Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/37F2D8C60C7311F191425AD41A3D8C67.roa
File:                     37F2D8C60C7311F191425AD41A3D8C67.roa (raw, json)
Hash identifier:          ECMJfiUySGg6oe2vlknpqSrWzNmI41l9Qj/5Mo4lYuQ=
Subject key identifier:   CD:5D:99:4F:E0:5D:E7:71:17:B5:FA:6B:77:88:F3:CE:10:78:A3:C5
Certificate issuer:       /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
Certificate serial:       0A9C
Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/37F2D8C60C7311F191425AD41A3D8C67.roa
Signing time:             Thu 06 Aug 2026 19:39:03 +0000
ROA not before:           Thu 06 Aug 2026 19:39:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        103.141.14.0/23 maxlen: 23
                          2001:df0:e480::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
        Validity
            Not Before: Aug  6 19:39:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a74e2d7-9d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:66:57:14:69:4c:5e:b9:73:4b:67:24:bb:
                    bf:da:b8:61:c6:aa:35:a6:3c:65:a7:fd:bb:43:4a:
                    cc:53:a7:dd:67:2b:1e:ce:b1:68:31:4f:f6:9a:2f:
                    ac:d8:35:e8:47:c4:bf:e5:6c:1e:55:a3:b3:3c:af:
                    c1:66:05:8f:a6:c2:b0:ce:a3:4f:d6:cc:c8:29:dc:
                    46:04:fb:74:6f:05:63:69:c8:85:af:1f:63:ff:8c:
                    b4:4f:94:98:c3:4a:df:01:5f:ab:14:88:b7:3b:a3:
                    fe:9b:0f:e8:83:4d:77:87:65:85:19:d4:ec:5e:6d:
                    39:34:45:d2:c7:b6:f9:d3:4f:ee:3e:7e:ba:8c:d8:
                    da:eb:4a:f3:7a:57:4d:ec:92:82:fd:d9:8c:bf:42:
                    aa:94:0c:9b:b8:05:1c:ab:e9:2e:94:0b:74:62:3b:
                    ca:75:c2:cf:a2:2a:b5:42:07:09:73:b4:44:18:c6:
                    9a:d0:7d:8f:de:47:64:85:84:a9:dc:d1:9e:96:98:
                    87:b1:c7:62:56:c9:83:0b:fe:92:ba:79:34:f3:c8:
                    83:81:97:2e:d8:5c:80:9d:cd:e9:1b:38:82:71:a2:
                    1e:e6:51:18:5b:d3:46:f8:41:78:18:b6:a8:bd:f8:
                    78:9c:96:c0:c1:a7:8a:5e:19:f3:2d:9e:00:a3:3d:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:99:4F:E0:5D:E7:71:17:B5:FA:6B:77:88:F3:CE:10:78:A3:C5
            X509v3 Authority Key Identifier:
                keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/37F2D8C60C7311F191425AD41A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.14.0/23
                IPv6:
                  2001:df0:e480::/47

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:11:10:fc:57:b4:89:e8:7f:a3:54:01:0f:de:fa:b2:13:
         15:ea:9e:c6:5e:4e:c7:ca:5e:f3:80:33:18:7b:b6:9f:4c:50:
         8e:2b:dd:7c:8e:70:87:a2:b2:d0:e4:54:25:49:1b:36:6c:d2:
         0f:d7:a6:62:70:66:94:d3:48:3c:64:34:03:c6:a4:a1:57:1d:
         e0:a6:a0:c3:65:25:5c:2d:4e:53:72:75:64:c2:3a:49:d4:65:
         79:d1:9e:51:27:5f:ee:ba:a8:ab:2a:a4:3a:d4:3f:2b:a1:5e:
         e9:e2:07:7b:4b:33:68:11:47:3e:c6:7d:d6:2c:5c:82:3a:e8:
         8b:1a:f0:fa:7a:d2:82:93:07:da:d0:22:df:24:16:0a:ce:8e:
         a1:dc:c5:76:e2:1e:98:ab:e8:63:71:5d:99:57:0d:22:42:c1:
         b9:18:f7:a0:bf:b0:c1:6f:70:85:e3:fb:0b:1c:0a:c1:84:68:
         4a:07:31:4c:2b:ab:e7:84:02:a4:ed:cd:af:7e:8a:08:b5:b8:
         ad:93:8c:bf:d6:ae:e3:ce:be:f6:d8:c4:8f:70:89:cd:37:93:
         72:8a:93:ea:1a:f3:45:6a:42:da:59:a2:43:35:17:6d:6d:b9:
         a9:5f:f3:55:15:a7:5b:0c:04:e7:de:a5:63:4c:05:48:41:7d:
         e8:71:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:49 2026 by rpki-client