Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
File:                     A915A3543FEC11EE99AC0F43C4F9AE02.roa (raw, json)
Hash identifier:          BMS7yIShPQgNQAhR+NlB0waVolj3Ec+7GobiZkhfVxk=
Subject key identifier:   9B:D6:FA:FF:ED:27:2B:5C:91:6B:AA:25:46:A0:DF:88:1D:48:33:D0
Certificate issuer:       /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial:       0242
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:54:10 +0000
ROA not before:           Sat 29 Aug 2026 02:54:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151646
IP address blocks:        103.248.140.0/23 maxlen: 23
                          103.248.140.0/24 maxlen: 24
                          103.248.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
        Validity
            Not Before: Aug 29 02:54:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9249d2-ff30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:d2:ab:ba:56:5b:e6:a2:ec:3c:3c:36:c3:
                    27:cc:af:10:8a:45:ec:a9:69:31:19:c3:53:33:c0:
                    db:48:a1:b5:65:4f:52:9f:f0:eb:1c:ab:cb:07:3c:
                    bb:6e:ae:90:81:df:15:f1:20:6c:a6:95:44:1c:f9:
                    34:8a:b2:a0:4a:67:59:83:10:8b:e1:05:06:31:e7:
                    3d:6f:10:ce:55:4c:db:4f:19:9b:81:ae:31:fb:9f:
                    08:78:76:13:e3:35:e2:83:5d:98:f1:b3:0a:e9:ca:
                    1a:86:b2:d1:5d:6f:2b:ff:21:11:fe:ec:1b:03:bc:
                    fd:8f:8d:f6:8a:3b:33:e4:70:e0:22:5f:df:8a:b3:
                    e1:39:48:6d:99:54:d5:01:76:6a:a7:82:62:4a:ca:
                    08:f7:43:11:cb:78:62:b5:fe:3b:82:cc:f0:58:55:
                    db:db:71:cb:95:88:74:a7:7d:9a:37:27:bb:6d:73:
                    1b:2f:0c:c4:73:27:1a:8c:e4:62:8e:e0:bf:83:85:
                    0a:4a:ba:96:af:85:01:96:5f:16:e3:35:38:0c:d6:
                    95:45:f1:8f:0d:91:2f:b1:b1:fa:ba:45:4f:3a:a1:
                    1e:5f:fe:03:05:59:f2:d6:d1:cd:ff:59:25:bc:4e:
                    d3:50:7d:bc:dd:38:89:b0:59:26:ef:40:35:96:51:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D6:FA:FF:ED:27:2B:5C:91:6B:AA:25:46:A0:DF:88:1D:48:33:D0
            X509v3 Authority Key Identifier:
                keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:bc:55:84:92:9a:99:6d:4a:44:36:06:41:1c:4f:e5:39:
         2b:17:55:be:35:38:5c:06:97:6e:86:db:f4:88:e7:7f:2e:fa:
         09:1b:a5:da:9c:85:70:67:44:8c:92:9b:70:93:a7:b6:79:db:
         1d:70:91:d3:7e:c5:0a:61:7f:49:6d:31:56:bd:f1:46:32:6f:
         39:5d:a7:df:d2:37:e8:5d:3d:35:6c:11:45:8a:da:b2:f9:be:
         72:15:e7:8c:3b:20:ef:d2:e9:0f:18:c2:dd:94:3d:1e:62:3f:
         ad:dc:5a:05:46:89:45:77:b4:b5:a2:61:38:d9:28:9d:d2:b5:
         33:46:62:31:49:ac:f9:b7:12:ac:2a:1e:fb:10:41:b9:08:9b:
         ac:6e:d5:fd:99:f2:e1:4c:22:37:8b:59:d5:da:5c:58:c6:1b:
         e6:78:26:29:47:13:af:3c:f3:af:c7:85:58:3d:b0:89:cb:1b:
         21:63:0b:df:c8:a2:2e:c6:b2:c3:34:19:c7:14:18:a7:53:f1:
         16:0d:c0:27:c8:1f:ab:d0:09:1d:6b:ae:13:4d:f7:c0:34:07:
         3b:7a:a7:b0:1f:27:90:b2:c4:9b:5a:8d:42:da:86:47:37:aa:
         f9:84:5c:80:5d:5f:1b:07:7b:45:1e:19:eb:21:70:81:97:dc:
         e4:45:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:02:05 2026 by rpki-client