Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/CCF7B8AA22B811ECAD21FB20C4F9AE02.roa
File:                     CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (raw, json)
Hash identifier:          1CyYq91UMI9nO5A27oE7aoFsJZc6+2bPjCTWW5sqvcE=
Subject key identifier:   15:4E:84:C0:12:64:8E:D9:96:8F:22:2E:90:F6:2C:1B:49:0C:6B:91
Certificate issuer:       /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Certificate serial:       095D
Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/CCF7B8AA22B811ECAD21FB20C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 20:41:25 +0000
ROA not before:           Sun 30 Aug 2026 20:41:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140916
IP address blocks:        103.153.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
        Validity
            Not Before: Aug 30 20:41:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a949574-10d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:92:19:ec:2c:f1:1c:81:d7:86:33:c3:69:
                    3e:a8:15:a0:01:4f:11:e3:a4:bb:ac:28:48:33:2c:
                    6d:19:a0:b0:56:a1:90:38:22:31:fa:44:2a:23:d3:
                    c4:d8:56:f4:74:5b:01:c0:29:ae:0a:10:36:e3:5a:
                    c2:da:04:65:83:24:ba:7d:25:fc:4a:17:c5:a6:f3:
                    22:3c:45:a5:28:72:a6:7d:e7:5f:49:0f:a7:a0:db:
                    dc:39:47:89:94:dc:09:bf:fa:bd:3e:56:e2:14:c8:
                    5c:eb:0d:47:71:59:19:e5:8d:bf:da:57:78:a8:2a:
                    18:da:1e:28:e0:8c:a2:7b:76:4a:83:b2:48:6a:6a:
                    92:c9:21:c4:c0:d1:86:bc:8b:9b:a3:5e:94:0e:e5:
                    6a:e9:37:ac:71:55:94:9a:85:f0:68:3b:ff:7b:97:
                    c3:23:d9:f9:a1:38:bb:77:fa:e2:c8:c0:19:6e:11:
                    ec:b9:bd:a0:b0:66:4f:7e:e9:0f:da:17:f3:55:36:
                    0d:3c:cc:ef:ed:ae:83:a4:0b:87:a0:87:af:b5:e2:
                    97:80:4e:22:36:5e:f8:3a:a1:37:69:eb:60:8a:76:
                    98:8c:a8:50:14:81:76:2b:bf:ca:2c:9a:a3:6b:39:
                    38:87:cd:72:81:13:66:5d:c4:c4:c0:8e:87:7c:b1:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4E:84:C0:12:64:8E:D9:96:8F:22:2E:90:F6:2C:1B:49:0C:6B:91
            X509v3 Authority Key Identifier:
                keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/CCF7B8AA22B811ECAD21FB20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:81:c2:bb:8d:8d:29:ae:75:e0:3f:9c:1f:99:e5:71:bd:
         ff:52:d4:70:53:30:6e:35:8b:90:77:f7:d0:54:14:5f:4d:06:
         3b:2d:86:ba:52:33:d0:31:c4:e2:58:06:d0:61:c1:95:e1:44:
         fc:13:32:a3:b6:7f:fd:8d:6e:b6:eb:db:d0:4a:fe:ef:61:2f:
         81:03:ab:b5:97:9a:c9:05:cd:2d:ae:d1:e9:2a:37:83:3d:f6:
         e7:18:da:4a:8b:c2:38:a7:1c:c8:43:58:08:b7:ca:02:0a:16:
         fc:da:f5:62:25:e1:9f:87:30:f6:9e:d1:1a:ca:be:75:56:57:
         79:32:83:69:88:49:96:c2:49:3c:d9:93:ce:e8:16:98:fb:30:
         45:3a:f3:d6:b5:d2:16:ca:ad:3b:a7:98:9b:e6:f3:d0:ef:25:
         e9:b6:d7:d8:07:62:4d:57:15:0f:1b:42:d8:3b:c4:a4:e8:44:
         ef:ad:08:14:5e:5f:e3:07:ce:8d:a6:8c:3b:0f:20:15:63:7e:
         5b:77:8d:44:70:e4:c2:44:9b:53:d2:22:d4:3d:ef:5b:ab:5c:
         8c:92:8e:fe:85:a7:3e:28:ac:4c:19:ee:89:f6:79:80:91:2e:
         b7:8b:d4:cb:8e:50:6a:a0:26:18:19:71:70:cb:b2:29:f4:20:
         2e:16:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:19 2026 by rpki-client