Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa
File:                     8E80453E23EF11EF8A1CE76FC4F9AE02.roa (raw, json)
Hash identifier:          2eAC8pGr2dDuKhVhn/rwHPc/m4pgsgAwDUUfNVY/czA=
Subject key identifier:   FD:C3:72:39:D6:0E:D4:27:C2:C1:1D:7D:B4:D7:B5:54:AC:83:A1:39
Certificate issuer:       /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
Certificate serial:       05D2
Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa
Signing time:             Fri 06 Nov 2026 23:41:44 +0000
ROA not before:           Fri 06 Nov 2026 23:41:44 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     147181
IP address blocks:        103.174.50.0/23 maxlen: 24
                          2001:df7:b880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl
                          rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
        Validity
            Not Before: Nov  6 23:41:44 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6aee65b8-665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:aa:a3:3c:63:1f:5e:c0:ef:3d:30:d7:eb:
                    b1:26:19:c3:c0:e6:ee:71:8c:57:d7:5c:a6:c8:8a:
                    a0:48:64:64:44:62:0c:95:78:ad:81:d7:dc:5b:ae:
                    94:11:27:83:f9:06:4e:4d:ad:26:f3:fc:e1:5e:a0:
                    6b:d8:0d:66:fe:8c:39:64:bf:9b:b2:42:88:4e:ac:
                    6e:83:ca:70:72:69:3d:ed:e4:21:54:58:f8:82:a3:
                    b1:77:2d:4e:8e:38:45:d7:63:d3:2a:af:e7:42:03:
                    9c:4c:13:a8:e2:e2:77:27:99:81:93:cc:2b:ac:1a:
                    7a:0e:03:10:fc:7a:5c:6b:d1:2e:4b:53:cc:57:99:
                    a7:c7:93:a0:d4:a6:11:1c:e8:f0:16:4d:23:38:b3:
                    43:88:0d:51:78:d7:3e:2b:7e:74:9e:37:4d:a1:1a:
                    4c:8e:bb:7a:ed:26:5f:9e:10:40:25:ab:92:20:dc:
                    81:bb:ce:cc:8b:0f:10:20:14:b9:35:f6:77:4f:0a:
                    12:61:6c:2f:0e:97:a5:7d:99:9a:8b:10:d7:11:14:
                    6c:c6:67:c1:08:a5:bc:cb:e7:e4:73:fe:62:f4:1a:
                    85:9a:4e:94:29:97:59:10:25:2a:e6:e9:7b:1d:ac:
                    a3:d2:55:49:24:5d:4d:ee:33:7e:fb:84:80:75:81:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:72:39:D6:0E:D4:27:C2:C1:1D:7D:B4:D7:B5:54:AC:83:A1:39
            X509v3 Authority Key Identifier:
                keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/8E80453E23EF11EF8A1CE76FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.50.0/23
                IPv6:
                  2001:df7:b880::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:fb:b5:50:f9:67:2a:01:96:42:9d:c5:1d:8f:d2:dc:bc:
         55:77:b9:fd:b8:d6:5a:73:1b:7d:2f:62:fb:e8:99:02:e9:b9:
         58:86:91:b6:84:e4:1a:66:53:de:2b:43:60:7f:1c:bd:4f:44:
         6d:01:da:99:57:36:29:dd:76:33:bf:48:b3:66:82:ab:8e:14:
         0d:46:02:88:24:bf:8b:c4:b2:1f:86:88:f4:b2:47:2b:ca:a0:
         4c:79:5d:98:98:3a:5b:de:01:72:f2:85:ca:43:09:29:47:97:
         53:57:e7:9e:fc:33:d9:5f:66:e7:be:f2:85:c1:fc:26:1d:71:
         c0:79:5c:61:da:8d:78:e4:63:ed:c0:83:e6:71:4b:ea:0e:b1:
         f8:d5:be:df:a2:d0:57:30:f9:e5:97:65:55:4b:18:51:47:65:
         95:23:eb:91:ec:12:94:02:05:3d:02:fe:53:8d:47:51:3f:ec:
         ec:4b:48:c7:14:c7:e9:da:9c:b2:54:bd:c1:69:30:c6:14:43:
         4f:68:44:db:e1:c0:1a:db:5d:2c:ab:9d:f1:1f:a6:b7:4e:4b:
         3e:97:e9:58:5b:71:b9:4e:5a:f2:29:9c:6c:b7:3f:a1:d0:54:
         30:43:23:b9:45:00:c3:f1:1e:78:1c:09:97:b1:da:f5:13:81:
         3a:1c:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:29 2026 by rpki-client