Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
File:                     31AA8496B62811E7882B893BC4F9AE02.roa (raw, json)
Hash identifier:          f7t7LmYzHXBuu6i6c8YbZKumH2aGgRo3D67+YGInX30=
Subject key identifier:   64:D4:D6:B8:13:4B:EB:3C:42:66:49:76:92:A4:E9:D1:E6:55:79:DF
Certificate issuer:       /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial:       18EE
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
Signing time:             Sun 26 Jul 2026 17:30:05 +0000
ROA not before:           Sun 26 Jul 2026 17:30:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136618
IP address blocks:        103.94.134.0/24 maxlen: 24
                          103.94.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6382 (0x18ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
        Validity
            Not Before: Jul 26 17:30:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a66441d-ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:71:5d:af:53:d1:40:0f:bb:8d:be:dd:54:
                    62:ea:58:ce:a8:5f:08:a9:46:fa:a9:64:43:ab:67:
                    4e:ed:67:1a:dc:8d:df:78:b0:10:d7:eb:42:ca:3a:
                    d9:48:a0:eb:fd:e8:40:63:ac:fa:38:2c:b5:20:9d:
                    3d:cf:d1:19:aa:17:1f:61:dd:1d:0c:e0:7a:fd:1d:
                    63:3f:f6:d5:bb:93:26:c8:d7:a8:fb:4b:d1:ea:c2:
                    22:a9:63:43:36:de:43:a7:86:dc:16:07:76:00:34:
                    c2:8c:4f:84:84:16:1c:9a:a6:20:25:20:82:b4:95:
                    fc:63:23:fb:c1:72:3a:7b:5a:c7:36:9b:6b:8f:f6:
                    a4:a9:80:1e:4e:93:e8:a9:6a:7b:5b:f4:c8:48:5a:
                    b8:3b:72:e0:9c:94:c3:15:ec:66:3e:22:89:ac:cd:
                    49:ce:80:41:c1:85:8e:8d:d4:41:00:47:01:ec:68:
                    c3:c5:f8:fa:de:00:07:3a:87:40:e5:9c:08:ad:b3:
                    15:e9:85:b5:e0:6e:fe:46:10:5c:98:ef:ab:51:db:
                    21:e3:62:c4:2d:d0:4d:79:c8:7d:c7:8c:ce:00:64:
                    41:43:be:93:25:cf:19:94:0f:3e:5f:c6:de:63:42:
                    22:03:5b:8e:3b:e4:36:a2:9c:7b:b0:30:ed:9f:a5:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D4:D6:B8:13:4B:EB:3C:42:66:49:76:92:A4:E9:D1:E6:55:79:DF
            X509v3 Authority Key Identifier:
                keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:2e:ca:71:ec:9b:fc:1d:58:9c:b1:f7:8d:48:ee:72:11:
         d7:c8:e2:7e:43:72:93:d1:ae:1a:a5:d4:13:99:f3:73:2c:c3:
         ac:77:f9:ac:e6:dd:b3:65:d7:5e:d0:ea:48:db:20:70:8f:a1:
         90:6f:bf:51:a3:a0:a3:06:20:1a:52:19:83:dd:af:1b:9d:41:
         4d:cb:66:0d:bc:22:41:30:62:2b:38:2c:28:8e:2f:e9:71:cd:
         19:7a:ae:1a:8d:7a:cb:c4:24:b3:f8:9e:36:05:37:0d:38:ff:
         04:15:f6:9c:99:2d:80:ee:c7:31:96:0c:a9:8a:e3:ec:6e:f3:
         01:7d:92:14:84:f3:77:6f:f9:49:93:06:37:6b:39:3d:ca:67:
         ad:bf:66:3d:eb:aa:55:13:07:fd:39:e9:9e:49:26:2f:8c:ee:
         db:bd:7f:f1:9e:10:3e:8b:25:2f:ff:e2:c7:20:75:55:cc:f1:
         e3:c0:9e:a1:7b:d8:63:c9:be:ab:80:00:e1:24:1c:37:73:d6:
         6a:04:a4:f8:2c:5d:22:2b:eb:02:ad:3d:8c:71:43:4f:62:c7:
         9d:4a:7d:c4:ec:06:dc:eb:43:fd:d4:0b:4c:c3:d8:3c:de:6c:
         11:e4:0e:f8:31:12:4e:81:19:e4:f1:25:ec:ca:b6:60:c8:38:
         f1:0c:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:00 2026 by rpki-client