Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa
File:                     D3BEF96E9DFB11F186DD6C154711F970.roa (raw, json)
Hash identifier:          wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=
Subject key identifier:   42:61:D3:92:35:AD:FA:EB:8D:4F:76:12:AB:C0:0B:C4:03:3E:2F:6E
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       0570
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa
Signing time:             Sat 22 Aug 2026 07:33:54 +0000
ROA not before:           Sat 22 Aug 2026 07:33:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140499
IP address blocks:        103.115.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 16:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: Aug 22 07:33:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a8950e2-ef0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:39:f9:0e:d4:bb:63:1d:31:67:d2:9d:1b:
                    37:87:4b:6d:7d:58:3e:f9:f4:5e:5b:d5:47:6c:05:
                    7b:6d:8f:54:7f:d9:c4:fd:1b:7a:28:4d:26:b2:5e:
                    15:df:b9:83:83:60:72:c7:8a:c7:36:87:2f:82:bc:
                    75:38:3c:b3:5f:3f:fe:ee:8b:96:df:8d:c8:0f:b6:
                    a4:46:66:04:f7:86:69:3a:66:03:88:3c:f6:24:9f:
                    15:76:53:b5:e1:c3:47:e9:2e:ca:bc:af:2b:ad:a1:
                    74:6b:44:69:6d:c9:bb:d4:1d:a6:9a:58:2d:a4:df:
                    62:17:f0:08:d0:9f:ac:aa:9a:53:b7:b9:21:b5:87:
                    5d:bd:59:22:7f:08:5b:dd:88:c6:3f:e2:dd:f5:2a:
                    3f:65:c3:12:a5:98:16:6a:eb:c7:04:94:7a:d9:7e:
                    49:96:c0:76:21:41:3d:e4:6f:c0:f1:0c:9c:fd:4e:
                    1b:13:eb:c5:7c:85:a3:69:2d:8b:d8:1a:96:0c:1e:
                    aa:ff:23:bf:cb:21:df:fe:88:53:d1:ab:ab:6b:76:
                    f1:8b:be:45:0b:73:42:7c:45:c5:9d:d6:a0:9a:5e:
                    b5:93:5e:0c:08:09:62:fb:a5:a5:62:ab:36:bd:19:
                    9e:89:45:49:7d:6f:9b:4e:25:8c:0c:84:49:5a:bb:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:D3:92:35:AD:FA:EB:8D:4F:76:12:AB:C0:0B:C4:03:3E:2F:6E
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:db:a3:79:1e:09:f5:4b:db:57:83:aa:ae:3e:92:0a:50:
         ea:af:fe:6b:b8:c4:04:7b:67:7f:59:01:53:e4:ff:58:0c:9b:
         8b:8f:49:d9:44:80:72:20:5a:e3:50:bb:44:ad:42:aa:34:e0:
         2d:8c:11:8f:76:30:d2:ca:7b:f0:a7:8e:33:ad:f3:2f:82:9b:
         a2:5e:bd:fb:d6:a8:6b:f1:08:23:a3:58:8d:ec:32:7f:d7:05:
         5b:4d:c4:de:6a:a0:49:04:61:a7:19:eb:df:58:0b:0f:a3:46:
         55:6a:5f:c4:58:68:f1:39:9c:08:20:32:74:0c:a8:46:ae:33:
         6a:e0:f6:47:59:29:44:e2:c0:13:dd:36:4f:a5:72:e5:81:59:
         5e:01:2b:c9:40:9d:89:6c:84:3d:ed:21:43:37:bb:a6:b6:ac:
         d8:93:12:10:ca:8b:83:b5:a6:60:39:1e:14:c4:25:dc:f5:ce:
         67:a9:f2:83:3e:45:43:62:4e:60:58:12:c2:51:05:f2:1b:66:
         b2:d1:61:f3:19:5b:a6:be:89:e3:07:f3:c7:04:f9:c7:bb:24:
         e3:ad:00:22:d7:46:42:c5:e4:90:04:3f:9f:ff:3a:e2:74:c2:
         33:9c:7a:9d:9d:01:67:76:4b:8c:c8:ae:27:da:b6:ba:e2:15:
         0c:40:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:29 2026 by rpki-client