Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa
File:                     DEA2CCF8050511EEB4D8141FC4F9AE02.roa (raw, json)
Hash identifier:          zYCoiToL+tyHYrArPulDS1EFhOBSHqWiPD13BOonOMk=
Subject key identifier:   BB:D6:49:DB:77:AA:EB:C5:FF:EF:70:5A:4D:07:A8:93:5A:A1:D7:44
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       062A
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 22:44:49 +0000
ROA not before:           Thu 06 Aug 2026 22:44:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140525
IP address blocks:        103.141.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Aug  6 22:44:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a750e61-95eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:c7:75:b5:4c:32:fc:fd:53:ed:7b:35:9b:
                    3f:9f:d2:95:4b:dd:fa:7b:d6:d3:6d:44:60:14:34:
                    56:80:71:c4:0f:c4:15:5c:83:a8:0c:92:0a:f8:2a:
                    d7:b5:67:fd:a8:40:af:64:10:0d:27:c9:91:6c:08:
                    7b:b0:6a:05:2b:c7:6f:4f:93:c3:ef:69:09:c9:51:
                    3c:78:f3:7e:60:27:3d:f1:24:fd:ab:de:e7:66:12:
                    73:52:d1:a7:4f:35:d6:f1:68:4a:ec:ec:69:a1:ff:
                    65:a2:30:e4:8c:93:c5:b0:49:68:90:3f:13:d8:93:
                    18:62:21:2b:31:da:99:23:70:15:e4:84:07:96:82:
                    96:dd:04:32:ec:cc:71:aa:ea:f4:ea:69:99:ab:19:
                    a3:76:2f:62:78:42:33:2d:e2:ec:96:e8:0b:20:bd:
                    b2:13:f5:20:d1:44:23:f6:0f:61:4a:88:d6:d3:72:
                    b8:54:f9:20:24:08:22:8e:d6:5d:f9:fb:f3:d9:27:
                    9e:1e:24:87:bf:5e:56:52:b2:e8:20:09:04:4b:7d:
                    1f:d5:c9:2e:6d:d2:4c:dd:2e:43:4b:d5:ff:11:da:
                    4b:1d:d2:d8:20:41:37:c8:49:c9:ae:b4:ed:b2:58:
                    54:0f:ca:ee:6f:6d:3a:fd:64:d7:7f:36:95:f1:df:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D6:49:DB:77:AA:EB:C5:FF:EF:70:5A:4D:07:A8:93:5A:A1:D7:44
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/DEA2CCF8050511EEB4D8141FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:82:9f:22:fc:91:35:e4:d0:08:ad:a2:39:49:c2:6a:53:3a:
         ca:96:fe:9f:14:6e:49:6c:0b:a8:64:ed:30:d4:5a:b1:39:fd:
         c1:c2:3d:f8:a0:55:d9:49:9b:21:d3:c7:49:60:fe:ce:f8:29:
         8d:93:48:50:44:af:aa:af:22:0e:ca:35:22:28:b3:2b:d2:0a:
         72:7a:8d:60:9a:15:52:c5:e9:4e:f4:9c:5f:c6:68:67:fb:e7:
         cf:d7:d3:90:70:07:75:3c:b9:71:34:4c:b4:f0:7c:32:70:1c:
         0a:c8:09:65:6f:c3:79:f7:9f:2e:98:b8:7e:bf:7a:d4:4f:2f:
         0b:b6:94:54:11:ec:53:22:2b:6b:a9:47:28:fe:ac:fe:8e:26:
         2e:0f:49:32:0b:e8:94:31:31:c4:81:2c:0f:f6:8f:25:f7:f8:
         b2:94:dd:64:fb:a7:2a:3f:af:5b:ec:93:07:60:0c:d0:cf:ee:
         88:b4:df:f0:59:df:ed:c6:cb:fd:db:69:b9:8d:8f:53:23:ed:
         d9:42:27:90:41:dc:3a:02:9b:09:ff:63:4c:fd:53:ea:17:56:
         93:9d:c9:1c:2d:37:85:99:2d:d7:7b:76:8a:57:52:cb:cd:d4:
         e7:54:4e:23:ff:8f:92:7f:18:5a:38:95:0e:62:17:09:1d:69:
         cc:99:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:55:04 2026 by rpki-client