Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa
File:                     975A513293B011EF9203EA6BC4F9AE02.roa (raw, json)
Hash identifier:          PsUZYEFQ3YDAk7SEhruCNoeg40A0hC1loDNctnkPink=
Subject key identifier:   11:26:B4:9D:94:5E:AE:D9:08:7E:09:C8:A6:0B:FE:1B:68:8B:5C:94
Certificate issuer:       /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial:       0269
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa
Signing time:             Sun 11 Oct 2026 03:51:44 +0000
ROA not before:           Sun 11 Oct 2026 03:51:44 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     140632
IP address blocks:        103.203.236.0/24 maxlen: 24
                          2001:df4:4cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
                          rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
        Validity
            Not Before: Oct 11 03:51:44 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acb07cf-1c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:7e:e8:f7:84:67:ae:44:2a:e8:95:e6:3c:
                    eb:1a:51:d1:1b:34:c7:90:62:ef:d7:3e:66:06:54:
                    d8:c8:9f:18:c1:7c:5c:61:63:62:ce:f0:22:72:b9:
                    2a:3e:75:97:db:22:f7:90:ef:2f:98:a8:a0:0b:1f:
                    e0:72:b2:0e:a0:67:df:e3:e8:0e:48:12:21:f0:80:
                    dc:df:42:d9:ff:0b:44:c9:6c:75:ba:9d:3e:5a:51:
                    bc:57:3c:5b:c2:01:dd:11:54:58:20:a1:9c:64:07:
                    3f:db:52:7f:2c:98:76:5f:5d:2d:c3:8b:6a:ca:d7:
                    e1:3d:e0:4f:01:05:4f:5a:db:b3:ea:b1:b9:a2:76:
                    3d:45:e0:94:a3:b2:28:bb:93:1b:91:26:e7:4f:45:
                    ef:39:c0:85:01:18:59:fe:82:6f:b9:4e:45:a0:e4:
                    12:96:d7:9f:7f:4e:c5:af:fc:8a:d6:7d:27:31:d5:
                    c0:b3:4c:b0:c4:28:fa:a2:09:0a:63:f9:e1:39:38:
                    37:f0:20:7a:d9:00:5a:94:b0:36:a5:3f:2b:9f:b8:
                    ec:c4:b3:51:dd:c1:9b:ce:62:5d:9f:d1:cd:36:b9:
                    e3:ab:48:09:3d:6f:21:28:e5:da:e2:2b:59:67:63:
                    35:60:47:f7:30:b4:6a:50:02:95:43:80:92:8d:94:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:26:B4:9D:94:5E:AE:D9:08:7E:09:C8:A6:0B:FE:1B:68:8B:5C:94
            X509v3 Authority Key Identifier:
                keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.236.0/24
                IPv6:
                  2001:df4:4cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:50:07:be:17:f2:f3:5f:5d:9e:1b:b8:82:bd:bb:d4:6c:e1:
         e5:58:18:e4:cc:bc:8d:b7:a1:23:b0:67:27:1d:17:b8:dc:c1:
         c5:87:86:06:86:e2:16:e4:3c:75:99:60:f6:1e:38:a3:1b:0d:
         93:97:7d:0f:9c:02:ff:ac:cf:ed:d8:a5:39:e1:5f:4c:13:94:
         01:e5:48:f6:22:65:f7:7d:5a:5d:6b:72:74:b6:9a:a6:b2:d0:
         c7:61:f3:60:c0:08:5c:50:f2:8b:12:3f:9f:a3:ee:ae:dc:13:
         59:88:8e:ea:51:3c:7d:6e:0a:57:bd:8c:51:9c:f1:c1:06:2e:
         5c:26:ae:9f:d4:a4:5c:50:de:63:c4:ff:bf:43:15:f4:a1:9b:
         c1:14:8b:de:ad:23:f8:38:0e:1c:e5:02:ba:18:e6:16:c2:6e:
         93:25:06:91:91:ae:36:c8:9f:0b:f9:59:2f:c3:9f:1e:de:52:
         fe:42:4a:5b:1e:f7:ac:9b:00:5a:ff:06:5b:8c:8b:7b:de:2a:
         27:48:9c:d7:11:b7:c6:66:7d:a3:dc:e3:fc:af:42:24:24:40:
         06:ff:44:f3:7d:f3:ee:38:5f:d9:94:2d:35:7f:3d:08:71:6d:
         84:02:b2:f6:15:a6:41:3b:e4:33:69:f4:4d:7d:98:d1:9b:ef:
         f6:8b:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:48:15 2026 by rpki-client