Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/A791AF14CF8211F0AAF9A481C4F9AE02.roa
File:                     A791AF14CF8211F0AAF9A481C4F9AE02.roa (raw, json)
Hash identifier:          ppNi38lhiBNB7Q6UOSSs1t7UtUP+WB5DnPLXstDa+Z4=
Subject key identifier:   9F:04:5D:1C:BB:A7:A4:41:E6:3B:8E:1C:CB:BB:80:21:66:DF:0E:91
Certificate issuer:       /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial:       0E8C
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/A791AF14CF8211F0AAF9A481C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 18:35:07 +0000
ROA not before:           Tue 18 Aug 2026 18:35:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134186
IP address blocks:        103.117.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
        Validity
            Not Before: Aug 18 18:35:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a84a5db-de0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:ab:ce:db:a0:8e:9a:c4:b6:eb:ea:5b:a0:
                    10:c9:d9:77:18:2e:5e:e3:54:6d:42:42:e2:37:99:
                    ab:01:cf:38:bf:e3:b7:1f:e1:3f:d7:79:b7:06:2f:
                    8d:53:e1:fb:a0:84:50:ac:f6:b0:cb:bb:c7:71:cc:
                    97:c6:15:5e:cc:49:68:68:37:8f:15:0e:d9:64:dc:
                    c5:6f:1a:76:06:25:fc:d3:3c:50:7a:39:d5:f2:b4:
                    c5:86:21:ea:3b:70:3a:71:ae:c6:fe:5c:d5:7d:f9:
                    59:1c:96:b5:df:da:b7:f1:09:81:55:f2:fc:cb:26:
                    84:0a:03:d2:f7:b9:44:8b:6f:05:23:c6:23:27:16:
                    7f:d5:72:48:05:3f:90:00:5a:4e:fa:37:a5:11:00:
                    88:1c:1a:4a:1e:5a:43:de:bc:b5:12:5b:6e:2e:76:
                    0b:4a:f4:89:02:b8:3b:32:9c:39:d8:7b:f7:6b:3f:
                    07:8e:bc:17:a9:7b:85:b8:c7:e3:8f:e8:5c:31:fc:
                    7c:1c:e5:58:f0:ae:0c:c7:80:f8:14:d4:6a:16:af:
                    ad:50:5c:b3:d4:9f:32:79:49:e7:57:d3:85:71:51:
                    d4:6a:20:25:d1:b2:44:6e:e0:80:81:f2:80:b6:64:
                    a9:cf:3b:29:a6:2e:40:d4:e6:2b:ae:40:31:de:ce:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:04:5D:1C:BB:A7:A4:41:E6:3B:8E:1C:CB:BB:80:21:66:DF:0E:91
            X509v3 Authority Key Identifier:
                keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/A791AF14CF8211F0AAF9A481C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:73:fc:c7:8e:ae:20:69:22:bb:c6:cf:54:ef:cc:b6:0a:
         66:a0:13:a3:04:ca:fa:1d:0a:8a:96:44:25:d0:b5:97:20:a5:
         c5:c3:70:07:ac:39:f9:fe:29:7d:d1:ea:3d:a0:ff:4e:f0:63:
         92:44:1a:36:34:b4:e1:9f:04:da:ed:d7:fb:18:35:4b:d2:2d:
         ce:6a:9d:94:e1:34:f1:49:93:d2:bc:18:76:e5:1d:db:fe:c1:
         95:82:cb:3e:5d:0c:52:8f:9f:06:03:75:77:28:89:0c:8b:6e:
         c7:4d:5f:be:ef:e2:a4:ee:39:e2:c7:12:ed:03:f8:07:67:04:
         72:d8:92:e5:f0:73:23:a0:ef:88:6d:db:88:24:54:33:dc:df:
         6c:3d:ce:a3:bb:9c:4f:de:c0:eb:1f:12:3f:6a:6f:22:6e:0b:
         c6:de:bc:de:5c:7b:bb:f3:b2:51:0d:07:69:5e:74:1b:d6:08:
         9c:b1:7a:88:8f:4d:35:29:9b:e3:dd:71:27:d0:57:1d:91:34:
         2b:c6:e3:6e:cc:49:3f:da:68:ca:d4:af:69:6c:40:69:a7:0b:
         b2:02:da:c0:89:6c:a4:95:a8:36:a7:cc:ce:e5:eb:5d:43:c8:
         63:01:78:29:ec:86:70:2a:70:c6:d1:d7:9c:bd:9c:00:ba:2f:
         c6:98:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:26 2026 by rpki-client