Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa
File:                     A9FF43AE9ABD11F1884A0E584611F970.roa (raw, json)
Hash identifier:          XmkyGDgjhGiUJuJ/QakCaJv3BagtT8L6vuw2bfv1WzM=
Subject key identifier:   23:4A:4B:C0:A2:39:A9:C1:EE:DC:FE:06:EA:64:69:FC:5A:22:08:43
Certificate issuer:       /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial:       14A2
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa
Signing time:             Tue 18 Aug 2026 04:31:22 +0000
ROA not before:           Tue 18 Aug 2026 04:31:22 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137952
IP address blocks:        103.118.44.0/22 maxlen: 22
                          103.118.44.0/24 maxlen: 24
                          103.118.45.0/24 maxlen: 24
                          103.118.46.0/24 maxlen: 24
                          103.118.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 16:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5282 (0x14a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
        Validity
            Not Before: Aug 18 04:31:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a83e01a-5833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:eb:c4:08:c5:a5:e0:42:5c:9a:84:8a:e5:
                    33:8a:af:41:ad:b0:d9:38:d6:f4:37:62:4e:46:11:
                    ed:9b:89:ac:da:34:0b:89:29:33:64:cb:7a:dd:3d:
                    c8:20:6a:8e:22:19:97:e0:aa:b5:8a:40:97:d6:df:
                    dd:a2:36:33:5c:29:da:fa:46:72:ff:6b:95:bf:2e:
                    ca:9a:de:b4:1e:cd:cc:69:e8:d2:5c:d5:5a:b0:fb:
                    2c:ee:83:86:c9:76:5d:c2:60:d3:5c:6e:8e:01:db:
                    42:fb:af:dc:7d:73:98:b1:a1:45:32:bc:e2:fb:17:
                    a8:cb:0f:27:18:e6:89:4b:74:e2:e3:ab:d9:99:e1:
                    61:2e:e1:a7:4a:92:32:6f:dd:e0:2f:61:fe:1c:8e:
                    da:63:32:74:92:96:9a:1e:3e:07:97:6a:ce:cd:3c:
                    37:8a:b6:15:d3:06:a8:3b:fa:12:a7:83:2b:fc:d4:
                    19:44:ff:e1:49:cf:3e:22:ae:1c:ea:ef:81:61:10:
                    7c:7e:b9:b7:c3:04:ca:f8:23:a3:c6:b9:31:06:aa:
                    1e:ed:63:2d:f6:41:49:04:3f:6e:e3:40:f2:c2:ff:
                    5f:63:52:3b:ae:f3:e6:2e:3b:a2:04:58:d0:d3:ef:
                    88:51:ba:fe:50:4d:90:53:f9:c0:69:41:45:51:81:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:4B:C0:A2:39:A9:C1:EE:DC:FE:06:EA:64:69:FC:5A:22:08:43
            X509v3 Authority Key Identifier:
                keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:71:bb:73:d6:b6:21:c5:0a:ef:0f:cc:e5:c8:66:d5:b9:df:
         a5:c2:10:0c:ff:18:e1:a2:4e:d9:55:d2:98:3f:19:a4:9f:83:
         c6:b6:c5:22:b6:fa:ed:25:ef:ef:da:7d:bd:69:4a:99:9a:4f:
         73:1f:07:00:68:57:ec:18:71:bf:cd:a2:71:71:b9:8a:cc:0c:
         cc:61:18:8e:fc:55:a7:5d:03:38:b6:f8:a0:00:55:ee:bf:c3:
         8f:29:b5:95:c0:fb:a6:ca:00:aa:64:21:27:b0:de:70:dd:4e:
         cb:f4:24:c5:15:a4:aa:fe:57:78:9e:67:ba:a5:97:a3:e3:3e:
         06:7d:49:53:da:2b:62:fd:cb:05:a2:ca:ee:ee:b2:8d:ff:f9:
         c1:5c:2c:2f:88:59:95:fe:92:5e:59:5e:03:e9:d9:59:17:5a:
         e9:7e:f8:45:14:23:7e:8c:de:31:8a:ee:23:59:9f:71:43:f0:
         d2:ac:96:17:29:a7:f2:1d:84:05:84:8d:35:b7:82:9d:1a:01:
         21:99:91:58:87:21:28:e3:83:fd:48:48:26:53:ff:e9:c7:ed:
         5f:07:f4:77:d6:0c:a8:a8:0b:8e:42:4a:43:46:f4:51:85:80:
         51:8e:6f:f0:c5:60:91:26:b8:77:b3:f2:78:aa:2e:0f:ae:45:
         05:11:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 17:13:11 2026 by rpki-client