Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa
File:                     F4D295243FDA11EFAF5E676AC4F9AE02.roa (raw, json)
Hash identifier:          Hy/M1SuzjjtwQCWZGLtJSooNfC63JGvrwCvSA8jmPig=
Subject key identifier:   C3:D2:3C:DD:1F:E9:67:B5:CA:10:6D:23:FB:F1:BB:7F:16:57:03:0E
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       0539
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa
Signing time:             Mon 31 Aug 2026 23:47:38 +0000
ROA not before:           Mon 31 Aug 2026 23:47:38 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     133894
IP address blocks:        103.88.192.0/22 maxlen: 22
                          103.88.192.0/24 maxlen: 24
                          103.88.193.0/24 maxlen: 24
                          103.88.194.0/24 maxlen: 24
                          103.88.195.0/24 maxlen: 24
                          116.204.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Aug 31 23:47:38 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a96129a-36f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:38:93:c6:a1:c4:07:17:8d:6f:bb:c3:44:
                    5e:ad:34:7e:06:d5:ee:4a:79:96:bf:df:b4:1f:78:
                    82:5a:3f:4b:80:32:3a:37:15:b0:05:d0:89:11:a8:
                    82:64:50:3e:86:8c:d9:7a:75:96:ce:f7:86:a2:ab:
                    96:f0:55:dc:a8:ab:11:15:2b:d3:8c:8f:c1:25:e8:
                    0d:6f:f2:e3:f8:22:00:b4:6b:cc:f8:f7:b6:af:75:
                    86:b8:ff:35:de:95:8d:8f:99:eb:7b:cc:43:7a:ad:
                    28:00:69:4d:a1:d6:ee:a3:8d:7a:10:4a:3d:2f:3c:
                    39:aa:55:1b:99:da:39:12:20:59:17:b7:b8:bf:4e:
                    9c:65:07:cf:e9:97:9e:cb:77:bf:5e:f1:aa:d4:8b:
                    53:e2:0a:f8:71:50:2d:66:f4:5a:10:a8:97:08:34:
                    37:46:37:cb:a2:e2:e8:32:66:07:3c:a8:7a:94:c0:
                    a0:0c:f2:d2:f9:3e:34:14:00:54:3b:fd:39:34:b8:
                    ce:6f:17:a3:34:1d:fd:fc:62:e1:3f:74:a4:22:86:
                    f1:e5:38:3e:b2:cc:b1:d4:f2:40:2b:49:f5:a6:e2:
                    c5:94:4b:f0:37:99:4b:a1:c3:9b:bd:ad:24:b0:65:
                    89:6f:a7:84:53:f0:26:bf:cb:ba:32:dc:7c:4c:d6:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:3C:DD:1F:E9:67:B5:CA:10:6D:23:FB:F1:BB:7F:16:57:03:0E
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.192.0/22
                  116.204.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:16:c0:a6:b1:69:3b:d8:32:cd:67:4e:26:b8:0b:b9:d3:be:
         db:1c:a3:89:ab:41:a3:cc:f4:99:7c:da:30:59:d4:53:d3:7b:
         c8:0b:65:22:46:95:8f:a6:0e:74:77:49:76:27:2a:ae:d8:f8:
         79:4c:0e:da:0f:15:ed:ea:9e:07:51:fe:16:f0:bc:8f:a5:f3:
         10:35:38:2d:0f:ae:63:b4:2b:79:21:bf:54:2b:7a:ee:4f:4c:
         84:20:26:84:99:a8:97:f4:57:44:9a:e6:52:0e:ff:3b:9c:92:
         68:e0:cd:9d:98:25:39:2b:b3:88:bf:c8:f1:6e:c5:17:77:4a:
         c3:dc:c8:22:46:69:4b:1c:17:09:65:c5:ac:95:6b:05:1d:b7:
         e3:ab:bc:1a:2d:6b:f8:ba:ac:8a:d9:44:6b:41:cd:a3:22:c2:
         b7:7e:20:f4:2e:88:ec:9a:44:7a:ea:30:18:67:92:71:bb:51:
         37:17:b6:9f:78:ad:ff:53:30:9a:f2:23:af:e3:34:32:0a:93:
         68:51:63:66:d5:97:f4:f0:4b:be:df:9f:dd:e9:17:58:24:60:
         7d:4b:c6:18:69:03:fd:1f:f5:22:be:fb:11:bf:46:ad:1e:1c:
         6d:18:9b:3a:4a:65:cd:31:7d:bf:36:12:c9:9e:36:f2:84:0d:
         9d:51:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:08 2026 by rpki-client