2026 20:12:05 +0000
ROA not before:           Sat 08 Aug 2026 20:12:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136787
IP address blocks:        103.110.144.0/24 maxlen: 24
                          103.114.57.0/24 maxlen: 24
                          139.5.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 01:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Aug  8 20:12:05 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a778d95-6b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:33:1c:58:fe:68:16:4c:c2:f1:0f:6d:00:
                    3d:64:be:e2:09:f1:05:01:32:c7:8c:ec:e7:90:58:
                    75:8a:0a:b5:00:89:87:90:ba:b8:b3:1c:59:70:d0:
                    96:13:00:63:0b:57:74:54:72:ed:fc:42:58:ce:46:
                    65:a0:f7:fb:85:fb:7f:40:6a:4d:8b:a0:2a:69:48:
                    af:a2:9b:5f:13:e4:ba:b8:33:c1:b6:aa:5e:a1:a8:
                    f3:69:ba:f1:b9:f8:7d:66:89:46:d6:ab:0a:c6:5d:
                    68:2f:9e:13:81:26:ed:96:23:4b:c2:1d:95:11:95:
                    e7:77:60:8a:91:b9:54:19:0d:25:29:08:3d:c3:11:
                    4c:55:5e:7d:3f:73:3e:93:37:97:4d:36:e1:c1:58:
                    03:c9:c5:f7:0f:86:46:80:c1:8c:cf:34:01:69:c6:
                    ad:20:be:67:40:8c:f0:ab:6a:cd:5d:1f:c0:d9:8a:
                    69:a0:27:82:89:11:23:7e:45:17:4c:b0:5e:20:71:
                    80:85:13:d3:37:40:28:13:ae:1a:4e:51:a6:f5:14:
                    e9:03:18:98:e7:01:f1:5d:dc:02:3f:9b:c6:fd:6c:
                    bd:ac:3f:94:99:e1:d8:b2:a2:7c:9c:2c:fe:32:aa:
                    f2:34:fc:96:36:2f:2d:17:ea:fb:ed:80:18:95:ea:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3A:5D:F1:00:3E:B7:2E:3C:D3:2C:38:9F:7B:A3:D3:23:EF:DE:DF
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/6CD1CCC2936511F1BD100F9E4D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.144.0/24
                  103.114.57.0/24
                  139.5.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:51:81:38:16:ec:57:36:56:9e:8b:38:af:05:4d:5d:45:cd:
         70:8c:25:d1:ef:d5:22:f0:ce:df:80:ea:de:7c:3f:e0:b2:8f:
         05:d6:70:61:5b:fa:d2:25:e1:c0:45:9e:41:04:fd:0b:dc:e3:
         44:d6:ad:eb:e5:27:e2:31:47:51:1a:06:48:17:05:46:37:37:
         63:3f:ca:d8:18:ce:18:ff:3b:b0:64:37:ca:96:9b:c5:61:40:
         6f:51:35:e9:95:3f:af:88:79:38:7f:b7:20:72:58:6d:8a:31:
         f8:69:2b:30:ed:86:3c:b6:c6:b6:b2:a4:a2:ad:8e:de:43:d9:
         df:d2:86:b0:7f:79:6f:24:e4:f5:08:0d:65:5d:a5:45:0e:83:
         15:1c:be:f7:65:a7:18:fe:bf:06:ee:a9:ba:36:2c:1e:0b:4b:
         03:cd:64:b3:1d:07:4d:44:df:75:f7:ad:b3:1e:74:dd:53:30:
         ed:b3:62:69:6e:01:cc:b8:89:db:ee:3b:66:f0:bc:5f:9a:14:
         24:c5:50:71:2f:95:3a:3b:0e:35:fc:4d:d4:60:52:39:06:63:
         2d:cb:c7:9a:df:0a:ef:e2:e6:e4:44:bc:ec:99:c0:ac:b7:5a:
         c6:e8:2f:2d:0c:d1:95:bd:66:fc:e0:7e:77:2e:6e:5b:df:8d:
         b4:fb:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:17:43 2026 by rpki-client