Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa
File:                     C01378B2D87411EE85EACB5CC4F9AE02.roa (raw, json)
Hash identifier:          BtbKwISc0o5KoYEKwJEZQMnjZhmU53NuiaoFh10O9zg=
Subject key identifier:   3A:6F:E9:FE:66:F7:F5:2E:A3:CF:53:12:66:03:32:4C:57:C9:34:EE
Certificate issuer:       /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial:       0225
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 04:52:27 +0000
ROA not before:           Mon 03 Aug 2026 04:52:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.14.230.0/24 maxlen: 24
                          2001:df2:b740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
                          rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
        Validity
            Not Before: Aug  3 04:52:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a701e8b-f139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:22:d7:40:d0:04:9c:eb:b5:f6:47:1c:aa:
                    fa:0e:0e:51:cd:92:14:e7:4b:32:f6:31:1a:22:75:
                    b1:e8:28:2a:f3:77:92:9a:b4:c0:c8:4c:f3:d1:23:
                    b9:69:9a:fb:51:72:22:15:c6:11:92:9b:79:28:06:
                    a9:b2:17:5c:74:f8:06:5c:c3:24:e5:e3:b2:97:6e:
                    53:f3:23:8b:21:26:4f:40:a5:51:3d:cf:f4:8d:e5:
                    fd:09:72:a6:ce:12:c8:e4:59:c3:71:30:1e:55:52:
                    a2:df:d8:b2:23:f6:6d:06:82:73:5a:bb:fb:ce:cd:
                    e8:db:97:84:56:f9:53:db:2e:a9:1f:a3:c8:1c:75:
                    a6:08:5c:0d:2a:29:f4:3c:93:cb:53:48:ff:b0:d8:
                    ee:94:56:b8:51:aa:2c:62:3d:95:c1:52:e0:f9:43:
                    97:1b:94:1f:34:dd:70:59:ad:17:82:17:a1:57:f9:
                    25:be:3b:20:c8:90:bd:2d:2e:89:3a:72:3b:00:e7:
                    04:3e:e2:4b:bd:39:9d:6b:8e:8c:d2:42:f9:5f:a3:
                    06:49:40:af:9b:df:59:a2:dc:9f:c7:9c:d6:54:99:
                    8b:55:2f:eb:08:66:54:92:86:03:00:13:7c:02:37:
                    af:c4:6c:0c:cd:69:27:ff:54:da:d5:3a:75:56:49:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6F:E9:FE:66:F7:F5:2E:A3:CF:53:12:66:03:32:4C:57:C9:34:EE
            X509v3 Authority Key Identifier:
                keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.230.0/24
                IPv6:
                  2001:df2:b740::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:c3:ac:da:67:a2:13:72:fb:22:4e:a7:be:1b:80:b9:e0:
         cd:6d:de:a3:07:43:3e:21:08:c9:3e:31:7b:c6:a6:5a:16:a8:
         57:57:a5:f0:fb:fb:c1:69:b3:e6:39:64:e1:39:18:a7:73:e1:
         b1:c3:50:27:68:85:4e:f2:fb:8d:5d:ef:c5:15:89:ba:d1:8a:
         90:b9:98:17:9b:4c:b7:a7:54:8c:9d:99:56:68:92:47:ea:40:
         30:c6:02:28:9c:88:c0:f8:e3:9f:fe:fe:97:92:85:65:da:67:
         d7:cd:69:71:2f:66:6c:ec:7a:b1:0f:d9:a3:f2:7c:e7:ab:a6:
         52:d1:25:d7:98:07:36:db:5f:c3:ed:e2:aa:b3:70:de:38:ce:
         dd:17:dd:4a:18:30:a1:d0:2a:92:c9:6a:97:1d:2c:31:ae:c9:
         e5:64:19:1e:ce:e4:f5:8f:bd:8e:56:32:3e:b3:6c:36:c0:7a:
         ac:80:33:b9:a4:38:45:82:42:61:6b:6d:04:10:fd:a3:ea:85:
         08:c6:38:8e:ce:12:04:29:e5:9c:14:bb:f4:15:8e:09:33:a5:
         27:ed:53:cb:be:1d:ec:e6:b6:6e:2a:c9:71:f3:80:73:fc:b5:
         b5:15:eb:c4:cb:41:8f:d2:0b:fe:76:4a:c1:d4:0f:2f:28:b4:
         d4:05:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:14 2026 by rpki-client