Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
File:                     F45C79E262F711EC8184F344C4F9AE02.roa (raw, json)
Hash identifier:          N6QDQkW63cni5s3lT0BX7q7ZKDgD5wrDskQ0i3AMnL0=
Subject key identifier:   0F:1A:35:01:7A:65:36:46:C4:BF:03:72:72:7E:92:40:66:E7:6D:55
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       0520
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
Signing time:             Mon 17 Aug 2026 00:47:26 +0000
ROA not before:           Mon 17 Aug 2026 00:47:26 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139616
IP address blocks:        103.142.142.0/23 maxlen: 24
                          2001:df1:4680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Aug 17 00:47:26 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a825a1e-d79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:8f:8a:e8:d0:02:cb:52:69:a0:20:9c:84:
                    a0:bd:5a:d9:0c:d0:b8:17:92:3d:80:2e:e9:3e:ad:
                    08:11:ba:f7:64:88:e1:89:eb:2e:0f:2b:65:aa:6e:
                    47:74:32:39:04:88:88:e6:89:be:16:b2:ff:2d:42:
                    8b:73:2a:fd:ac:e7:31:6b:2f:78:c8:8d:d3:cf:39:
                    46:25:8d:bb:af:95:5f:ac:49:60:99:f0:4c:75:c7:
                    4f:10:62:b5:71:3e:9c:6e:68:9d:0e:b2:60:16:37:
                    e6:dc:61:17:3c:60:85:cb:e2:73:35:52:bb:f8:35:
                    90:10:c2:d7:7f:80:e6:03:fd:21:25:00:92:ed:14:
                    3c:5f:09:41:58:a1:55:85:02:b8:c8:7b:16:e7:93:
                    94:76:2c:9f:f0:7b:77:17:56:14:ca:40:de:98:cb:
                    92:c9:c6:10:91:c0:23:40:41:0d:0c:66:dc:34:aa:
                    70:11:41:20:50:a2:f9:c1:bf:4b:b7:8b:17:d8:36:
                    df:fe:25:bc:f9:47:5e:00:d1:32:fe:a0:dc:58:7a:
                    f4:a4:cd:e0:8a:28:12:50:65:69:7a:68:d8:90:ad:
                    6f:09:73:2b:3a:0d:e5:fb:0c:d4:9b:03:f7:91:e5:
                    1e:f4:02:af:4a:1c:66:f3:82:51:d8:30:63:fa:b9:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1A:35:01:7A:65:36:46:C4:BF:03:72:72:7E:92:40:66:E7:6D:55
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.142.0/23
                IPv6:
                  2001:df1:4680::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:a9:54:b6:5d:88:f8:2a:91:5f:79:18:a6:d9:92:28:29:
         fa:28:b3:51:6e:aa:f1:86:0e:2c:0e:b9:62:d2:83:a7:66:d5:
         d9:6f:9a:4b:eb:18:55:04:c7:7c:04:11:9c:db:82:d0:30:85:
         f9:c2:39:41:39:fb:31:c6:a0:d5:d3:4c:d5:23:34:b5:7d:39:
         94:f0:d0:80:c9:97:d6:e3:cd:ed:ae:3d:77:3c:a3:9a:fa:2b:
         d8:de:9e:ff:c2:22:17:fe:bb:b7:b9:bf:e9:ce:fd:db:e6:be:
         e0:fd:4c:ca:cc:01:6d:3f:25:3e:70:8d:6a:18:45:61:f1:07:
         fc:67:18:fc:96:6d:e4:28:a9:8e:fc:bd:48:e3:90:2a:c4:00:
         30:a7:07:a8:cb:77:58:d2:df:2f:61:58:77:d6:0e:ab:52:b8:
         54:89:f3:76:2c:f6:31:78:78:8f:bc:75:49:c0:ed:9a:2a:93:
         28:e7:65:e7:a0:50:27:1b:c8:80:f1:3a:ee:04:72:96:46:e5:
         2e:fb:e2:86:eb:8a:02:56:ad:34:55:05:e5:ed:4d:b6:02:66:
         85:7e:a2:80:01:35:74:e6:57:a5:34:fe:a9:b3:49:0b:63:46:
         39:d9:ac:8b:2b:b4:cd:fe:50:31:a9:fc:66:47:1a:99:3e:a3:
         fa:3e:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:19:54 2026 by rpki-client