Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
File:                     E049FDF87A4511EBBB2D0A52C4F9AE02.roa (raw, json)
Hash identifier:          m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=
Subject key identifier:   53:F3:01:9D:47:19:33:1B:07:4B:4D:60:31:A6:87:32:21:43:88:1F
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       10AF
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
Signing time:             Wed 19 Aug 2026 08:02:36 +0000
ROA not before:           Wed 19 Aug 2026 08:02:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132825
IP address blocks:        103.113.92.0/22 maxlen: 24
                          103.140.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4271 (0x10af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: Aug 19 08:02:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a85631c-3641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:bb:ff:a0:a1:49:d7:a1:65:8f:1e:9e:96:
                    53:e3:87:7b:65:83:65:18:85:b4:c9:e9:0f:b6:69:
                    56:0b:b5:51:e7:78:8d:e9:41:72:db:d6:80:b9:4d:
                    b7:2c:13:08:ef:a0:9f:92:73:3e:8b:55:34:e4:11:
                    e4:ef:ff:98:2e:b0:80:d8:60:79:3f:d7:d0:c3:47:
                    71:4f:ad:a4:63:c5:bf:0b:7f:4b:e5:82:32:24:c1:
                    b7:bd:06:9b:45:ea:a1:ca:c4:98:6f:b8:c7:1a:e9:
                    4e:bc:f7:1e:24:23:cd:d1:30:ab:d3:d3:b7:c5:7c:
                    2c:f6:bf:c1:11:74:00:5d:e3:21:77:fe:b4:ef:38:
                    58:0f:73:a6:c2:51:ca:47:63:84:f7:b3:07:3f:21:
                    5b:32:cf:dd:df:68:27:45:3b:01:f2:bc:70:54:f6:
                    af:f7:57:12:73:33:5a:be:38:c8:37:02:1a:69:c8:
                    15:0d:dd:bd:89:7c:08:0c:19:45:f7:5f:97:f1:cc:
                    45:8d:4a:34:7b:af:0a:9b:1c:60:d8:1f:a9:e5:56:
                    4b:20:d7:3e:84:d5:48:b6:e6:88:50:e3:25:cb:63:
                    03:80:aa:a8:d4:f6:6a:75:28:14:64:00:61:ac:a1:
                    5a:38:ca:aa:52:a5:b7:c0:4f:2e:14:2e:33:4e:8a:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:01:9D:47:19:33:1B:07:4B:4D:60:31:A6:87:32:21:43:88:1F
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22
                  103.140.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:fa:62:39:32:42:c3:dd:dd:5f:4a:24:d6:8a:ae:bb:7e:
         8a:29:39:1a:65:db:93:ae:f8:ae:be:2a:4d:8a:ac:0a:d6:13:
         c5:3c:b0:98:5d:3f:4e:24:93:71:6c:10:b3:06:30:b7:1a:f3:
         56:52:22:e7:e9:1f:69:3d:13:02:67:7a:05:1d:09:f0:b0:2c:
         04:13:a5:e9:f1:82:05:c0:b6:bb:8d:ba:9f:79:ce:9b:f7:38:
         37:7a:f0:db:a3:28:79:92:f8:2f:d4:bb:e1:41:45:6a:c0:1c:
         e9:df:99:be:2c:81:e2:fc:22:5b:ea:ab:f0:b6:33:3f:03:0b:
         0f:6b:ad:25:8b:68:2d:c5:19:30:73:cf:b2:d4:ba:2a:c4:ac:
         a7:f5:b8:5b:c4:d0:fb:80:c5:e4:e5:d8:2f:5b:85:db:6e:76:
         7a:81:32:9c:61:e6:f0:6b:3d:b5:e9:00:65:95:31:5d:22:91:
         3c:14:e6:64:c6:dc:ad:a4:7a:e0:bc:20:f9:8b:1c:87:a0:9d:
         91:95:06:97:ac:24:de:fc:af:2e:21:b3:a0:51:8e:ed:ea:ac:
         b1:cf:2e:64:85:da:ee:34:80:b5:c3:15:06:cc:86:e9:05:fe:
         85:2b:09:d2:b5:63:e2:d6:8a:31:85:68:a7:79:b8:f7:66:77:
         2a:0c:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:55 2026 by rpki-client