Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/74CCA13ADBE811EA8D063B7DC4F9AE02.roa
File:                     74CCA13ADBE811EA8D063B7DC4F9AE02.roa (raw, json)
Hash identifier:          rTxnKnl5KTo83pbMGpvfSe0UrO6kGnBdICY7uSLjaXY=
Subject key identifier:   8C:E7:5F:75:D8:0F:3F:12:34:80:74:EF:17:CB:8E:01:0C:DE:BB:22
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       0959
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/74CCA13ADBE811EA8D063B7DC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 20:40:59 +0000
ROA not before:           Tue 28 Jul 2026 20:40:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140989
IP address blocks:        103.152.144.0/23 maxlen: 24
                          2406:5740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393 (0x959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: Jul 28 20:40:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6913db-a7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:7f:89:0a:0f:29:46:19:66:bc:ed:4b:16:
                    e9:7b:1e:d5:3a:6b:60:82:cc:1a:8d:d6:b6:31:d8:
                    1b:6b:98:3e:82:40:38:ef:22:dc:93:a1:2e:6f:ef:
                    9d:3d:5d:33:c8:15:43:15:57:f8:cb:4c:4e:05:6c:
                    dc:4d:e5:87:0e:a2:c9:d1:e6:01:41:f4:6a:9a:6e:
                    be:8c:5c:9c:7c:b3:04:ed:bd:c5:9b:91:e2:d5:77:
                    20:27:95:39:75:3f:f7:ac:ee:7b:64:6d:94:bc:89:
                    46:d6:88:8d:c2:4a:5c:97:e9:a3:6e:38:65:a0:8a:
                    c5:58:5c:a8:d9:23:7f:4d:e3:e4:50:27:f3:a3:46:
                    14:fb:8e:d3:8f:a0:65:34:57:18:dd:35:be:01:43:
                    da:72:0d:b6:2c:28:7e:1d:7c:ad:d4:88:53:2f:da:
                    0d:2c:fe:06:23:45:75:e3:b0:53:9e:87:1a:74:0a:
                    82:ec:c1:00:92:7d:2f:44:5d:8f:b7:46:d3:f9:59:
                    98:fb:07:be:f9:34:28:e2:32:71:19:f2:22:95:86:
                    80:85:40:ed:e5:f7:a2:60:00:49:00:d7:28:87:88:
                    c8:20:e4:e6:cc:6f:1f:f4:57:73:35:88:25:5b:0f:
                    4b:a1:01:e6:a8:cf:11:a0:66:a1:8a:0c:26:e2:ae:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:5F:75:D8:0F:3F:12:34:80:74:EF:17:CB:8E:01:0C:DE:BB:22
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/74CCA13ADBE811EA8D063B7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.144.0/23
                IPv6:
                  2406:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:ae:b9:05:8a:dc:b3:a4:16:74:05:b4:16:5a:74:43:e2:df:
         d0:80:fe:cd:bd:fc:29:31:19:3a:fd:db:a1:94:30:4b:56:86:
         de:92:40:85:10:0f:7b:6d:1d:70:06:65:9d:71:7d:54:3c:cc:
         bb:c3:1b:2b:87:18:e9:f0:af:41:ce:f2:a0:b4:3a:d2:a8:ad:
         11:85:7b:5c:83:11:59:5a:37:c0:3f:3c:b2:42:ae:db:ad:5a:
         4a:08:5a:e5:ad:d8:f4:a9:0d:6d:a2:19:8d:92:98:37:a3:04:
         58:7c:cf:68:56:f9:bf:2a:cd:67:7c:ab:9d:b2:fb:3c:4b:3a:
         43:06:a8:29:76:5c:76:0e:70:69:36:b2:d1:b4:09:67:bb:37:
         ca:94:b2:98:7d:26:ea:c5:7a:6f:bd:89:a4:15:3a:ab:b8:1d:
         cf:b3:de:94:30:ca:97:38:7d:95:91:2f:10:0a:ae:6d:8d:d5:
         97:72:5b:33:fb:d0:dd:5d:d3:ba:ff:5d:38:44:e1:db:61:85:
         24:87:03:3c:a9:84:7c:80:b7:d4:81:82:cc:0e:47:2e:4b:ba:
         d0:5b:93:87:af:cb:85:99:36:03:0b:aa:90:6d:7f:ee:11:8d:
         70:a0:85:9b:48:ec:db:13:61:87:5f:8b:92:0f:c4:65:1e:f8:
         42:37:48:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:18 2026 by rpki-client