Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/437B845AA75E11F18D55ABAC3511F970.roa
File:                     437B845AA75E11F18D55ABAC3511F970.roa (raw, json)
Hash identifier:          KkB7Z/CjW4a1j7rbg+3yLaGcZSURtQTK7byyrXOXNow=
Subject key identifier:   FF:91:4F:C5:41:0A:51:DA:07:B1:51:DF:9D:6C:19:89:CA:2E:13:D1
Certificate issuer:       /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial:       024C
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/437B845AA75E11F18D55ABAC3511F970.roa
Signing time:             Wed 09 Sep 2026 02:53:46 +0000
ROA not before:           Wed 09 Sep 2026 02:53:46 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141047
IP address blocks:        103.155.68.0/23 maxlen: 23
                          103.155.68.0/24 maxlen: 24
                          103.155.69.0/24 maxlen: 24
                          2406:6940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
        Validity
            Not Before: Sep  9 02:53:46 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0ca3a-cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:69:4b:ce:40:25:23:1d:b6:2b:f8:66:37:
                    68:be:e0:93:78:92:9d:a3:c8:1b:5f:5f:b1:c5:7f:
                    33:16:e7:d6:e8:11:4e:36:b4:da:e7:e1:b6:b7:61:
                    43:11:2b:66:9e:40:cc:1a:93:f3:24:ed:29:4e:69:
                    8e:20:31:ab:e7:7a:44:1e:81:31:7d:54:95:95:5b:
                    b8:d2:0f:b9:f8:67:ee:e3:b1:86:d7:e0:c3:d0:db:
                    70:83:f0:94:e1:69:0b:fa:e3:db:fe:ea:20:d3:89:
                    92:44:6d:1d:fa:ba:84:da:a6:2d:93:d5:93:f7:95:
                    60:0e:d6:dd:1f:ae:d6:77:6f:69:20:0e:b7:a0:58:
                    eb:45:91:a2:90:2a:16:e1:42:2c:a3:64:3e:9e:4a:
                    8f:14:56:88:1f:84:cb:6f:64:6e:9c:c2:d2:8d:79:
                    8f:a5:f7:70:d4:e5:23:47:bc:4f:6d:e1:38:8c:b0:
                    b0:19:21:53:ea:37:76:3e:0c:cd:57:f3:d8:fc:38:
                    dd:4b:0e:56:aa:0b:8f:7f:fc:5c:86:31:49:ab:67:
                    10:b0:7a:8a:9a:60:a7:81:89:53:26:1c:3d:e6:ff:
                    3c:7d:d8:26:1d:28:cd:2c:40:fc:c9:3e:10:d4:37:
                    b1:38:ca:67:83:a3:9f:83:fe:1f:c8:f8:c5:ca:1f:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:4F:C5:41:0A:51:DA:07:B1:51:DF:9D:6C:19:89:CA:2E:13:D1
            X509v3 Authority Key Identifier:
                keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/437B845AA75E11F18D55ABAC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.68.0/23
                IPv6:
                  2406:6940::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:b9:28:50:e1:62:4d:5e:1b:02:73:7b:90:f2:ad:7e:e7:
         fb:d1:90:e1:7c:c4:1c:45:dd:3e:74:d4:c0:86:76:b7:0e:08:
         d8:c0:1b:04:ea:f1:7e:86:0e:f9:e1:39:19:10:43:a3:38:65:
         4c:11:fe:a9:be:f3:e8:b0:58:fc:6a:fe:eb:ab:b6:cd:18:11:
         47:49:f6:ed:24:b7:49:3f:5f:2c:e9:6d:23:b4:34:ff:8a:53:
         96:ee:3e:c3:20:93:2c:b5:41:34:24:10:a4:fd:82:8a:a2:e3:
         eb:fb:44:04:82:0d:62:fe:f3:2f:07:21:48:84:27:30:e7:e1:
         db:d9:c4:10:32:de:17:97:00:7d:71:c1:40:b9:fa:af:4c:53:
         4c:cd:b8:38:db:01:8f:cd:b7:46:a8:75:07:88:8d:2b:6a:30:
         43:f6:76:32:f1:8c:f2:fc:13:1a:eb:4a:92:d0:6e:5e:89:90:
         40:ed:d4:fd:99:0b:91:5c:ee:d3:c7:40:52:97:09:d5:4c:05:
         bc:b6:74:89:ba:7d:d9:ec:5a:cd:ea:dd:36:4f:40:83:56:98:
         ed:06:52:64:9e:b9:44:90:91:5c:29:82:eb:0b:4b:ba:cf:a5:
         79:21:2c:8a:f0:8a:7b:c5:c7:46:e9:ef:1e:f9:4c:f0:0e:ff:
         50:68:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:09:35 2026 by rpki-client