Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa
File:                     CE833D6041CD11F088FC5360C4F9AE02.roa (raw, json)
Hash identifier:          Ik5ymb2eCBFQET3PLVLDxTHmxOj5SXv0Jvmxx8agkxw=
Subject key identifier:   68:83:F3:13:7A:64:57:2A:3A:31:8B:68:74:04:BE:10:C3:D2:1E:D7
Certificate issuer:       /CN=A91E2391/serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
Certificate serial:       0115
Authority key identifier: BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 07:54:18 +0000
ROA not before:           Thu 01 Oct 2026 07:54:18 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     136799
IP address blocks:        103.35.112.0/24 maxlen: 24
                          103.116.171.0/24 maxlen: 24
                          103.117.104.0/23 maxlen: 23
                          103.227.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl
                          rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2391, serialNumber=BF9E0D788870911BD574C0ECD4A05C290A09B5FF
        Validity
            Not Before: Oct  1 07:54:18 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abe11aa-2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:ae:a5:b1:82:62:ca:f5:8b:52:74:05:8f:
                    f5:d8:94:4d:43:59:56:20:6a:d1:b1:a5:3b:a3:83:
                    42:2d:a1:5c:33:3e:08:21:2e:2b:af:de:5a:43:20:
                    50:ac:b2:a9:c2:c9:85:8f:07:2c:d5:17:d8:9c:22:
                    24:00:84:5f:4b:72:cd:36:1b:d5:67:3d:33:6f:63:
                    15:1f:36:fb:70:98:1d:04:e6:31:ef:93:e3:9a:86:
                    bd:9c:70:ac:75:30:f6:0e:a5:f2:74:6d:5f:84:67:
                    52:c5:7e:02:b1:98:eb:b4:ac:e1:eb:4b:b6:dd:86:
                    8a:b3:1c:86:f8:d0:69:d1:10:b7:7f:20:3a:86:90:
                    6f:08:bd:dc:24:ff:77:7d:15:4a:83:16:19:f7:a7:
                    08:ad:e7:33:4a:1f:7b:50:87:99:ce:52:ac:a5:06:
                    d3:9c:4c:f7:ab:8f:17:bd:d4:c4:a2:d8:b0:49:47:
                    59:0c:08:6b:f8:dd:1d:b3:b1:18:f3:c3:14:a4:70:
                    8d:af:af:26:4e:09:41:cf:4d:6b:b4:e7:6d:7b:89:
                    b6:74:da:1a:82:5f:5b:d8:64:18:37:74:88:5d:0a:
                    52:42:4b:38:02:2e:a0:19:fb:59:32:c2:a2:31:7e:
                    4f:36:9e:aa:e9:62:36:40:c1:04:02:cc:fd:d1:d9:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:F3:13:7A:64:57:2A:3A:31:8B:68:74:04:BE:10:C3:D2:1E:D7
            X509v3 Authority Key Identifier:
                keyid:BF:9E:0D:78:88:70:91:1B:D5:74:C0:EC:D4:A0:5C:29:0A:09:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/v54NeIhwkRvVdMDs1KBcKQoJtf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v54NeIhwkRvVdMDs1KBcKQoJtf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2391/607552D641CD11F09DF6F35EC4F9AE02/CE833D6041CD11F088FC5360C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.112.0/24
                  103.116.171.0/24
                  103.117.104.0/23
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:27:16:fe:0d:1a:bc:6c:11:a1:a1:b4:ad:2c:c1:0f:4e:
         f2:6d:a1:c6:31:cf:89:38:89:f7:52:cc:1a:58:85:a0:a9:69:
         aa:99:01:ac:c2:bd:a8:4f:2a:24:10:7e:d4:a5:39:b1:65:c5:
         09:b8:33:2a:1b:8f:98:bb:06:eb:7d:b9:8a:35:2e:f7:5e:2c:
         89:92:91:10:b7:f3:fe:d0:86:fa:b3:9b:7b:8e:a4:ef:84:c2:
         6e:ea:46:01:5d:05:d7:82:77:e2:56:05:87:18:18:df:49:e1:
         b4:da:be:94:b3:cf:0d:56:d8:0f:9b:9d:ce:0a:09:fb:70:e3:
         d7:a9:b7:f7:8c:85:c0:7d:84:47:f1:cf:9c:48:8d:a0:f0:ca:
         b3:62:d1:dd:e2:13:75:76:89:05:7f:50:70:f5:53:d8:74:5b:
         50:33:aa:fe:8f:c2:3b:4d:f8:85:01:c2:5b:e4:6f:f9:38:dc:
         b1:92:b9:17:fa:e9:02:28:76:59:27:9b:a5:e0:56:78:9d:04:
         e5:1c:3a:91:14:13:9c:5f:9d:45:35:31:71:ed:e0:91:84:7e:
         46:32:fb:1e:0e:c6:64:ca:d4:d9:55:a0:c6:d7:4f:2c:01:c6:
         e3:7c:73:09:d2:6d:81:e9:c6:d5:ca:fc:dc:32:6f:97:3b:0e:
         ca:dc:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:30 2026 by rpki-client