Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa
File:                     41A09C683D8211EEA0E4DD46C4F9AE02.roa (raw, json)
Hash identifier:          Ja4/CMw03eHsoSI1SxDv/gmDoWhVR1WIiVpoLLzR9uI=
Subject key identifier:   63:73:14:D5:69:FE:87:A6:25:1C:4E:06:12:76:D3:A2:92:7D:D6:00
Certificate issuer:       /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial:       0FAB
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 17:35:22 +0000
ROA not before:           Wed 12 Aug 2026 17:35:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137818
IP address blocks:        103.5.0.0/22 maxlen: 22
                          103.5.0.0/23 maxlen: 23
                          103.5.0.0/24 maxlen: 24
                          103.5.1.0/24 maxlen: 24
                          103.5.2.0/23 maxlen: 23
                          103.5.2.0/24 maxlen: 24
                          103.5.3.0/24 maxlen: 24
                          126.209.88.0/22 maxlen: 22
                          126.209.88.0/23 maxlen: 23
                          126.209.88.0/24 maxlen: 24
                          126.209.89.0/24 maxlen: 24
                          126.209.90.0/24 maxlen: 24
                          126.209.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
                          rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 17:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4011 (0xfab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
        Validity
            Not Before: Aug 12 17:35:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7caeda-f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:12:8f:80:3d:0b:95:33:5e:4a:96:5f:0e:
                    b4:49:8a:f3:5e:d5:00:f1:97:79:b0:85:ca:de:90:
                    ae:2d:e0:2e:21:ce:60:75:d2:a5:98:b6:90:4f:8a:
                    e5:89:9f:db:cf:71:bf:55:6c:76:8d:08:b4:f7:7b:
                    f8:06:69:10:88:33:04:d6:29:2c:b7:9a:3a:40:79:
                    80:30:3f:be:66:3c:62:51:46:d0:49:a6:a9:51:12:
                    92:cd:0c:eb:99:5d:bb:93:32:7f:f2:66:6d:6a:aa:
                    26:98:79:a5:7b:a1:d3:7d:17:cd:3a:fe:7a:9d:aa:
                    85:a0:c4:6d:6f:53:41:d6:1f:22:d6:ac:f0:18:bd:
                    da:82:1a:65:a7:fc:98:97:e4:37:f9:62:8b:a2:3d:
                    ad:ba:26:10:a0:91:a6:b3:d7:a9:7b:dd:a0:04:74:
                    02:cf:c4:32:4e:66:e2:3e:16:95:e1:0e:61:11:be:
                    60:f3:20:5f:66:03:e5:01:55:e4:93:9b:e7:56:9a:
                    c3:53:d7:d2:6b:7a:0b:5d:97:8d:82:74:19:a7:e4:
                    62:43:e5:94:b6:6b:f8:77:b3:b6:f2:56:f3:fe:46:
                    79:60:f6:c0:bb:e7:8f:75:7d:a1:f4:9a:8d:92:4d:
                    c0:44:2c:b9:d0:8d:57:98:69:42:a8:9f:02:c9:12:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:14:D5:69:FE:87:A6:25:1C:4E:06:12:76:D3:A2:92:7D:D6:00
            X509v3 Authority Key Identifier:
                keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.0.0/22
                  126.209.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:93:f0:f9:9a:52:ec:38:ac:45:38:10:75:12:d1:89:df:e0:
         6b:b2:4e:b6:e9:23:fa:e1:ba:7c:a6:9c:90:28:c5:2f:88:6d:
         8d:91:66:97:e5:21:23:85:94:f0:b5:c3:64:d3:e2:55:06:7d:
         85:83:a2:a3:8c:43:fe:d2:e9:9b:ae:64:fe:59:1e:72:b0:15:
         4b:ad:4d:60:53:67:79:e6:61:cc:30:8e:50:85:fd:c9:d8:04:
         93:bc:42:56:84:1c:b9:af:af:c3:8c:25:5e:a2:6d:99:52:5d:
         d3:81:ba:21:db:87:d9:96:c1:f3:44:39:df:17:3d:36:ba:a8:
         3c:84:61:ac:35:82:17:4f:13:4f:ec:15:a1:bd:fd:30:5e:11:
         99:7f:fd:08:c6:2a:33:1f:12:42:e4:70:d7:92:ef:7b:03:71:
         cd:22:90:56:ee:d4:44:06:6d:55:6a:04:79:3b:f5:31:c0:21:
         ef:9b:d3:91:a0:0d:64:2d:4a:da:27:f9:0f:c4:9d:c1:eb:ab:
         20:ab:38:f4:b0:d6:87:56:cb:b0:66:02:c4:59:9a:48:d4:dc:
         c7:1a:3b:df:ec:f6:75:e7:e9:f5:55:af:5a:98:50:43:2e:65:
         84:e7:7b:8d:b7:cd:66:d3:b1:32:9c:8b:00:92:40:91:b4:d5:
         d0:29:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:39:04 2026 by rpki-client