Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
File:                     B490CD0621C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          WR/88pfaCczDigHpfgd4GYy1P6qmyhWsOy4WabOWrlU=
Subject key identifier:   3D:CB:87:5B:DD:EA:6E:AD:41:64:4B:BC:6C:73:4F:38:E5:A1:D0:6E
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       10B3
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
Signing time:             Wed 19 Aug 2026 08:02:45 +0000
ROA not before:           Wed 19 Aug 2026 08:02:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138538
IP address blocks:        103.113.92.0/22 maxlen: 24
                          103.140.228.0/23 maxlen: 24
                          2402:b940::/40 maxlen: 40
                          2402:b940:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 17:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4275 (0x10b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: Aug 19 08:02:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a856325-5f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:3d:17:78:cb:9a:43:6f:d1:b2:c2:5c:f5:
                    6a:6b:e0:4c:e7:c6:6e:db:71:2c:4b:82:ae:0a:60:
                    24:1a:ad:cb:36:08:f8:fc:62:92:89:45:fd:ae:10:
                    59:de:4d:d1:1e:62:67:03:28:f8:1c:23:f8:cf:97:
                    c8:73:fa:97:9f:cd:54:4f:17:a6:4b:3c:e3:87:b5:
                    9a:a0:98:2f:1c:1d:b4:69:45:98:c8:b0:69:df:80:
                    a7:86:53:16:5d:11:78:ba:c6:78:7d:60:27:a2:1e:
                    b0:33:35:9d:aa:2b:6e:68:a0:51:31:16:c2:82:49:
                    fb:6a:29:cb:df:1b:01:fc:e4:f3:77:a4:b6:37:a7:
                    59:c3:01:12:07:35:7e:fc:7d:d1:de:7f:b8:7d:69:
                    1a:46:53:e5:dc:0e:19:a9:bb:18:a5:e3:be:81:53:
                    a7:a2:47:ad:f8:f5:b5:e1:98:92:5e:88:b7:85:15:
                    d5:9a:1c:36:00:e9:ba:7d:10:d4:a5:e4:dc:22:ed:
                    da:ba:59:2a:83:be:6d:16:b5:5d:9e:b7:f7:d7:1e:
                    61:d4:20:1e:66:79:3f:30:b0:26:e1:4b:a1:48:ff:
                    d3:c6:05:a1:5a:2b:14:b1:3e:8f:74:08:ef:dc:27:
                    bf:81:4f:c7:38:c7:37:6e:5a:8c:05:e1:db:cf:51:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:87:5B:DD:EA:6E:AD:41:64:4B:BC:6C:73:4F:38:E5:A1:D0:6E
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22
                  103.140.228.0/23
                IPv6:
                  2402:b940::/40
                  2402:b940:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:73:a1:e0:fe:88:ef:0a:7c:67:78:9c:ba:1c:4c:f7:48:
         32:88:c3:99:97:e8:7a:e4:29:3f:5c:89:aa:05:d8:d7:0d:af:
         57:72:39:68:3d:b9:f9:e6:f8:20:33:ac:b0:bd:d3:e7:d2:c3:
         13:50:60:c9:5c:0c:3b:bf:68:ed:e0:3e:21:04:ce:92:87:aa:
         9b:a2:b5:0e:3d:47:49:20:0d:c3:1e:e1:8e:e4:11:11:9b:6c:
         f5:c4:c7:44:07:a2:97:5a:27:53:45:69:85:2a:78:e0:91:08:
         19:93:dd:45:d9:87:7f:55:07:f3:d1:08:6a:f2:92:f7:c8:cd:
         0e:b0:78:42:96:b8:fd:84:8d:4d:ed:45:05:b7:31:23:34:af:
         b6:11:9e:0b:4d:8d:1b:cd:ef:e3:ab:d4:bb:cd:04:e1:e6:3a:
         2d:7f:15:2e:4d:15:ef:e4:45:69:e0:d8:ee:d9:38:d3:cf:f0:
         3f:1d:5e:90:e6:b2:52:9c:44:c1:71:63:e3:ba:27:80:a8:4e:
         11:97:6d:cb:7b:39:2c:04:bb:22:77:ac:51:ca:1b:f4:08:45:
         ab:2a:18:e0:56:da:3b:50:be:bb:8f:f3:e2:64:c5:8d:13:41:
         28:22:10:f8:81:d2:0f:43:52:dc:97:ae:ac:4b:02:8a:6c:d1:
         64:ac:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:28 2026 by rpki-client