Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa
File:                     47EB76428ABA11EB8A85C01BC4F9AE02.roa (raw, json)
Hash identifier:          YDCZOZA5hCri+gJHNjoyBzUnNsUwszBPU7LfQafrIJU=
Subject key identifier:   83:97:75:26:2A:26:0B:95:39:F3:82:E6:61:AA:4D:0F:C4:66:9B:B0
Certificate issuer:       /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial:       0741
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa
Signing time:             Mon 24 Aug 2026 22:43:28 +0000
ROA not before:           Mon 24 Aug 2026 22:43:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136805
IP address blocks:        103.96.141.0/24 maxlen: 24
                          103.109.123.0/24 maxlen: 24
                          103.109.132.0/23 maxlen: 23
                          2001:df1:df00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
        Validity
            Not Before: Aug 24 22:43:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cc910-ee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:5c:94:7b:d9:8f:66:73:a7:86:b6:33:58:
                    89:3f:b9:7b:02:39:56:5a:f3:7d:e5:d7:5f:7f:4b:
                    29:10:63:03:0a:11:26:55:fe:a6:f7:d7:dc:6b:04:
                    96:7c:c7:1b:bb:75:27:c4:19:bf:4d:d7:eb:95:15:
                    25:af:e8:26:37:10:f0:d1:4a:6c:79:7f:77:a9:94:
                    2a:28:af:03:1f:1c:c1:77:77:f7:03:4a:63:85:81:
                    5c:fc:07:e2:25:83:a0:a8:b0:27:e8:eb:b1:8f:20:
                    50:79:c0:3d:a0:de:a4:35:42:6a:bd:d2:99:a2:72:
                    d0:6b:18:b2:cb:a6:0d:b2:c9:7e:7c:5e:2f:13:b4:
                    82:38:f2:31:26:83:5f:2c:97:a2:f2:62:7a:22:67:
                    7b:5a:b0:96:4c:72:23:64:5b:9b:98:a3:47:82:e9:
                    54:a4:b8:db:c4:23:cb:75:df:74:8f:ee:00:b9:72:
                    ce:fb:50:32:6b:4c:63:98:97:25:90:2a:23:cc:a2:
                    d5:d4:d5:08:b9:17:30:9c:f0:e4:b8:0f:7e:06:2d:
                    f1:9e:0e:2e:4c:7f:22:ab:f6:85:89:45:37:e5:7c:
                    03:24:c0:b8:24:51:fa:2f:20:57:41:04:4c:0e:83:
                    d0:4e:5d:b1:15:32:b6:1a:7b:b3:09:89:54:18:e9:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:75:26:2A:26:0B:95:39:F3:82:E6:61:AA:4D:0F:C4:66:9B:B0
            X509v3 Authority Key Identifier:
                keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.141.0/24
                  103.109.123.0/24
                  103.109.132.0/23
                IPv6:
                  2001:df1:df00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:61:97:ee:ba:2d:5a:f6:b3:42:16:04:27:8a:0d:28:de:
         e2:13:d5:01:29:76:18:22:9a:b7:ec:3d:23:b7:84:f5:19:f7:
         34:f3:3f:08:ea:8c:25:42:8b:4c:8a:0e:12:64:20:04:41:6a:
         76:b5:55:0f:b6:ff:ce:19:ea:f2:c8:e4:07:0f:8a:87:27:3d:
         b8:75:21:14:4e:c9:c4:75:af:7b:0e:66:33:f1:f1:58:e9:74:
         f8:53:c2:a9:df:1b:bb:be:4e:0e:59:b1:ff:87:b8:b3:ab:7b:
         59:7a:22:ef:36:4d:38:1c:6f:a9:ff:a6:3c:ce:e3:7c:5f:77:
         71:ad:be:9e:a2:12:6d:b3:e9:2b:6f:12:30:2f:ce:e0:8d:1e:
         ff:d7:4a:83:93:21:b5:d2:25:11:dc:76:62:3c:c6:42:2a:b9:
         94:5b:cc:d8:8b:1c:8f:f0:ca:15:48:ad:40:2d:a4:3e:64:4d:
         13:86:1a:7d:4a:7a:a8:47:6d:c5:7d:79:57:33:50:35:fd:5c:
         02:c4:0b:e9:1e:dd:50:d9:8a:a6:d2:4a:0f:22:39:52:f1:12:
         91:c4:ee:91:d2:be:bd:2a:6c:6e:a4:f8:2b:c1:d7:ed:21:c5:
         6b:7b:f1:fa:0f:10:76:82:1c:54:e8:ce:d2:76:a4:b9:79:5d:
         cb:69:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:42:32 2026 by rpki-client