Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa
File:                     6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (raw, json)
Hash identifier:          9JY6uhEn8EF+36wJRXg1147V4xC6zP83VrmQeBhwfUg=
Subject key identifier:   76:69:33:14:F7:E5:99:AD:1B:DA:5F:00:34:84:94:30:77:45:CE:9B
Certificate issuer:       /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Certificate serial:       0391
Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa
Signing time:             Sat 25 Jul 2026 01:50:25 +0000
ROA not before:           Sat 25 Jul 2026 01:50:25 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133368
IP address blocks:        103.189.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
                          rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
        Validity
            Not Before: Jul 25 01:50:25 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a641661-e830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:40:4b:26:2c:03:52:d1:fc:34:d5:ce:d2:
                    46:ac:9b:5e:b5:ef:ff:cd:5d:9d:b7:46:0d:66:0f:
                    ed:e7:9f:75:43:e2:a9:4d:85:28:39:a3:5c:bf:7c:
                    c6:03:9b:ee:67:c7:a4:7a:c5:f5:f8:bf:ee:6d:9f:
                    f5:e9:fa:80:43:60:3b:40:6e:93:71:65:81:6c:c2:
                    ce:cb:8b:61:fc:b2:39:85:00:c1:b7:2b:cb:6b:b7:
                    a0:db:9a:20:e0:ee:f6:ec:62:32:11:2b:30:1b:25:
                    cf:f0:e4:e4:bc:76:b0:e5:bb:29:33:a7:a3:fc:fb:
                    e0:42:7e:ff:b9:5e:9a:5f:92:6b:89:7b:9e:c0:9d:
                    e8:7b:27:f6:2c:61:e7:ed:ef:d9:b4:fd:7c:19:7d:
                    e8:c4:a4:e6:8f:75:91:07:89:23:9f:d9:4f:0c:ef:
                    76:17:d2:18:a8:6d:f2:52:e8:8b:c5:f2:c8:53:73:
                    7f:66:67:32:23:8e:22:59:a4:0d:e5:e7:f6:99:67:
                    12:48:a3:1d:5d:75:06:be:68:d4:12:df:d2:16:97:
                    77:69:f6:85:74:eb:91:3e:4f:65:27:97:20:13:e0:
                    02:3d:1f:a7:43:6c:a3:27:05:9c:12:11:b8:2e:08:
                    01:49:54:fd:07:5c:4e:43:54:d7:61:9b:4d:36:1e:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:33:14:F7:E5:99:AD:1B:DA:5F:00:34:84:94:30:77:45:CE:9B
            X509v3 Authority Key Identifier:
                keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:3d:88:ea:f2:2c:e2:8a:e0:e3:0e:e2:dc:45:6c:43:f7:
         00:09:5f:ff:a4:3a:e5:13:b6:2c:84:99:5d:c2:75:83:ce:9a:
         10:35:17:40:9f:81:8c:3e:57:bc:4b:bd:66:7f:96:e3:b0:f1:
         aa:e7:b1:43:be:60:8e:45:7e:94:32:e3:c1:28:3d:dc:3e:b3:
         cb:40:62:e3:0d:f9:fd:62:60:24:13:53:af:50:10:0c:a0:1a:
         50:40:3e:2a:ea:cd:e2:6d:e0:76:e7:6e:12:64:00:4a:a6:07:
         54:54:95:8a:26:ef:98:7b:0c:c7:d1:5c:24:96:74:9a:3a:e7:
         25:97:2b:73:e0:ca:8f:65:4c:ae:bc:70:6c:0b:7f:cd:33:0c:
         94:6e:9b:8b:d6:60:db:76:e0:b3:4f:49:dc:2a:d6:fd:d5:ad:
         78:96:22:f8:e5:0f:94:64:0b:62:54:b4:b0:19:8f:c9:e8:b1:
         44:be:81:24:14:af:ba:9d:c2:3b:15:76:20:19:40:21:ec:bf:
         08:53:c2:b3:a1:a6:03:bc:89:56:ea:3e:36:91:95:14:3d:5b:
         52:5a:6a:66:9d:4a:f9:2a:aa:9f:47:d1:31:73:ae:12:4a:9b:
         ea:6a:ad:2d:10:54:7b:c1:8f:59:e0:bf:e8:23:a1:f7:71:7f:
         84:ce:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:06 2026 by rpki-client