Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
File:                     E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (raw, json)
Hash identifier:          V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=
Subject key identifier:   65:28:0D:CD:67:D2:36:5E:7D:B2:2C:25:3B:DE:47:75:D8:B4:26:A8
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       0267
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
Signing time:             Wed 17 Jun 2026 03:32:11 +0000
ROA not before:           Wed 17 Jun 2026 03:32:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136587
IP address blocks:        103.91.115.0/24 maxlen: 24
                          103.122.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Jun 17 03:32:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a32153b-3cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:cd:6d:59:eb:06:fd:40:93:c1:4d:a1:06:
                    98:69:96:6d:a9:20:4d:c6:d5:24:f1:b1:07:8d:e3:
                    6b:fd:8d:dc:c4:8f:93:ab:ac:36:d0:55:b2:1b:b0:
                    ce:b0:91:a6:7a:c2:c5:cc:54:14:e6:27:a2:68:d4:
                    01:8e:7d:1f:b8:00:de:18:e8:1a:c2:eb:67:a0:ff:
                    2b:f3:e3:2b:e1:e7:85:fd:99:01:41:4a:10:97:93:
                    db:82:7d:57:93:18:12:d2:06:fa:7d:bc:c8:a4:b3:
                    d3:2c:91:72:d7:c9:0a:e4:27:cc:2c:b9:d2:9f:ff:
                    ef:fb:af:22:75:35:f9:14:57:2e:8a:ef:f5:f9:ed:
                    c6:e9:f9:d9:69:34:94:a5:4e:9a:74:8a:fe:60:be:
                    cb:d8:1e:d8:63:da:51:37:af:a1:61:67:04:3e:0b:
                    e1:47:0c:b8:a6:e9:88:23:e1:50:a6:34:31:08:8f:
                    be:58:ad:aa:65:45:b3:d7:77:81:7e:ef:0a:72:ce:
                    83:49:c9:c6:36:93:e7:c8:7e:02:62:43:d4:9f:4a:
                    8a:9f:19:54:3f:56:c2:f2:61:2f:a7:82:2f:26:1d:
                    b4:40:4d:26:a9:6f:fc:fe:2e:b2:b2:6a:f6:97:cc:
                    1c:96:32:a6:bc:ed:11:20:5c:36:d5:2a:03:20:24:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:28:0D:CD:67:D2:36:5E:7D:B2:2C:25:3B:DE:47:75:D8:B4:26:A8
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.115.0/24
                  103.122.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:a2:b4:a2:5b:11:fa:28:6b:86:60:82:6d:99:61:e7:02:
         5d:89:32:73:37:51:7e:f6:f4:0b:d1:6a:72:66:63:c0:03:65:
         8d:03:06:c5:96:7e:0c:8b:94:73:33:03:f0:9f:e6:b8:7c:ab:
         73:d4:0c:75:b5:6e:ac:04:23:7d:38:91:be:92:8c:26:6d:a2:
         6d:44:fc:17:4b:02:b3:5e:18:14:2e:f9:a1:79:48:ab:45:ed:
         0e:d1:28:25:be:f5:10:8e:76:d0:e0:82:3b:ae:7b:0f:11:57:
         1a:d2:29:17:c3:9c:49:a8:9d:f8:57:64:19:aa:68:13:22:88:
         dd:88:66:6b:52:55:69:9b:d8:a0:1d:a9:c5:86:1c:1d:90:d5:
         d8:bb:d8:eb:48:38:24:cb:e2:c6:58:1f:5e:c9:15:8b:8d:31:
         98:5d:05:01:e2:fd:c4:ad:87:54:a1:60:5e:57:8a:0b:95:34:
         b0:01:36:52:64:08:ee:4b:3f:91:0e:26:bd:38:fe:01:12:4b:
         f0:c1:81:bd:79:f8:cf:61:a8:f5:7a:db:14:b8:1a:70:3c:fe:
         6e:6a:dd:81:a1:ed:0b:f7:01:1a:f4:c9:6e:0d:ff:f9:e7:c3:
         7e:02:aa:cf:ef:7c:06:a8:46:65:7c:75:a0:5a:38:fb:bd:e9:
         a8:64:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:49 2026 by rpki-client