Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
File:                     6C153768CE5511EB9DD80C30C4F9AE02.roa (raw, json)
Hash identifier:          ZmHOd8xk6wRXLnwUjYLjV1O4C/0XpnWVR3Qg13Vt0IM=
Subject key identifier:   AE:D8:45:D5:78:78:13:4A:88:80:A3:A7:EB:AB:C6:3F:5B:43:4E:A8
Certificate issuer:       /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial:       0F1E
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 18:35:03 +0000
ROA not before:           Fri 31 Jul 2026 18:35:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142423
IP address blocks:        103.139.208.0/23 maxlen: 23
                          103.139.208.0/24 maxlen: 24
                          103.139.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3870 (0xf1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
        Validity
            Not Before: Jul 31 18:35:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6cead6-aada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:fa:b8:d8:dd:f0:48:d5:a1:4e:1f:a0:f7:
                    74:7c:87:78:f6:70:ec:49:c7:ed:2f:c0:f7:66:59:
                    e2:7e:9c:01:7e:51:e1:e2:57:53:60:69:35:82:bc:
                    87:2f:e2:46:c9:ff:0a:3c:aa:d9:f5:09:cb:63:0b:
                    05:92:26:7d:51:64:6a:99:97:f5:b0:8a:94:26:d3:
                    66:df:e8:9b:92:99:5c:ad:74:bc:ff:98:be:b6:eb:
                    35:1d:db:e4:ff:3c:03:44:0c:31:bd:30:77:9e:45:
                    5a:54:64:94:3a:1f:8d:84:0b:5e:c0:93:34:c8:67:
                    f5:35:ce:9b:48:25:a0:49:aa:89:43:44:20:b2:7a:
                    c2:ec:50:3b:9b:98:12:2e:46:af:f2:14:2d:8a:eb:
                    39:45:13:e7:3e:b1:43:0d:89:ce:6d:08:a0:e6:12:
                    ac:68:d0:e7:77:0b:49:4f:5f:49:5c:a8:fa:f1:91:
                    1d:5d:d3:0d:60:a4:05:a8:15:fa:ba:c3:84:67:89:
                    d2:6b:40:1f:77:07:d2:f9:62:33:a5:5c:48:d3:5e:
                    69:09:0c:b7:53:da:cd:fa:c8:ad:e5:38:db:fc:ec:
                    d8:1b:29:dc:cb:cd:76:42:61:e5:80:44:cc:65:f6:
                    b1:40:63:90:15:08:9a:6b:e1:58:a1:93:66:fa:d5:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D8:45:D5:78:78:13:4A:88:80:A3:A7:EB:AB:C6:3F:5B:43:4E:A8
            X509v3 Authority Key Identifier:
                keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:19:7a:66:06:19:32:7c:7d:d6:e9:8a:87:9a:f3:fc:67:fb:
         ed:e7:c0:8f:43:1d:5f:c2:f0:53:d7:4e:ac:c7:ee:a1:81:94:
         11:90:33:a2:ca:66:19:bd:e4:6a:b2:5e:86:ff:6b:e6:e2:de:
         f2:5a:1b:c2:9d:03:dc:c1:13:df:f1:d1:1b:36:24:e4:f8:4a:
         e7:d4:d0:1c:f6:a5:c8:5d:f0:06:81:c5:8a:7a:66:ce:f2:06:
         70:35:aa:06:3d:b2:59:27:59:45:e8:85:92:67:e3:30:55:9e:
         24:59:1c:bf:0c:b7:ba:40:4d:b7:2d:73:47:0a:cf:e2:d5:3f:
         13:42:d7:cf:c5:92:f3:e3:12:43:be:94:d1:d4:86:b9:90:bd:
         f4:eb:93:cd:f2:79:71:1c:2e:4d:58:bb:0f:cd:44:43:cc:b6:
         5c:87:25:b5:8c:9d:f5:c7:2b:3e:21:5a:9c:4b:8d:9b:dc:ba:
         2a:81:aa:f3:c7:50:b4:95:15:92:c5:b7:0b:74:25:53:72:2e:
         88:b8:37:7c:8d:5b:98:40:5f:c0:41:99:86:d7:f3:22:35:1b:
         41:8a:ef:85:05:33:ea:d6:03:23:44:b5:cb:c4:9d:13:1d:55:
         7a:c5:05:8a:4d:81:7d:85:72:d2:e8:22:02:3c:45:37:29:98:
         25:39:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:29 2026 by rpki-client