Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
File:                     7043D43679BB11ECB6D72266C4F9AE02.roa (raw, json)
Hash identifier:          oGmQ2rN8oMQwi/Mb9M5b5FwgbGff4iWncx9xo/hE81k=
Subject key identifier:   F1:94:B5:E5:F1:B3:CF:AE:74:ED:B1:9A:4D:52:CE:CA:D8:72:DC:1C
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0ECE
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 18:35:20 +0000
ROA not before:           Wed 16 Sep 2026 18:35:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133929
IP address blocks:        103.141.236.0/23 maxlen: 23
                          103.141.236.0/24 maxlen: 24
                          103.141.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Sep 16 18:35:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aaae168-79a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:8d:fc:85:50:71:94:a3:9b:69:b4:c4:27:
                    66:f5:46:3c:39:be:c9:52:73:09:98:11:d7:f5:3b:
                    19:1e:48:68:ee:99:b1:50:2e:0c:39:cb:23:f8:68:
                    cf:a2:17:a3:72:80:fe:63:fa:01:93:86:46:a4:0c:
                    e5:30:3b:47:d4:2f:6d:78:3d:25:4f:ea:b0:13:0b:
                    f5:09:89:41:b7:20:4c:5d:39:a9:94:64:79:e5:12:
                    43:7b:66:50:09:44:e4:fd:bc:63:19:8a:07:68:b2:
                    f3:56:76:c8:bd:f5:a6:1f:1e:f5:1c:57:7a:66:31:
                    10:83:37:b9:07:17:0a:41:29:c6:3f:b2:a2:ff:71:
                    37:cb:9a:58:6d:48:bb:22:26:17:2e:1e:45:10:5c:
                    7e:76:c6:57:47:d1:df:fd:a8:b0:41:18:a1:1e:5e:
                    02:16:d8:38:84:16:db:41:c2:8e:92:4c:09:96:31:
                    b8:0d:ba:3b:38:a5:81:e1:18:7a:d1:c0:69:93:32:
                    8a:6a:92:3f:25:df:90:69:35:14:27:0b:cb:27:a1:
                    65:01:67:ca:d9:f7:a7:38:2f:64:bc:2a:7e:95:9b:
                    79:78:6f:5f:10:89:15:8a:00:fe:7c:d7:f5:c9:be:
                    3a:30:f0:c4:e6:ac:45:8e:76:42:5b:a2:91:97:51:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:B5:E5:F1:B3:CF:AE:74:ED:B1:9A:4D:52:CE:CA:D8:72:DC:1C
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:48:c8:40:a0:22:eb:dc:85:a7:0c:1b:6c:d1:35:e0:fb:
         f2:f5:47:3d:c5:eb:94:25:1c:5f:27:c8:56:f4:37:1e:f3:50:
         c5:48:a9:ac:4d:26:aa:41:f6:01:40:f6:c0:eb:11:7a:49:71:
         f6:56:20:e4:b0:bf:af:82:8a:3a:de:33:8a:52:53:13:bc:be:
         13:90:cf:e1:6e:17:95:2e:de:19:2d:2c:4e:c0:9d:0f:00:f1:
         d3:c9:88:9b:2c:d6:8c:1c:85:80:56:bd:6b:08:23:ca:95:19:
         47:3b:bd:4a:f1:81:f0:0c:0e:84:55:be:a9:39:0c:fa:db:d5:
         77:41:52:27:fd:65:5c:f9:22:be:8e:0d:3f:9b:a7:3a:1b:b7:
         04:e2:d7:0d:e8:ac:77:1d:53:73:f6:83:ad:ed:2b:68:e1:e6:
         9b:56:2d:c7:f0:f4:e9:f8:d1:77:c7:13:66:66:08:8d:b4:73:
         fb:e8:a6:fb:98:60:b0:23:cd:69:30:9f:15:98:1c:8d:2d:3f:
         35:af:b2:21:0b:63:ef:66:f2:f8:0b:35:74:74:09:c6:45:8e:
         3e:e7:07:1f:37:40:0d:f2:30:c2:09:1e:28:24:93:12:92:32:
         40:a1:f6:1f:25:be:4c:72:11:ec:a9:d2:33:cc:f6:24:91:5e:
         8e:ca:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:21 2026 by rpki-client