Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa
File:                     E723101E553D11E7B552CE31C4F9AE02.roa (raw, json)
Hash identifier:          w2DU193yd2F7A76EdcHPjGzbuA2IEC9BLibhAE+t7oo=
Subject key identifier:   B6:C3:29:44:3B:DB:03:CD:C8:D9:84:8B:CA:47:0A:1C:F4:0E:E7:1F
Certificate issuer:       /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Certificate serial:       2006
Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa
Signing time:             Mon 10 Aug 2026 16:28:31 +0000
ROA not before:           Mon 10 Aug 2026 16:28:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58511
IP address blocks:        103.30.216.0/22 maxlen: 24
                          103.70.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8198 (0x2006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
        Validity
            Not Before: Aug 10 16:28:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a79fc2f-5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:e5:3b:93:7a:95:13:80:cb:a1:bd:36:61:
                    63:24:5a:4f:b7:fa:80:8b:6e:2c:95:9b:96:d9:a7:
                    fb:c6:3f:5a:d5:c9:75:7e:d7:68:88:a8:b4:d1:53:
                    2b:b0:6a:49:59:14:46:10:8c:77:21:5b:0f:2c:2b:
                    b2:59:57:47:46:c5:b4:66:77:42:59:77:45:e4:ec:
                    df:69:7c:2f:20:74:12:40:c7:1c:29:cc:20:a9:58:
                    2f:e7:21:38:fe:34:61:2f:96:9c:93:71:69:1d:b4:
                    26:49:a2:da:9d:c7:ee:fd:eb:59:a5:3c:59:d0:c3:
                    17:91:fb:bd:9c:0a:58:ad:2a:89:1b:12:33:29:c4:
                    fc:74:64:68:3c:d2:66:b7:5c:f4:84:de:d0:4a:2c:
                    94:1c:25:13:a3:b7:d7:34:fb:e8:70:f3:4a:c7:5a:
                    5f:d5:52:26:86:f0:ce:36:b0:47:41:05:f6:21:d4:
                    fd:0e:fd:2b:33:c4:31:c6:fe:40:9a:3b:f5:c5:32:
                    0f:82:8c:c7:81:9c:45:c4:ed:35:c8:47:f2:82:34:
                    48:2c:d5:db:af:16:ce:dd:47:7f:13:ac:fb:d5:18:
                    69:3b:50:e1:ae:85:3f:9e:0a:cf:47:d7:f7:f9:1f:
                    59:f4:93:7a:d2:f2:93:fc:ba:4f:54:9b:d5:c2:1a:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:29:44:3B:DB:03:CD:C8:D9:84:8B:CA:47:0A:1C:F4:0E:E7:1F
            X509v3 Authority Key Identifier:
                keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.216.0/22
                  103.70.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:02:af:8a:64:31:5f:5a:17:96:ab:b6:43:25:96:f4:62:
         9d:d3:cf:f3:f5:0d:a9:b4:d0:55:0d:d9:cb:7b:e8:de:53:e1:
         fd:ea:4d:b2:ca:60:ef:a9:12:b8:8d:6f:09:92:d7:96:11:24:
         3b:37:b7:47:de:ed:c9:e6:12:a5:43:31:0e:e3:92:50:76:ed:
         f2:4c:a8:55:93:ae:6b:e6:ff:25:69:e4:4f:10:46:56:47:f2:
         d6:39:8f:97:0b:fe:78:e1:b0:25:2a:da:d2:2a:b7:4b:f2:76:
         66:58:6c:ba:d2:7c:f2:4c:ad:7a:8f:c6:ee:a4:b7:7a:ea:38:
         1e:ec:0d:af:26:6e:f3:a9:5d:7b:f9:ff:78:90:02:21:dd:b0:
         28:5d:e1:9e:7d:40:1d:d4:7f:9b:b1:19:c2:b4:3b:c3:82:05:
         ba:71:8a:87:7b:e2:21:1b:bf:df:dc:ce:c4:37:7d:31:51:f2:
         e2:cc:b2:6d:b4:43:ad:c2:21:f3:9f:a4:4c:9b:b0:0b:19:dd:
         b6:f3:da:33:40:0c:7e:6f:9d:72:5b:47:10:dd:69:0f:2f:61:
         61:c9:14:66:17:fe:30:c7:79:39:90:6a:f0:24:f6:19:15:e0:
         cb:9b:ad:42:3d:e9:7d:50:59:67:a1:a5:d7:5b:b8:92:a1:d9:
         79:d3:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:09:00 2026 by rpki-client