Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa
File:                     3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (raw, json)
Hash identifier:          bwrfuXri/6S2vLj8S0q4zXoQ8Drj4P8QgwFZbjgS9OM=
Subject key identifier:   AF:1A:78:63:E6:8F:50:F0:CD:B7:92:AA:9E:8A:02:B1:1F:7F:25:0D
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       154F
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa
Signing time:             Sun 02 Aug 2026 07:24:07 +0000
ROA not before:           Sun 02 Aug 2026 07:24:07 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     32519
IP address blocks:        103.117.100.0/22 maxlen: 24
                          103.135.248.0/22 maxlen: 24
                          2403:18c0:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5455 (0x154f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Aug  2 07:24:07 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6ef097-0c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:91:10:7d:8c:d8:ad:26:b2:1e:d7:24:fa:
                    9c:bf:e0:07:fe:92:a1:68:eb:a8:8a:90:83:e5:91:
                    d0:a2:d4:96:36:55:12:d3:02:e7:67:1a:26:66:b2:
                    8c:9b:cc:26:ec:a9:f3:fc:83:75:aa:ef:57:eb:f7:
                    17:5b:3f:9d:8b:90:8d:e8:ab:6d:88:6d:8e:55:3f:
                    4f:7e:d4:b9:b6:31:71:bf:59:04:1f:4a:56:32:13:
                    e6:8d:27:6c:e3:40:59:ea:fe:a6:1b:68:3c:45:a3:
                    0e:59:9f:6c:0f:c4:a7:b7:4a:43:8d:d0:7b:6e:be:
                    d0:78:ba:67:29:89:c9:27:9b:b4:d8:be:9f:3d:07:
                    b5:bc:2b:7e:96:02:fa:7c:d2:af:c2:ab:e7:f7:6a:
                    81:80:a0:f9:92:5d:f8:82:48:4a:fc:de:90:75:e2:
                    b3:c0:80:f7:e1:5c:8a:ec:16:99:a6:32:02:27:a6:
                    1f:20:60:46:73:21:b2:91:bd:1a:27:e5:5f:10:6d:
                    78:3c:59:9f:da:d3:52:4a:e7:d6:07:e4:7d:b2:f6:
                    4b:0a:4e:87:63:4a:06:aa:4b:81:62:fb:6a:ac:76:
                    07:cf:3e:c4:3c:ce:64:42:a7:af:2e:37:5d:1d:43:
                    69:cb:0e:5b:fc:c7:1d:31:83:8e:d2:5a:c8:1d:e2:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1A:78:63:E6:8F:50:F0:CD:B7:92:AA:9E:8A:02:B1:1F:7F:25:0D
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22
                  103.135.248.0/22
                IPv6:
                  2403:18c0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:21:e3:60:ce:0e:b4:f6:f7:21:67:f3:52:81:eb:69:e6:71:
         1d:36:a4:94:1d:88:95:b8:c3:46:f3:4b:18:5b:d2:ea:0c:3c:
         af:ff:02:78:91:72:eb:ae:8a:43:6e:2b:04:df:96:00:de:5e:
         b3:70:98:96:6b:5b:48:08:22:d9:ff:92:47:e1:5f:8e:4b:16:
         71:0c:8d:ab:9e:39:05:41:40:d5:96:66:24:de:7d:c4:05:a6:
         04:e9:9b:73:e1:ff:23:25:d9:27:c9:20:65:80:80:91:15:85:
         20:34:5e:f8:4f:e7:0f:55:cf:3b:eb:d2:d6:3c:1f:e4:0a:3f:
         24:54:44:c9:a0:c8:89:e4:be:48:3e:e9:ae:05:8a:c8:2d:ae:
         f2:f7:cf:a9:2c:cd:aa:ad:22:ad:2f:e0:93:17:90:be:9a:bf:
         61:36:bb:97:be:f1:5a:3c:d1:30:fa:9b:8b:8d:bb:71:e9:a3:
         32:2f:78:14:4a:7f:0d:cb:9e:a0:ed:ee:3b:ba:4b:b1:cb:2a:
         b0:32:d1:0c:5a:37:b6:c8:ad:d4:99:ed:7f:2e:19:95:01:ae:
         98:14:89:3f:42:bb:03:33:2d:20:3f:56:23:b5:83:71:0b:3f:
         3f:fd:eb:a5:a0:01:1b:ee:38:dc:60:ff:30:2b:ca:0a:fa:d3:
         b7:5e:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:48:17 2026 by rpki-client