Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa
File:                     4140D222AB0511F0AD64C814C4F9AE02.roa (raw, json)
Hash identifier:          bvr9DE6l6ItU/zlfwBlzipklAIrrtEOOEMTj7h7vxq8=
Subject key identifier:   71:41:28:A7:3F:8A:DF:3C:48:36:0B:9B:35:33:8D:A2:E4:6D:5A:43
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       C4
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 19:38:39 +0000
ROA not before:           Wed 30 Sep 2026 19:38:39 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139223
IP address blocks:        103.139.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: Sep 30 19:38:39 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6abd653f-0cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:08:59:35:c5:e6:2f:b5:34:bb:8e:c7:52:
                    00:49:11:fc:8e:8a:1a:4c:1e:dd:cb:ba:c0:da:08:
                    c6:a6:64:94:a6:01:b3:83:51:11:94:a9:50:f8:86:
                    21:84:25:46:d5:ca:85:36:7f:a0:cd:21:12:bf:6f:
                    b4:19:85:d8:e6:f4:d1:a9:ac:67:ee:03:4d:d3:80:
                    e8:64:52:70:22:97:15:0d:62:9b:bb:1c:03:af:a1:
                    da:50:96:97:9a:3e:7a:93:85:af:5f:dd:ba:be:08:
                    20:0c:42:52:24:19:85:e9:89:2c:10:b4:70:dc:6b:
                    ae:0c:32:af:a5:6c:16:7a:32:61:c3:3e:62:76:65:
                    f7:91:45:47:20:8a:ef:50:c1:50:f1:7a:85:7e:4d:
                    ef:49:70:92:07:05:fc:bc:83:b0:d5:1f:af:a9:0b:
                    90:ad:e2:f0:d0:16:5a:d9:72:96:4f:79:a9:d9:74:
                    50:9c:68:fb:ca:48:82:45:08:1b:9e:16:08:9c:80:
                    b8:2f:05:ae:dc:28:94:89:e1:98:de:f4:0a:b4:4a:
                    53:54:d1:7b:7b:c1:8f:2a:1c:93:6b:13:cc:88:f7:
                    cd:a4:1e:81:b9:89:0a:2e:ca:85:2b:7a:1c:02:33:
                    d7:17:83:7d:51:60:73:94:63:bc:b6:ba:b3:c8:41:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:41:28:A7:3F:8A:DF:3C:48:36:0B:9B:35:33:8D:A2:E4:6D:5A:43
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:d2:f0:9a:2b:8a:4c:f4:5a:a5:26:1e:ff:91:34:a5:5c:
         2f:46:1f:a3:6f:85:da:93:aa:ce:17:33:21:ca:69:f0:1e:ec:
         1b:2a:dd:7c:db:2e:f4:be:3f:32:b1:44:fa:ed:f6:3e:1e:39:
         77:6e:cb:0b:50:d5:03:c3:39:1a:b4:c3:d5:35:e3:11:7d:89:
         62:19:bd:9f:50:cc:55:de:53:2d:3f:78:b2:4a:31:30:29:f5:
         c1:40:07:49:9f:1b:3e:2f:9b:ae:36:8f:84:0a:de:3e:71:fb:
         2a:11:ba:f8:98:fa:ec:2c:28:37:dd:0b:ce:c7:05:23:a0:aa:
         92:78:7e:84:78:c3:07:db:bd:20:88:fc:ab:56:e2:da:e6:00:
         19:45:16:cd:bd:cf:a1:b4:ab:35:4e:8e:6d:2d:8a:90:a7:be:
         dc:62:4f:34:dc:c4:ef:8a:f6:2a:ca:44:f5:27:1b:e7:b4:97:
         4a:5f:67:da:4d:28:2a:e2:7f:09:94:92:35:39:28:89:6b:34:
         7a:44:2e:35:74:11:a3:33:32:d6:fe:8d:e4:86:af:06:83:a3:
         69:7e:04:8f:ef:19:23:18:c7:68:f2:ca:7c:cf:36:8f:7d:05:
         6a:5f:17:cf:06:93:d0:3a:fc:87:e9:a0:a6:04:95:a8:13:b1:
         0a:0f:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:23 2026 by rpki-client