Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa
File:                     A4E607B6B1C511EDA095B220C4F9AE02.roa (raw, json)
Hash identifier:          2Rk7foS/u6bApTLdcvt0SH1oVbXwrjG5ULQdKbrDjEg=
Subject key identifier:   E2:67:A4:1D:8F:6A:33:1C:B9:D5:7E:D9:58:7D:78:39:14:B9:05:35
Certificate issuer:       /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Certificate serial:       0311
Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa
Signing time:             Thu 29 Oct 2026 01:48:44 +0000
ROA not before:           Thu 29 Oct 2026 01:48:44 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141467
IP address blocks:        103.11.196.0/23 maxlen: 24
                          2001:df1:4f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
                          rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 01:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
        Validity
            Not Before: Oct 29 01:48:44 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae2a5fc-3d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:89:85:2b:d7:28:d4:dc:81:4d:9c:4c:9a:
                    0e:c7:e4:04:17:a8:7b:68:e6:f6:0d:e5:d1:49:da:
                    d0:6b:32:aa:f6:bd:6d:86:0e:71:77:a0:2e:0c:bf:
                    86:51:5e:ea:45:33:2a:65:75:5b:33:2f:e7:99:2c:
                    48:d1:e8:8b:f2:d0:27:71:06:87:a8:24:7a:8e:ce:
                    98:03:5d:7c:ac:c0:d3:d6:a9:05:db:32:0b:c4:df:
                    3c:4a:72:d0:68:9d:83:36:9f:b9:5b:96:77:7a:0c:
                    14:95:93:b0:d5:96:8c:64:99:65:eb:dd:fb:85:b2:
                    33:a4:c5:56:65:03:6f:a3:8e:ca:4f:08:10:87:1b:
                    4a:50:85:6a:c9:40:3e:3e:09:27:c5:8c:a2:24:81:
                    f9:09:3c:6a:92:f5:25:20:bd:7d:b5:3f:2e:6a:15:
                    50:af:87:06:9d:a5:a7:a5:09:fb:3c:20:a6:45:1f:
                    b6:cb:52:d7:09:c3:b7:f6:5f:06:ac:c2:ff:07:9f:
                    26:9b:27:00:3d:42:f7:34:ca:3b:c9:4a:ca:27:8a:
                    e4:3e:2c:db:22:3f:ac:34:cd:f6:80:a7:81:67:29:
                    c1:db:82:34:58:c1:f0:c3:a4:97:48:6b:4f:8a:35:
                    29:9f:71:b4:8b:13:3e:44:5a:7a:8b:61:c5:50:21:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:A4:1D:8F:6A:33:1C:B9:D5:7E:D9:58:7D:78:39:14:B9:05:35
            X509v3 Authority Key Identifier:
                keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.196.0/23
                IPv6:
                  2001:df1:4f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:5b:fb:6d:0d:a4:73:de:da:c0:c8:f4:61:f6:64:01:d2:d8:
         fd:f5:35:60:4b:01:0c:7a:bf:2b:70:60:ff:36:51:5f:7f:75:
         c0:d2:8b:e2:82:19:0b:de:e0:03:e0:f5:36:7b:8e:8c:cf:f6:
         1d:37:29:c4:b4:62:40:72:68:91:00:04:3f:67:38:02:b1:3b:
         9f:20:55:d3:50:db:46:da:f6:8a:dd:06:a1:21:4c:93:cb:f4:
         c9:ce:a0:99:2b:b2:3f:ae:d6:d3:63:48:18:0c:1d:b3:aa:34:
         67:7e:31:07:9b:13:0e:7d:75:33:72:f3:07:cf:53:03:35:4f:
         96:db:b4:00:d5:5d:d7:ae:cd:82:08:5a:65:81:cb:e0:fb:df:
         8f:41:9b:84:f0:1b:63:6a:9b:82:da:7c:ad:7c:0a:a2:17:44:
         20:1b:80:aa:67:5b:c3:a2:fd:9e:60:5f:32:be:24:0d:69:fd:
         26:c2:a7:76:9a:a2:98:68:cd:fe:a5:0a:a2:71:6e:01:e6:d2:
         e1:40:92:ee:b1:78:5d:e5:28:dd:40:ab:e9:75:13:09:d1:bb:
         f3:7f:02:2a:12:58:fd:e7:a7:37:47:9e:e0:5c:c9:8a:d6:10:
         4a:78:59:3c:88:74:fc:b1:ef:1c:83:fe:92:10:80:a4:99:fc:
         0b:4e:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:50:25 2026 by rpki-client