Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa
File:                     7E4EFF5473E611F1BA32CE558DA30FBC.roa (raw, json)
Hash identifier:          /qdXqDETNSkJ6n82kqpRqP50JWmOn7LFngEl+ouOmqc=
Subject key identifier:   96:87:2B:C6:6D:D9:08:D5:6D:B6:57:14:BC:43:3D:46:44:09:BA:4C
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0CFF
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa
Signing time:             Fri 21 Aug 2026 06:01:10 +0000
ROA not before:           Mon 29 Jun 2026 18:15:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141342
IP address blocks:        103.11.61.0/24 maxlen: 24
                          103.11.62.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.143.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3327 (0xcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Jun 29 18:15:22 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a87e9a5-60d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:94:a4:f0:46:9e:37:e7:c8:a0:8a:39:99:
                    55:ee:6f:60:a9:60:01:28:f8:7b:4d:a6:42:c1:26:
                    c7:70:97:25:71:18:aa:2e:68:10:c3:c2:d0:1c:e4:
                    a1:a5:fe:2d:40:0c:1e:3d:0e:50:1a:54:59:ac:b8:
                    af:8e:4d:32:3b:20:bb:42:c4:18:3f:60:f4:fe:a6:
                    41:ca:fe:f3:d9:95:19:94:54:82:03:c7:14:9c:e0:
                    c0:97:47:55:75:be:3b:9d:4f:20:b8:09:c6:92:e6:
                    1a:ef:91:5b:1a:30:d8:fe:cb:64:67:cf:bb:35:64:
                    ec:4a:19:cf:28:d9:ed:b9:15:31:40:a7:d9:be:cc:
                    8f:86:6c:7c:2c:6d:a4:81:ad:95:30:93:9a:44:6f:
                    e4:d2:3b:ec:1f:68:19:5f:65:6d:e3:6e:3a:e0:01:
                    2c:71:df:54:97:61:48:5c:93:44:7c:02:e9:60:66:
                    6d:bd:60:11:96:a7:c3:7a:14:86:c1:16:4c:ae:6c:
                    8b:52:d6:72:08:83:62:6e:15:d9:43:74:9d:fd:86:
                    50:4c:17:f5:d0:b0:48:0d:76:b5:e1:af:db:6b:75:
                    fa:21:1e:d2:30:eb:2b:02:30:9f:51:1b:d1:79:65:
                    e6:bc:97:63:66:df:b1:77:3c:18:fd:f2:d0:93:ad:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:2B:C6:6D:D9:08:D5:6D:B6:57:14:BC:43:3D:46:44:09:BA:4C
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.61.0-103.11.63.255
                  180.178.142.0/23
                  180.178.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:86:ba:e8:b8:27:a8:18:ed:98:e1:b2:7c:7e:3b:d3:53:
         db:e6:ed:94:be:6b:e8:95:59:1d:71:c7:66:b1:78:9e:4c:49:
         0b:20:de:d0:7f:1f:48:cb:b8:8f:df:36:58:31:33:df:f1:83:
         a3:4f:b9:6a:5b:b9:92:29:03:21:5f:45:70:cf:ac:12:da:01:
         91:62:db:6d:2d:fe:77:11:b3:a6:5e:7c:bf:2f:47:56:1d:b3:
         3b:ed:cb:a2:3c:38:00:05:27:62:d5:52:6f:35:ca:02:fe:77:
         32:e8:ed:5b:da:48:e2:8f:db:53:55:54:d7:98:01:06:5f:30:
         0b:0d:72:40:03:0d:2e:fe:df:ea:2e:aa:5a:d1:78:14:24:5c:
         61:ec:f2:66:11:88:c6:b9:00:32:ac:e2:fc:c9:4e:2d:33:44:
         6b:86:95:9c:78:0a:87:ff:cd:aa:2f:74:ff:75:84:29:d2:32:
         90:57:3e:17:ca:b4:0e:e6:79:23:16:76:c8:c2:41:fa:38:94:
         f4:87:f8:83:70:8e:21:a2:8f:6e:57:b5:3f:b5:14:e3:93:b9:
         b6:00:a4:b7:6d:a5:a4:bf:eb:76:f4:df:0f:70:63:e1:f1:be:
         50:c4:e3:ba:74:1b:8b:e5:e0:14:10:67:4a:1c:02:3c:0f:8c:
         fe:5c:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:47 2026 by rpki-client