Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa
File:                     A291634816B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          90gg9p9hqCqXZqb9rZEtlIQBjTiadOFi/oal1s/i89k=
Subject key identifier:   59:95:FF:A1:A0:4C:F5:3A:0F:EE:80:CF:D6:AD:5D:E2:9E:52:B8:92
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05F0
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa
Signing time:             Fri 24 Jul 2026 21:42:28 +0000
ROA not before:           Fri 24 Jul 2026 21:42:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134520
IP address blocks:        103.113.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jul 24 21:42:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a63dc44-d231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:0b:4c:7a:d9:4f:04:e9:97:4e:4f:3f:5b:
                    ae:ee:e3:e1:63:45:4a:c0:d1:b8:21:73:92:81:8f:
                    ad:5f:e7:4e:12:01:53:17:b6:48:cc:7f:b9:7f:ed:
                    f4:07:63:9e:e1:e0:03:e1:f0:62:d4:50:f4:33:31:
                    a0:ec:35:52:ac:51:8c:7c:9b:d5:5f:6e:16:cf:b9:
                    df:ac:ee:75:fd:c2:c7:79:ba:b1:f2:4a:a9:f0:aa:
                    1a:3c:8f:28:8a:5d:46:62:07:ef:c3:96:ea:27:8d:
                    2f:f5:f6:a8:46:2e:4e:af:fb:a6:3c:53:cf:28:88:
                    9c:1c:a1:98:3d:81:a3:c1:41:cc:d0:15:56:04:7e:
                    e8:11:56:25:62:c1:05:2b:d3:64:68:0c:f7:48:c3:
                    be:c4:b7:1a:9c:83:e3:09:00:e5:e1:4b:2b:4e:e6:
                    a1:0b:dd:11:5e:3e:0c:84:e2:5e:f7:cf:1d:68:73:
                    9f:9d:88:36:a4:1b:29:50:67:d3:99:11:d1:ea:99:
                    1d:74:ef:bf:ec:ba:c6:1d:70:b3:1c:5c:2a:fd:2f:
                    76:8c:7d:b0:92:28:ed:1f:e1:08:fc:a8:06:59:20:
                    6b:a7:bc:bb:97:15:2f:9e:78:73:11:d1:f1:49:b3:
                    d2:1b:b7:0a:1e:73:a2:ac:d0:e8:97:a9:8c:cd:54:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:FF:A1:A0:4C:F5:3A:0F:EE:80:CF:D6:AD:5D:E2:9E:52:B8:92
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:b0:d2:ce:92:e2:4e:68:6d:05:ce:35:5d:ad:fb:75:e7:06:
         27:e3:a5:3b:11:1c:fe:89:5f:37:96:18:68:2b:8d:13:49:da:
         d7:ef:7c:db:7f:93:4c:3b:e6:ec:e9:97:95:95:98:17:07:5e:
         22:b5:c3:4d:f4:48:ee:7d:a3:33:89:99:f0:c1:f5:e2:44:db:
         4d:3a:bd:f5:3a:32:cf:be:0e:d5:01:75:64:da:27:e2:25:20:
         0c:44:70:b5:c8:85:9d:14:c3:35:b1:c3:aa:c7:b7:6c:9e:b3:
         50:90:9b:b6:d4:01:10:41:30:8f:ab:d9:c0:8c:1f:f5:1d:b3:
         ee:19:8d:6c:71:6e:ae:8a:44:4f:32:5b:2c:cc:75:0b:73:50:
         b8:40:5d:13:61:73:ba:3e:9d:8f:e8:16:f2:a1:43:46:d4:94:
         29:37:ef:94:5f:32:fb:61:91:d5:e4:24:d6:d1:97:e5:a9:3e:
         60:39:a0:c5:3e:ab:d0:e9:b0:18:8c:26:ae:5a:1b:36:c3:69:
         4f:56:32:39:c0:16:7f:2b:f2:ee:60:2c:fc:d7:96:d6:73:98:
         99:c8:cc:e9:43:a6:ce:ee:a9:b5:a7:c9:82:a5:61:27:c1:63:
         57:d9:06:bc:3d:11:29:53:8b:97:3e:31:88:bd:be:b0:38:a6:
         b4:5b:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:43 2026 by rpki-client