Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
File:                     10800248E9C711EFA1589312C4F9AE02.roa (raw, json)
Hash identifier:          FNVk1Hkb1JajhsNAiR0O9BCUIhbtgvJuSIfetEBCoj8=
Subject key identifier:   37:AB:C2:ED:BF:15:41:99:99:66:CB:29:54:54:CC:82:FA:52:59:F3
Certificate issuer:       /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial:       0116
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 07:56:37 +0000
ROA not before:           Wed 29 Jul 2026 07:56:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139221
IP address blocks:        103.139.249.0/24 maxlen: 24
                          2001:df0:9d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
        Validity
            Not Before: Jul 29 07:56:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69b234-ee5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:07:aa:c3:34:35:73:08:4c:2a:a9:7e:86:
                    fe:42:63:14:bb:49:8b:15:f7:38:f1:44:92:e3:ce:
                    d7:c4:51:28:17:a7:ec:48:87:17:39:89:89:04:a8:
                    56:06:8c:27:79:f9:14:07:8c:7f:07:5f:15:e2:89:
                    ba:69:90:bd:44:96:e7:18:5d:2c:4a:71:22:b6:3d:
                    a3:2b:bb:ee:26:63:21:1a:5d:24:17:99:16:fa:15:
                    8f:8d:d9:05:03:31:6d:39:95:d9:7d:8b:d8:fd:7d:
                    fa:fe:f9:7c:b5:a3:6a:12:a6:2b:88:77:c9:d8:84:
                    23:71:8d:58:f7:d0:3d:51:8a:26:1b:7f:16:48:27:
                    33:e8:79:75:f6:6e:14:7d:fe:a0:ea:43:4d:be:c8:
                    0f:e5:31:f4:36:a9:e0:5e:0f:42:73:f8:51:75:03:
                    ac:03:41:e6:1b:85:95:4c:06:82:8d:27:97:95:53:
                    e2:bc:29:d7:16:0e:3c:8f:1d:56:54:f0:7c:74:ad:
                    12:05:f9:f3:fb:39:e6:38:24:77:a6:cf:04:df:78:
                    95:28:50:5c:58:32:80:61:d7:fd:23:4e:e9:38:b6:
                    e5:e9:12:9f:48:da:20:c2:54:2b:5e:07:9e:94:4f:
                    f2:51:a2:db:6a:ae:14:ef:1f:aa:55:88:36:bd:68:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:C2:ED:BF:15:41:99:99:66:CB:29:54:54:CC:82:FA:52:59:F3
            X509v3 Authority Key Identifier:
                keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.249.0/24
                IPv6:
                  2001:df0:9d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:c3:6a:07:5f:37:73:56:49:06:b7:aa:69:13:f1:19:ce:
         6e:24:b5:66:6a:f3:31:15:ed:34:76:c0:24:f2:db:27:67:fd:
         d5:a9:80:b2:1b:36:e5:e3:ed:16:d3:78:1d:4f:41:f2:3b:ea:
         8d:f2:32:d8:dd:5a:b9:fc:c0:59:93:37:44:46:4f:6c:80:e9:
         68:10:aa:ec:ce:59:11:be:51:7c:ef:29:2c:91:dd:6b:cb:f5:
         d2:f0:71:1d:0f:8f:fe:3f:fa:e9:9e:8e:7d:2e:ea:f1:d7:6d:
         b3:6f:c6:a9:f9:00:79:7d:ee:76:84:49:db:c6:eb:44:33:ee:
         f8:1d:a4:ee:e1:b7:60:51:55:95:df:1a:b0:81:2c:93:f2:ae:
         da:ff:45:31:0f:bf:37:07:19:ae:c0:bf:43:ad:8e:61:a7:b1:
         99:1d:7c:90:34:80:56:b8:1c:c4:25:2b:85:f9:2d:8c:ee:4e:
         a8:b2:72:c2:38:cc:c9:75:68:94:76:7e:b5:1e:d2:39:07:61:
         8f:4d:e8:27:51:31:fb:e7:23:3a:5f:82:d0:41:c5:fe:e3:39:
         66:ec:d7:8a:6a:95:b1:ba:4a:0e:b7:21:e3:3c:69:cd:ee:45:
         b6:b2:f4:d3:02:75:df:7e:f1:68:05:97:6f:53:fd:4c:30:8d:
         9a:b9:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:05 2026 by rpki-client