Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
File:                     B3876B1821C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          PAJXVnplsOIegEPXMbATwr923PfH+sXu4QP6bOY+9aU=
Subject key identifier:   14:3A:9A:58:F7:EC:04:53:CE:84:7C:90:2A:CD:3F:C6:F5:0A:D2:8D
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       10B4
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
Signing time:             Wed 19 Aug 2026 08:02:47 +0000
ROA not before:           Wed 19 Aug 2026 08:02:47 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        103.113.92.0/22 maxlen: 24
                          103.140.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4276 (0x10b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: Aug 19 08:02:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a856327-97c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:c3:2f:c2:c4:b5:8c:0a:97:f0:cd:e1:d7:
                    f4:6a:b8:8a:23:82:81:2c:32:00:54:4f:33:d1:16:
                    93:2b:df:32:66:3a:83:70:79:d2:bc:93:c9:e2:31:
                    74:ec:97:90:54:5e:01:3b:cd:da:b6:5d:0a:57:2c:
                    6c:82:b5:8e:01:0b:a6:f9:92:08:cd:a8:a0:fb:36:
                    1d:d0:9e:31:dd:b2:21:c1:4c:55:ec:83:0b:57:17:
                    f9:20:9b:a9:d8:92:30:4c:6c:62:7c:c9:94:e1:b5:
                    e0:f4:0b:db:1b:1c:cb:21:f2:27:9c:49:b5:10:3f:
                    63:98:eb:b8:09:de:eb:2b:2a:89:b2:3d:13:2c:5e:
                    ef:9e:ee:24:3c:fa:2e:e7:9c:66:fc:47:7e:de:47:
                    f7:4c:31:dd:96:ae:bd:c1:a9:39:84:c6:c7:37:b7:
                    7f:9a:ef:91:bc:09:69:63:dd:7b:b2:e0:76:c7:59:
                    c4:ef:dc:2a:29:0d:67:ab:e8:2a:78:9a:4a:f1:e3:
                    00:61:cd:8a:3e:5f:5f:24:8d:e7:2b:20:91:4d:89:
                    50:d9:a0:c2:d0:a8:c9:84:38:73:54:13:c6:81:02:
                    2d:60:0d:5d:03:fb:19:50:27:4a:41:64:ba:c5:1a:
                    66:82:09:f3:dc:11:17:b5:30:b3:46:13:a4:7e:59:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3A:9A:58:F7:EC:04:53:CE:84:7C:90:2A:CD:3F:C6:F5:0A:D2:8D
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22
                  103.140.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:32:4e:49:e6:46:99:79:30:f1:14:b4:d3:e5:12:c2:b4:a4:
         ae:0c:bc:5a:2f:de:92:c9:58:32:a2:03:15:c3:06:ef:73:3a:
         ed:4e:dd:ae:49:ae:99:34:03:1b:85:17:4e:b2:be:54:f8:f2:
         1f:6c:96:2b:89:87:ff:c6:8e:bb:e5:44:ec:e2:93:51:6a:f1:
         e0:76:85:26:bb:15:cb:fd:22:db:67:59:55:f7:b8:9f:33:ba:
         10:e7:fd:3c:96:a5:bb:d6:da:f9:8e:8e:d8:ca:47:3d:ef:41:
         e5:07:42:24:e9:5c:49:70:7a:e8:82:8d:dd:de:25:16:dd:58:
         b4:2c:f4:d0:cc:c1:c6:8c:25:d8:76:34:c4:0e:73:11:e9:df:
         b0:72:d8:9c:cc:2e:0d:8b:0f:d2:65:89:96:5b:05:89:b4:f4:
         d9:ef:c2:55:f7:af:2b:7f:cd:ef:d9:d2:7e:76:82:ad:0e:b1:
         2c:00:ae:5d:3d:50:37:a3:4e:3a:a7:aa:55:00:b9:d1:dd:97:
         02:8f:b6:78:4b:f4:16:82:18:79:e2:c4:85:78:57:e8:e4:99:
         1b:5c:23:19:d7:7e:fd:72:d2:9d:0f:c6:15:16:18:4f:3e:ec:
         af:d3:c7:4f:9b:75:22:3c:fd:59:28:b4:65:26:61:fa:7e:98:
         45:65:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:36 2026 by rpki-client