Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/5A46B5469BE811F1A1CB396A6211F970.roa
File:                     5A46B5469BE811F1A1CB396A6211F970.roa (raw, json)
Hash identifier:          htCWMQwYnAdNrZ7ue5iAAfX45+MA9QIuh6+oV7sF4po=
Subject key identifier:   B3:BD:65:5C:FD:B9:B7:E9:98:38:F4:96:40:2D:91:99:D4:AF:31:69
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       056A
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/5A46B5469BE811F1A1CB396A6211F970.roa
Signing time:             Wed 19 Aug 2026 16:09:28 +0000
ROA not before:           Wed 19 Aug 2026 16:09:27 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     150371
IP address blocks:        103.115.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: Aug 19 16:09:27 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a85d537-d4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:4a:58:39:05:c7:bf:4b:89:73:41:bc:a1:
                    73:e6:8f:e7:23:a8:84:9d:c5:a4:c0:8c:18:c0:d8:
                    73:82:48:7f:26:32:46:47:bb:10:40:a8:84:44:b8:
                    e1:20:89:7e:cc:fa:da:c7:ff:eb:93:f8:99:99:fd:
                    35:35:49:41:64:8a:ea:97:b9:45:ad:33:61:c7:a9:
                    e6:02:c7:aa:1a:52:31:0d:80:ff:e8:7b:bb:9d:c2:
                    e8:c3:62:5a:95:fc:c7:2e:6a:e8:1f:60:e3:87:a5:
                    e4:5b:b8:f1:54:72:9b:ea:5b:1a:86:c0:46:32:e7:
                    45:bd:8d:ce:07:a0:e7:cc:d0:98:e0:1b:5e:e2:08:
                    61:bf:f6:eb:20:ce:e2:45:65:0e:21:27:1d:18:53:
                    52:2a:da:e8:d5:7d:7f:8b:cd:fc:78:28:fe:fa:3f:
                    42:9b:8c:38:1a:b3:7d:fb:94:c9:44:a4:af:61:b5:
                    07:40:84:e6:20:91:7e:2e:32:e5:02:23:d9:62:44:
                    85:f4:90:00:34:75:9d:52:bd:4f:91:83:ba:63:8a:
                    e6:e7:40:ab:4b:01:4b:d5:a7:6a:7d:43:af:45:69:
                    70:d4:9a:dd:9f:44:0e:a5:6d:e3:6a:f0:5f:63:c8:
                    84:79:14:a4:a2:6b:ab:9b:99:1d:8a:a1:2a:0e:8f:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BD:65:5C:FD:B9:B7:E9:98:38:F4:96:40:2D:91:99:D4:AF:31:69
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/5A46B5469BE811F1A1CB396A6211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:9c:92:3a:74:b0:b6:43:30:32:b8:98:3e:9b:98:a6:a8:
         c4:f6:1d:1e:fb:65:84:37:9d:87:7e:2d:bc:cb:36:d0:6c:7b:
         62:18:28:5e:5d:74:86:d5:68:b1:de:71:60:96:9b:25:28:ff:
         06:0a:c5:63:5b:5b:74:b3:6c:e2:49:15:41:56:75:28:28:af:
         4b:2f:15:86:1e:56:23:47:00:79:20:cb:7c:4b:ce:64:b7:56:
         e4:34:26:2b:6b:18:a3:d5:c7:5c:0a:38:11:d0:19:b0:e1:19:
         1d:94:87:8c:21:df:35:c1:98:bb:b2:e8:48:c7:82:d1:d6:2c:
         7c:f0:94:14:4c:0e:72:98:5e:97:14:a7:32:9c:01:fe:61:32:
         86:19:e8:fb:2d:34:fc:5e:b6:29:96:fb:49:2b:48:7d:b3:15:
         37:7f:0b:8c:28:2a:94:fc:c6:e6:41:38:4c:aa:f4:78:6c:db:
         cc:97:54:8b:94:13:75:c7:a4:88:18:57:d2:1e:9d:0b:9c:21:
         06:09:b1:ef:20:77:40:77:35:16:c7:61:99:57:8a:8f:bc:ec:
         d0:81:b6:cc:99:32:a1:db:d0:22:08:43:88:f4:3b:4f:9e:60:
         39:a4:ca:ee:a0:d0:ae:d0:94:b6:5b:83:ff:7f:aa:bb:18:4a:
         44:64:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:08 2026 by rpki-client