Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa
File:                     4140D222AB0511F0AD64C814C4F9AE02.roa (raw, json)
Hash identifier:          02IrHJAT7dNh9yIlGdUczx/t2oW8QbZX7t3Fh/YaYsI=
Subject key identifier:   BE:EF:0D:69:6A:91:85:DA:1B:71:32:67:8B:88:C8:D1:38:17:C3:27
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       A1
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 19:39:18 +0000
ROA not before:           Fri 31 Jul 2026 19:39:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139223
IP address blocks:        103.139.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: Jul 31 19:39:18 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6cf9e6-ce23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:08:d4:8f:d0:af:7b:1d:88:e6:0e:a8:80:
                    2b:7f:81:76:da:8f:33:32:db:b9:db:28:ff:e0:05:
                    88:21:a0:2b:4f:1d:d9:f1:33:27:fe:6f:e2:71:55:
                    e0:4f:d8:ff:8e:a6:07:b5:32:c8:da:4f:44:2f:50:
                    82:8d:60:f6:88:7f:48:e6:48:23:e5:d8:e7:78:9d:
                    92:be:17:6e:16:07:29:6c:fb:91:a6:bc:52:62:5d:
                    b9:f3:aa:81:87:69:82:53:9d:41:58:da:e4:7d:95:
                    dc:3f:73:56:94:18:a2:fe:88:d4:6c:73:14:3d:43:
                    2d:da:9c:ed:db:1e:b9:c9:62:81:a2:32:e3:eb:a9:
                    b4:a1:4e:a0:c4:5e:3f:b8:5d:ac:0f:c2:1c:a7:e5:
                    c4:61:48:1a:95:19:8c:80:fc:e3:6b:db:03:fe:53:
                    0a:f5:08:61:2f:ad:37:de:53:5a:92:70:61:96:24:
                    03:81:80:eb:f2:63:5c:35:57:76:a6:d0:3e:2a:67:
                    6d:18:16:9d:00:11:e8:6e:3e:a9:29:27:eb:32:b6:
                    40:c7:05:5e:2e:76:99:ad:ec:27:f1:b0:c5:17:3e:
                    36:ab:f6:74:00:4e:7d:1e:a3:44:c4:62:2c:50:be:
                    1e:5a:20:7a:9f:2c:46:bf:3d:03:cb:f7:9a:df:09:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:0D:69:6A:91:85:DA:1B:71:32:67:8B:88:C8:D1:38:17:C3:27
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2b:b1:13:a4:20:18:a9:da:84:21:ca:f1:c9:2c:40:67:21:
         1e:d8:b3:ac:6f:88:0f:fa:2b:c5:58:58:60:12:a5:67:c1:01:
         58:cc:46:e6:04:6b:a1:47:fd:a8:58:fb:bd:27:a3:6f:a0:c7:
         5b:df:aa:75:e5:21:63:ba:5d:eb:54:74:92:2c:07:64:7f:a6:
         0a:89:c3:92:73:63:5d:95:73:f6:9f:49:82:0a:a1:d4:4d:13:
         a5:d2:33:59:51:95:2c:bc:ee:d5:4e:25:ea:4a:17:16:bc:bb:
         3d:bd:98:89:21:5a:3f:8d:51:5d:db:03:3d:fa:ec:d5:a5:7c:
         1f:1f:83:8e:14:3b:f5:7f:ff:7f:a2:53:d5:b7:7f:9a:3d:93:
         32:15:9c:1d:81:ae:b2:2c:f2:f7:a4:69:e8:9f:da:02:ea:40:
         97:0f:a1:6f:fc:ad:ec:61:d7:d9:61:10:37:ab:99:78:e1:40:
         47:21:19:f6:92:39:1d:aa:7f:84:99:f7:74:08:fe:16:e8:9c:
         7a:fe:c1:39:8d:b7:27:e0:56:c7:a2:f6:25:74:66:a7:e2:81:
         28:3b:94:e9:43:5a:d8:08:1a:a0:c0:9f:2d:8a:3d:22:ce:30:
         12:37:c6:61:4a:3a:96:bb:e0:4c:37:30:66:a1:d5:99:63:de:
         3a:5b:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:13 2026 by rpki-client