Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa
File:                     6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json)
Hash identifier:          VPr6/FdGfv6oDujJfkxaUsLYAPyRqxzzh7zxxXbhpoM=
Subject key identifier:   4E:AD:8C:82:35:3D:61:81:EC:0F:2F:D5:A1:51:D6:E0:F5:41:28:55
Certificate issuer:       /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial:       02C5
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa
Signing time:             Fri 14 Aug 2026 20:40:17 +0000
ROA not before:           Fri 14 Aug 2026 20:40:17 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140917
IP address blocks:        103.153.110.0/23 maxlen: 23
                          103.153.110.0/24 maxlen: 24
                          103.153.111.0/24 maxlen: 24
                          2001:df4:4180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
        Validity
            Not Before: Aug 14 20:40:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f7d31-31ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:92:28:5d:68:71:5f:f2:fb:a5:30:f8:1a:
                    23:16:60:8f:48:a6:78:a2:de:12:4b:1d:fd:7c:62:
                    6e:66:6f:ff:fd:98:29:02:50:be:c1:52:b1:0b:36:
                    93:ae:23:60:7f:e4:e3:3b:81:77:e9:37:e0:c0:7f:
                    c1:dd:ba:2c:2e:76:29:f4:29:55:81:e9:8c:d2:90:
                    ea:1b:71:10:af:86:c9:4d:7e:41:89:77:a5:b4:ea:
                    d4:2c:b6:c6:0b:71:a9:d6:0b:be:07:94:c1:f0:3c:
                    ce:9f:ec:53:29:35:10:72:39:2f:5c:71:e5:bc:6f:
                    70:09:b8:fc:2b:6f:02:fe:84:e1:50:7c:c3:cf:5e:
                    e1:33:9a:de:16:b2:81:94:d5:84:fe:49:c8:64:b2:
                    59:9d:df:a7:4a:2d:52:c2:a6:3e:d8:77:1b:a0:8d:
                    94:fc:fc:81:37:88:87:c7:a2:74:a3:ef:8c:69:a4:
                    fe:76:04:18:f3:24:4f:39:4e:35:9e:33:fb:37:5d:
                    24:a0:25:30:e1:7e:00:33:34:63:c4:8a:e4:95:55:
                    3e:d9:a8:c0:d6:81:21:e1:db:fb:67:4f:d4:c2:9d:
                    f0:24:29:c8:cd:2f:e6:ce:48:ad:6f:76:2e:21:62:
                    50:55:a8:ed:bd:fb:79:85:bd:29:40:6b:54:c6:19:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AD:8C:82:35:3D:61:81:EC:0F:2F:D5:A1:51:D6:E0:F5:41:28:55
            X509v3 Authority Key Identifier:
                keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.110.0/23
                IPv6:
                  2001:df4:4180::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:40:dd:e5:6c:92:03:8b:b2:d0:23:bd:42:51:91:ee:2c:89:
         e4:78:75:cc:2d:01:09:12:d6:66:ee:92:7c:66:c5:99:51:1e:
         bc:33:ca:c9:33:24:25:4c:8f:9e:73:3c:f9:e4:75:fa:3d:91:
         eb:49:ce:77:0a:e4:01:78:ca:61:15:37:a5:90:07:bd:ba:0a:
         28:4c:dd:13:2e:27:90:b7:c7:6e:e8:ca:2e:67:d3:9b:4e:9c:
         7d:13:b1:46:d6:59:29:c0:d3:4e:d3:d5:8d:35:78:f4:27:7b:
         61:ff:77:57:40:0b:40:23:0c:73:f0:1f:7d:d4:18:b7:6c:65:
         ee:76:ba:e6:75:79:4c:27:37:41:ce:6c:79:27:26:d9:9c:6a:
         0b:8e:ee:6b:56:64:39:92:95:f5:7f:71:61:fc:f9:fa:f1:bd:
         74:46:76:3e:0d:c7:4b:40:40:24:6d:2f:a3:02:1e:b4:f5:e1:
         6a:eb:7e:77:a9:80:80:1b:88:da:fa:a1:bf:f4:1b:d8:8a:b4:
         93:59:9d:c3:80:a3:11:e3:28:20:f8:bd:78:76:ad:6f:af:34:
         a5:39:2a:3d:16:bc:75:d9:c5:da:01:6a:f4:7a:3c:78:0e:2b:
         ff:6c:58:41:9a:21:87:0e:4b:a6:89:08:0a:5c:26:fc:00:f9:
         19:16:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:30 2026 by rpki-client