Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/99161C06ADC411F194F1D1A63711F970.roa
File:                     99161C06ADC411F194F1D1A63711F970.roa (raw, json)
Hash identifier:          GsotaUbH2sML4fG2Cc2b4rOqx2RgTKogQEdObQ+bT9w=
Subject key identifier:   D9:E7:A5:E5:8F:4A:AA:49:A4:0A:BA:66:D2:28:C5:DC:E4:2A:18:20
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       23B0
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/99161C06ADC411F194F1D1A63711F970.roa
Signing time:             Fri 11 Sep 2026 09:38:52 +0000
ROA not before:           Fri 11 Sep 2026 09:38:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133551
IP address blocks:        103.54.148.0/24 maxlen: 24
                          103.54.149.0/24 maxlen: 24
                          103.54.150.0/24 maxlen: 24
                          103.54.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9136 (0x23b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Sep 11 09:38:52 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6aa3cc2c-9da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b0:74:ec:53:59:d2:05:60:37:a1:e6:1c:a7:
                    b6:36:b2:71:0b:82:42:88:b8:49:13:f9:61:55:98:
                    64:66:32:9e:f0:18:98:27:bb:62:b0:9b:6a:f2:06:
                    f0:82:e0:c3:bc:8f:de:33:8b:b8:ea:01:61:e7:80:
                    40:c1:19:62:7d:d4:5b:1b:5e:a7:62:7e:3d:ad:63:
                    35:42:bf:4a:59:03:56:ec:76:86:f6:fc:fc:6d:d9:
                    3a:b6:cd:71:41:3f:df:7d:57:f4:dd:5a:1e:6b:7c:
                    fb:09:69:8f:46:0e:b2:1f:d7:ea:59:47:81:40:6d:
                    fa:85:47:c9:4e:96:38:30:b4:bd:aa:97:78:2b:bf:
                    69:aa:92:3c:89:34:ba:0a:32:c3:4c:a5:28:df:e9:
                    40:22:dc:b1:09:ae:b7:bd:0e:a8:01:1b:43:44:ee:
                    a7:20:75:dd:8f:c1:e1:be:2a:b4:f8:92:d1:f8:6c:
                    61:43:a2:f9:a4:63:26:80:a9:46:12:8c:ce:89:7d:
                    24:98:2c:3a:06:6b:bc:f6:8a:e5:cf:3c:5d:ec:64:
                    b0:ce:ea:16:54:66:7c:3a:f6:5c:3d:5e:be:46:73:
                    a1:82:e2:9e:f8:0a:c9:46:f9:87:a1:b7:ac:3a:92:
                    6b:e8:e2:60:18:6c:28:4d:3e:75:bf:f2:3f:4c:40:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E7:A5:E5:8F:4A:AA:49:A4:0A:BA:66:D2:28:C5:DC:E4:2A:18:20
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/99161C06ADC411F194F1D1A63711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:05:00:b1:b2:34:cd:2a:f5:d9:d5:7e:0a:15:98:d8:5a:bc:
         3f:e3:f1:30:2e:2c:b7:a9:10:7a:0b:4b:e0:f2:6d:0d:5b:a7:
         c9:18:50:d3:d2:a7:c2:a2:77:20:fa:b6:e6:d4:fb:4c:a1:61:
         52:3d:fd:6a:7a:92:c8:11:c3:8d:b0:6b:f5:7a:1b:1e:6f:ef:
         3b:93:72:69:73:f7:38:44:51:96:01:92:e1:80:5f:b7:b9:9d:
         0c:4f:f2:e7:64:1b:cf:13:d1:da:af:37:ac:cd:d4:e0:5a:93:
         92:14:b5:df:af:a0:59:e7:a6:c4:43:80:7a:59:6b:b2:2a:19:
         87:18:7a:9e:8c:51:4b:d6:52:0d:6c:28:3f:e3:5d:ee:a4:88:
         34:e9:9f:8e:b0:5e:4a:52:9b:7c:3e:0d:44:31:1f:ad:e4:06:
         c8:7e:3a:b1:2c:eb:d9:24:27:32:3d:53:8a:0e:08:f9:9a:c9:
         d6:71:82:22:01:e6:e3:a2:0d:90:c0:92:f6:b6:eb:9f:a7:d9:
         70:74:62:26:b8:2d:fd:02:c2:9b:1f:73:b8:e4:f9:62:57:8f:
         bd:db:55:33:5e:5c:bf:c8:c0:29:77:4f:07:43:83:00:50:95:
         88:ff:7f:07:dc:b8:9a:33:83:40:3b:df:f5:96:a3:5c:f3:eb:
         d4:24:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:23 2026 by rpki-client