Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
File:                     A3583B2616B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          eXwz4PBP+rkDjztNy2SDSGV8UgeMg6eew855+0UUdP0=
Subject key identifier:   E5:AA:36:AD:63:5E:BC:57:E0:74:D9:17:59:60:8D:48:18:A2:39:AD
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05F1
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
Signing time:             Fri 24 Jul 2026 21:42:32 +0000
ROA not before:           Fri 24 Jul 2026 21:42:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55799
IP address blocks:        103.113.156.0/22 maxlen: 22
                          103.113.156.0/24 maxlen: 24
                          103.113.157.0/24 maxlen: 24
                          103.113.158.0/24 maxlen: 24
                          103.113.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jul 24 21:42:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a63dc48-e3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:90:5b:ff:9d:0a:fb:27:f5:ab:96:d9:73:
                    5d:cb:86:63:07:dd:8d:e5:c3:c6:5f:06:eb:dd:a5:
                    29:69:cc:5c:a8:9e:31:d4:16:44:f5:72:fd:0f:f8:
                    78:21:49:1a:0a:b6:f9:4f:73:59:74:ff:ae:e6:74:
                    7a:50:cf:53:e7:9e:5b:a1:e8:64:40:70:6a:0c:6e:
                    b8:fa:07:5f:55:7e:bd:79:33:20:24:4b:20:09:78:
                    dd:c8:dc:7e:37:28:fa:f1:96:b5:b3:2f:62:10:d6:
                    34:ff:39:44:44:04:4e:5c:83:f9:cc:9a:f1:ee:17:
                    4f:a1:01:ea:55:3d:90:fd:65:c2:d0:5b:a4:9f:97:
                    e2:47:e9:95:6e:f9:91:44:4f:b3:39:13:3c:e2:18:
                    54:b9:0d:92:dd:c2:ad:c8:c7:41:16:51:f4:c9:d0:
                    8e:3a:d6:cc:65:54:4d:14:4d:05:7a:95:d2:33:b4:
                    de:93:59:39:d9:e6:81:69:91:4c:ce:fd:94:ce:b9:
                    f1:33:70:1e:5d:d8:f0:1f:2c:5f:28:3c:7b:1a:1f:
                    d2:b7:67:fc:43:06:49:64:93:a9:72:19:b3:5a:9d:
                    40:7e:16:ac:4b:1f:75:97:67:55:4c:74:d6:a0:1c:
                    51:07:70:19:3d:ce:10:df:15:b6:d5:24:1b:6a:b9:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:36:AD:63:5E:BC:57:E0:74:D9:17:59:60:8D:48:18:A2:39:AD
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:20:45:d7:ee:94:30:30:16:2b:eb:4c:83:56:21:43:58:46:
         01:76:b0:ba:6c:5d:ed:7d:34:6d:cf:6d:4f:56:04:7c:47:3f:
         ec:0f:e1:fd:db:4d:44:85:21:57:eb:f5:78:9d:44:fa:a0:e4:
         d6:fb:d7:c4:13:fd:63:5e:c8:aa:08:56:fd:e9:49:f7:df:5c:
         2f:8a:f9:01:71:5b:68:a3:a1:5b:c7:97:2f:8c:19:e5:47:01:
         29:53:34:f2:51:d7:8e:46:66:69:ef:97:79:11:6a:eb:6a:51:
         3f:d4:42:4b:91:54:a1:53:6e:2e:3a:14:5f:63:0e:ca:28:2e:
         76:38:f9:71:70:44:cc:3b:cd:61:18:75:e4:b2:ab:2e:a7:05:
         a7:61:48:5d:6c:54:f3:0a:ae:2a:90:22:36:48:52:54:44:4d:
         ff:f9:d6:9c:6c:07:2e:32:07:01:2f:95:5c:c2:2a:cd:2c:41:
         6e:fd:31:43:3c:19:73:78:9e:52:f3:9f:31:aa:4e:d8:6d:cf:
         98:40:c1:02:f7:33:0a:77:c0:de:8a:d5:33:6e:e1:4a:b8:c4:
         3b:a7:61:13:05:ef:3b:c7:7f:38:d3:8a:c9:96:40:7a:88:22:
         a5:80:16:73:2f:b2:b0:29:46:be:00:32:a9:d0:1b:3e:3d:55:
         c4:fd:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:10 2026 by rpki-client