Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa
File:                     DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (raw, json)
Hash identifier:          QgqF58PL/WHxb7P9Tdfn5N/aixzF4pZA2mT5EsxMJlc=
Subject key identifier:   A8:CA:6E:F8:D9:18:8F:92:42:6B:00:5A:BE:9B:E5:82:16:48:F8:DD
Certificate issuer:       /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial:       12F0
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 17:33:24 +0000
ROA not before:           Fri 24 Jul 2026 17:33:24 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137947
IP address blocks:        103.118.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4848 (0x12f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
        Validity
            Not Before: Jul 24 17:33:24 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a63a1e4-c93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:24:99:c0:0d:b4:cb:d7:62:71:08:6b:ab:
                    bc:3d:05:39:7d:35:e8:da:31:63:d1:8c:9f:2c:1f:
                    d5:1c:f1:33:a8:6a:8a:be:59:d5:fa:62:c1:b9:a4:
                    c8:ce:ce:7e:9e:22:08:57:18:8a:60:65:76:72:55:
                    74:ce:b2:7d:97:83:b7:3c:a7:52:78:77:10:af:28:
                    77:90:3a:00:82:74:81:8c:2e:66:38:0d:91:8f:b3:
                    a9:bf:f0:0d:43:6e:4e:c0:bc:c7:09:95:d2:43:d9:
                    5f:b4:21:c6:10:43:6e:70:aa:3a:ac:c5:87:55:aa:
                    a4:8c:55:31:a8:9c:24:12:39:59:de:31:36:07:48:
                    c2:fc:8e:cb:ca:6c:ea:0e:d4:5a:41:5e:07:f2:d3:
                    14:9e:54:1c:2c:ca:dd:4b:d8:15:ee:45:e6:36:7f:
                    73:1f:da:9b:1c:97:79:5b:05:33:c9:62:0a:03:1d:
                    39:a1:45:2d:89:ae:41:71:65:04:33:65:9a:c1:72:
                    78:a5:ca:32:8b:23:55:58:d3:73:e2:d5:4f:3a:4d:
                    42:54:a7:29:77:7b:ef:67:d6:1d:cf:90:e0:13:8e:
                    34:cc:82:39:42:59:e1:95:6a:08:01:ed:3a:ac:38:
                    34:13:4c:8c:a1:ab:b5:14:0a:ab:cc:a7:a9:3c:e2:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CA:6E:F8:D9:18:8F:92:42:6B:00:5A:BE:9B:E5:82:16:48:F8:DD
            X509v3 Authority Key Identifier:
                keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:e9:b5:30:93:3b:21:20:4b:d0:46:ee:01:ad:56:2a:a5:
         40:74:89:3f:19:cb:16:ab:6a:d7:84:1e:18:bd:40:ea:af:24:
         e1:5c:ee:dc:13:05:25:ff:d8:e8:96:e5:f6:1f:e0:30:0c:c1:
         a7:a4:02:8a:17:72:95:37:47:0c:e4:61:2b:b2:28:6f:53:91:
         35:9a:40:11:c8:ed:6f:04:18:06:c6:12:af:4d:4c:c3:51:94:
         db:b4:bc:69:e1:72:98:b9:a6:4a:85:14:83:67:0c:6e:ed:cc:
         4c:d6:60:44:e7:d4:a3:7d:12:ad:c2:d4:e5:99:b8:c4:ce:42:
         4c:4b:f9:13:59:0d:34:3c:16:6e:1e:58:b7:ae:27:26:24:33:
         d9:9d:d4:ca:8f:52:67:bf:a2:cc:66:1b:c4:dc:73:fd:84:45:
         bd:8a:e1:39:70:19:f7:98:da:fa:a1:a1:d4:91:30:3f:8e:8e:
         36:25:c6:de:2d:5a:2e:19:2b:de:b2:81:5c:2f:20:d9:70:76:
         45:9f:18:d6:e0:c6:06:60:05:3f:37:60:45:4c:b1:99:1e:b4:
         ee:5e:ca:fc:d2:43:dc:75:26:c8:f9:3c:35:2d:ef:ad:ad:69:
         2c:f4:90:52:a8:3d:21:4c:e8:97:db:c5:14:3e:03:0d:eb:23:
         15:45:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:46 2026 by rpki-client