Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
File:                     08CA5724E2B111E9A73CAB51C4F9AE02.roa (raw, json)
Hash identifier:          yxYBGxK2e+X/Pnw3SdNNnwHOuGgDYBp6fad6Yv9QSCI=
Subject key identifier:   7C:DA:61:22:FE:7E:12:D5:1E:DA:B6:9F:E7:78:2F:A0:35:CD:AB:55
Certificate issuer:       /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial:       0DE0
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
Signing time:             Fri 10 Jul 2026 18:19:03 +0000
ROA not before:           Fri 10 Jul 2026 18:19:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132341
IP address blocks:        103.14.73.0/24 maxlen: 24
                          103.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 17:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3552 (0xde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
        Validity
            Not Before: Jul 10 18:19:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a513796-900a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:af:2b:0d:31:3a:0c:f0:93:a1:f5:62:f7:
                    b4:f8:0f:2f:1d:fb:a5:a5:74:a0:40:b2:3e:cd:bf:
                    44:39:28:fc:66:81:92:9c:88:d4:da:5a:74:a8:d5:
                    dd:96:ef:66:d1:58:aa:f4:9f:96:eb:c1:de:58:9c:
                    e5:a9:13:bf:6e:6b:e2:c0:b3:4d:d2:6c:18:45:f7:
                    0d:a9:18:41:e3:ca:43:25:bc:95:40:68:a7:33:96:
                    74:61:bc:a8:06:1e:9d:e7:f0:14:a3:c7:a7:bf:86:
                    35:d4:1c:ee:20:ad:1f:47:d2:8a:01:0d:36:04:cd:
                    e1:ef:fe:3a:81:18:01:c8:44:a9:88:c5:c2:60:c0:
                    e6:17:a5:51:5f:e4:58:07:2b:98:09:48:a2:6a:c9:
                    6a:42:1d:75:b5:2e:f0:bc:47:4f:5e:47:bb:f5:15:
                    e6:6f:23:90:2c:66:51:72:e1:02:1b:8d:15:3d:3b:
                    ad:87:1f:78:4e:bf:ad:e5:7f:95:ec:33:c4:0c:6b:
                    b3:2c:55:1d:48:7a:e8:f3:65:cc:d7:67:f6:8a:95:
                    74:6b:e0:b9:f5:62:02:84:9f:94:dd:e9:09:68:a6:
                    ce:97:2e:8d:e6:3a:00:ba:98:b4:64:28:f4:2c:d3:
                    0e:cc:ad:84:57:9e:0c:42:16:69:31:b8:e8:9a:f1:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:61:22:FE:7E:12:D5:1E:DA:B6:9F:E7:78:2F:A0:35:CD:AB:55
            X509v3 Authority Key Identifier:
                keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.73.0/24
                  103.59.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:6c:57:a2:0e:6f:f0:d0:3b:e1:1f:71:22:bb:a7:60:bc:
         49:0d:bf:96:d7:16:12:aa:f3:0c:f8:1e:56:25:ea:60:38:d6:
         82:81:86:c9:53:be:e4:85:fa:18:40:87:4f:6b:09:ca:b1:8e:
         63:95:b6:d2:c1:24:0c:4f:68:ab:12:c7:04:f3:d9:21:62:fc:
         6f:c1:79:95:6b:31:55:c5:e9:a6:d0:49:f5:f5:b6:68:c7:21:
         72:3c:45:14:46:5f:03:c5:9f:48:b7:1c:3b:99:e1:df:2a:40:
         9e:c6:bf:1b:bd:27:db:8f:00:d0:16:17:c6:31:d3:3d:8d:da:
         0d:d3:7d:6c:b0:2f:ee:d1:f4:de:ff:7a:cd:60:c0:d5:a8:f4:
         61:d7:3b:60:1b:3d:c1:e0:34:37:64:95:07:5d:14:ae:63:06:
         8f:f5:8e:67:4e:19:65:3e:a2:26:4d:62:51:9d:3c:96:2e:f9:
         ff:ac:de:c3:69:48:25:f5:b7:76:c3:8a:60:99:97:33:00:a3:
         46:d8:b2:06:a2:7a:a5:e2:d1:e0:76:e8:26:a8:4f:67:4e:83:
         8d:ba:13:ec:1d:1c:af:7c:9c:78:10:5b:cd:e7:47:d5:ef:f0:
         09:0f:a3:6f:41:64:b3:89:f4:86:22:37:26:66:f4:66:77:a7:
         4d:4a:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:25:26 2026 by rpki-client