Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
File:                     A3E3640816B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          f2I2JUyPVwawA2Jitwp6FbWujLi61XO5prWcR/JL+8o=
Subject key identifier:   03:77:2C:31:07:E0:4B:92:FE:68:B4:D9:29:B0:63:0C:44:99:C1:E2
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05F2
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
Signing time:             Fri 24 Jul 2026 21:42:35 +0000
ROA not before:           Fri 24 Jul 2026 21:42:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63916
IP address blocks:        103.113.156.0/22 maxlen: 22
                          103.113.156.0/24 maxlen: 24
                          103.113.157.0/24 maxlen: 24
                          103.113.158.0/24 maxlen: 24
                          103.113.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jul 24 21:42:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a63dc4a-c7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:44:55:dc:0f:4e:fe:79:78:c7:25:7c:0f:
                    4e:7e:86:89:b3:11:54:cc:05:20:d4:89:35:6b:52:
                    88:1f:f7:89:d8:82:6d:dd:dc:5c:0e:d2:81:e7:06:
                    51:cb:60:d5:7b:62:3a:cd:98:71:a0:58:29:d2:2f:
                    3b:1f:58:1d:03:79:c5:cd:ba:6e:3c:55:e8:ce:d7:
                    b0:ac:53:e8:9c:6e:b7:fa:55:2d:c8:3b:ec:7a:d7:
                    ca:53:54:0b:e9:52:73:07:4f:23:49:92:9e:5b:68:
                    bd:e2:e3:07:b8:98:a1:3f:67:68:25:ec:31:c0:51:
                    98:40:f6:fd:5e:79:e6:83:34:7a:56:3b:a1:67:44:
                    fd:70:2a:92:c5:aa:7a:ae:c0:27:c1:fd:10:aa:ed:
                    3d:87:af:f6:be:11:6d:28:67:5c:f0:30:54:d2:bc:
                    83:53:59:36:9a:36:42:6c:56:6c:e8:92:19:d1:2e:
                    5c:b0:ec:b8:9a:00:f9:c4:b5:07:87:d5:8f:2c:23:
                    d5:36:e4:83:15:e4:0d:d6:82:32:73:f2:17:d3:ac:
                    f0:1b:29:60:40:8b:4b:35:9a:cd:4e:3d:bc:0f:cb:
                    eb:35:59:93:e8:74:85:bf:4f:77:22:32:d3:c3:a1:
                    63:3f:f6:e9:d3:55:92:fe:70:a6:58:15:74:19:8d:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:2C:31:07:E0:4B:92:FE:68:B4:D9:29:B0:63:0C:44:99:C1:E2
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:db:1d:1d:8f:dc:23:1d:ba:36:68:3d:26:50:5f:31:08:5f:
         63:32:67:ae:ed:34:04:1c:82:2d:73:9b:90:2b:aa:6b:04:4d:
         9b:06:33:83:c6:98:a9:53:b0:98:03:35:44:2d:51:39:e3:eb:
         f2:06:a4:bc:68:ec:42:c6:07:12:71:3f:f3:85:23:ef:de:57:
         fe:6b:7e:86:e5:49:d3:87:64:f4:3f:e3:f9:cb:89:88:95:cd:
         ae:3f:07:f8:1a:a4:0d:54:1b:c5:18:5c:9f:ec:2b:d0:c9:fd:
         e2:41:04:80:3f:eb:8f:a5:10:ba:2e:b0:02:ac:74:de:08:0b:
         83:f0:3d:7b:c0:05:d4:da:5a:1d:cb:5b:2b:01:2b:ef:dc:c9:
         98:f0:f5:f7:a6:6e:25:f0:f4:95:24:f2:08:75:e5:c9:d1:49:
         95:81:2c:d7:dd:b9:ee:1b:93:7b:6d:d3:cc:36:bd:c1:78:23:
         d6:70:28:ce:35:0c:1b:62:88:1b:f0:73:de:f5:3f:97:d5:a7:
         8c:f5:03:a5:36:9f:89:e5:1a:2f:c6:b0:7e:63:6e:02:72:eb:
         84:79:0e:86:19:bc:37:c9:4e:a5:47:30:63:23:6b:9d:d2:ea:
         7f:c4:c6:c4:d8:eb:94:84:07:90:8d:25:07:2d:d6:74:2f:8c:
         ce:4a:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:06 2026 by rpki-client