Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/336A16309B7E11F18CB11F4C4211F970.roa
File:                     336A16309B7E11F18CB11F4C4211F970.roa (raw, json)
Hash identifier:          E39kxFn1P0qu/KsZYABC+GlXjaMgPMnI04WM2u5dtuk=
Subject key identifier:   A4:7C:BF:30:CE:A7:5A:73:8B:2C:40:02:99:86:F5:3C:39:D0:EA:7F
Certificate issuer:       /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial:       02B4
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/336A16309B7E11F18CB11F4C4211F970.roa
Signing time:             Wed 19 Aug 2026 03:29:36 +0000
ROA not before:           Wed 19 Aug 2026 03:29:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150121
IP address blocks:        103.191.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
        Validity
            Not Before: Aug 19 03:29:36 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a85231f-c592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:25:71:ab:ff:da:3d:a9:f0:ac:43:df:0b:
                    4a:86:27:67:cb:75:d3:99:6d:c0:7d:4e:0c:6e:07:
                    f2:89:9d:57:e8:43:de:44:8d:4e:d8:41:ba:0f:a8:
                    64:7b:c7:40:d6:ae:a9:3b:4a:58:99:cb:32:0c:e5:
                    39:5d:32:7c:8e:a7:27:49:71:33:ca:11:79:1f:29:
                    92:34:5e:d8:21:78:2e:79:84:73:ef:96:b5:ab:c1:
                    3f:8c:d7:35:8a:a3:e2:60:94:86:15:5e:b0:24:0b:
                    d5:dc:0e:9f:1f:da:be:22:07:1c:45:83:b3:d6:17:
                    b1:2c:ae:f2:eb:d9:09:a8:c8:9c:05:db:86:d4:2a:
                    0a:63:95:cd:4e:7f:12:31:54:5b:fc:3c:db:9d:e9:
                    97:76:a4:1c:c7:56:34:b0:27:8a:4d:4c:14:4f:ff:
                    56:09:43:45:cc:90:df:36:cd:e8:12:7b:4d:d6:88:
                    62:0c:33:33:0b:13:6c:d0:2d:13:32:af:a6:81:6f:
                    e0:76:67:5f:03:0c:e1:b3:4a:5b:5d:3d:2a:8c:8e:
                    f8:51:ef:32:61:43:d5:cb:d7:30:4c:a1:20:b8:11:
                    00:e9:68:cd:b7:72:7e:3a:76:f0:92:93:a6:a3:a1:
                    8b:79:06:b5:ef:44:8d:69:8d:fa:8e:61:fa:59:8a:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:BF:30:CE:A7:5A:73:8B:2C:40:02:99:86:F5:3C:39:D0:EA:7F
            X509v3 Authority Key Identifier:
                keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/336A16309B7E11F18CB11F4C4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:db:6a:a6:61:9c:16:77:66:7e:1a:3b:7a:71:81:36:33:8c:
         43:a3:78:e0:6a:8b:4a:f0:8b:12:5c:29:b2:48:16:4f:5a:58:
         8d:04:cc:7d:d4:a6:b9:a4:f1:55:31:42:ad:c1:08:ac:31:64:
         fc:78:57:f6:19:f4:22:53:b6:b2:65:d7:54:c1:50:dc:cb:ce:
         6d:c5:6d:19:b0:8b:a7:cc:4e:be:6a:79:70:54:a8:5e:4b:cb:
         20:ea:49:97:a7:4e:db:99:8e:54:ed:3c:b6:31:08:fb:6b:9b:
         50:cd:ce:f7:0b:f7:ab:e8:a7:6b:95:67:f9:77:d1:34:c8:26:
         ac:c6:b3:ed:5a:66:f4:4e:c0:06:b0:08:49:3c:75:8c:e2:61:
         cf:1e:77:cf:25:31:32:e2:a0:8c:a9:9c:a4:6d:93:09:b6:b6:
         af:78:5a:5b:e6:81:61:ef:d6:e0:ef:da:05:03:10:79:ba:af:
         b5:d4:23:cd:ba:ec:90:a9:2c:b5:59:2c:9c:4f:dd:18:bf:66:
         79:81:fd:d5:ea:cb:74:03:e9:25:ca:7d:a3:a7:84:90:a4:4c:
         1b:46:1b:34:8f:7e:1b:36:ea:38:d0:f2:21:00:66:a4:89:e8:
         d5:9b:31:20:b9:60:1d:4a:e0:31:e3:7e:be:1f:ad:c1:39:cc:
         09:38:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:42 2026 by rpki-client