Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa
File:                     AB4610AA7EAF11F1B80EBCC267A30FBC.roa (raw, json)
Hash identifier:          X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=
Subject key identifier:   DC:09:7E:7A:0A:FE:AF:A0:5F:35:7F:92:ED:AC:A8:54:C1:50:9B:A1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       094D
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa
Signing time:             Mon 13 Jul 2026 11:40:38 +0000
ROA not before:           Mon 13 Jul 2026 11:40:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     147003
IP address blocks:        103.70.224.0/23 maxlen: 24
                          182.255.60.0/23 maxlen: 24
                          182.255.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 20:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jul 13 11:40:38 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a54ceb6-427e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:84:13:fc:7a:24:a8:33:62:1d:d8:97:d4:
                    29:81:27:c8:67:43:ac:78:5b:86:ed:6c:68:78:6f:
                    0c:c3:e0:83:6a:66:41:b1:99:45:6d:24:3c:88:7f:
                    8f:f2:06:b1:e9:ca:c9:29:5e:dc:85:27:b2:c8:54:
                    38:aa:77:c6:db:ee:a6:ab:9d:b8:88:07:77:6f:b6:
                    55:41:54:1d:29:f5:74:9e:ef:a7:8f:4a:78:bf:ad:
                    bb:57:fb:a0:ee:b1:bc:fd:c4:11:6a:79:75:0e:73:
                    3b:d9:de:66:d5:f3:da:9d:08:92:10:6a:4f:e4:af:
                    f6:b7:7f:0b:0b:17:7f:43:22:8a:56:02:f4:42:fc:
                    6e:39:6e:02:4f:51:d8:3f:7e:fa:a0:19:22:94:c7:
                    eb:33:16:1f:ff:8a:df:5b:d6:96:d8:71:9c:6f:58:
                    dc:80:47:cb:95:4a:cc:13:bd:a8:85:8a:09:29:19:
                    54:1c:30:2e:0c:fb:e6:3f:9f:dd:2d:39:13:b8:ff:
                    97:f3:91:71:bc:d8:2e:54:eb:5a:38:3f:9f:bb:5b:
                    79:65:2c:9f:5e:20:df:dc:89:03:7d:0b:d9:86:fa:
                    b5:9f:f0:c1:20:96:ba:09:4c:2e:ec:1f:59:86:ff:
                    c7:fc:c5:8c:8a:6f:2b:ab:5b:bb:69:c1:5d:d3:d2:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:7E:7A:0A:FE:AF:A0:5F:35:7F:92:ED:AC:A8:54:C1:50:9B:A1
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.224.0/23
                  182.255.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:69:52:bc:54:53:ef:0f:cb:27:da:cd:bf:3f:67:d1:50:e8:
         ed:f3:00:d9:3f:8e:89:55:64:53:a4:c4:a7:f5:f8:c5:df:6e:
         e8:58:60:2e:3f:52:0f:21:92:c3:87:49:9a:14:c3:21:be:11:
         95:27:5e:63:d1:74:f8:e0:a2:e4:8d:bd:28:1e:b1:b7:e5:1b:
         79:e7:9f:53:14:d9:b2:4a:20:ee:21:eb:ef:bf:bc:4f:18:ac:
         e9:6d:0d:c3:98:76:f7:35:1b:8d:c6:54:95:df:67:02:3b:d9:
         32:c4:aa:51:3a:82:a7:24:2f:53:23:08:6e:09:d9:43:5c:7a:
         37:41:64:9a:91:8e:0d:65:df:5b:42:ed:e1:40:89:1d:b1:89:
         b0:25:66:7d:e6:dd:ba:8b:26:ae:c3:4f:b3:c4:59:e8:36:ab:
         dc:36:c9:19:d9:71:3d:3c:4a:a7:79:48:fe:46:b7:e8:78:f2:
         16:fa:f2:a7:2a:92:87:fc:8b:01:ff:e9:18:50:28:11:18:d4:
         03:df:ef:ff:12:fb:9f:b4:c8:70:13:d2:58:7b:0e:c9:48:09:
         b1:45:6b:d2:a9:cf:66:90:15:c9:79:30:aa:4a:5e:68:3d:c3:
         7b:3a:9b:88:7f:08:b8:10:0b:4b:be:6c:9d:3c:78:56:2d:ac:
         46:f1:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:54:34 2026 by rpki-client