Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa
File:                     746CEA6E7CD911F0942A980CC4F9AE02.roa (raw, json)
Hash identifier:          KvcdS0n0qBq7QXf4zHc3LzF8gARdqAlYnHOUYTNYt0M=
Subject key identifier:   CC:8A:95:82:FA:99:EF:7A:48:8D:CE:D5:07:EA:1C:71:05:10:E2:EC
Certificate issuer:       /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
Certificate serial:       92
Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa
Signing time:             Sat 23 May 2026 07:40:01 +0000
ROA not before:           Sat 23 May 2026 07:40:01 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139022
IP address blocks:        103.138.160.0/23 maxlen: 23
                          103.138.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl
                          rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
        Validity
            Not Before: May 23 07:40:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1159d1-4d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:74:83:36:6d:c9:1c:a3:58:b3:55:e6:02:
                    76:d7:1a:31:3a:df:8f:13:06:f9:c6:2d:d7:54:e5:
                    05:6b:37:ce:4a:dd:07:bd:c3:32:00:7d:a1:f4:e8:
                    dd:ee:bb:67:66:7c:fd:b3:2e:0f:02:31:ab:85:c9:
                    ed:b5:7d:d7:0f:78:a4:1f:da:99:ee:a5:a4:dd:e9:
                    74:6d:14:8b:83:88:f4:eb:96:f6:b9:a0:9e:d3:f9:
                    e8:7c:ec:e4:30:0a:92:e5:74:9e:39:27:5c:73:ed:
                    2f:7c:23:46:73:bc:37:8c:ba:a6:47:c1:41:71:f7:
                    c4:46:1c:48:30:35:48:f6:cd:35:83:ee:45:0d:7b:
                    fd:de:fb:6d:15:3a:59:83:c5:32:73:58:42:35:32:
                    cb:08:66:85:41:80:66:4f:2b:fe:fd:76:2e:b9:19:
                    a7:2c:6e:fb:ad:34:ef:ce:65:74:f8:7a:a8:4a:ef:
                    ab:3b:9b:89:6a:d6:5c:d2:48:89:3c:43:c3:2b:de:
                    dc:e4:ca:09:c6:2f:a2:db:ac:5c:74:88:08:f9:d3:
                    de:9e:39:e6:eb:f0:7f:90:33:84:c7:b5:d7:c8:ec:
                    b1:3f:24:24:28:f1:a4:60:ee:54:4c:26:5c:89:d9:
                    79:2f:3e:6b:01:89:8b:b8:62:36:eb:4a:f8:9e:05:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8A:95:82:FA:99:EF:7A:48:8D:CE:D5:07:EA:1C:71:05:10:E2:EC
            X509v3 Authority Key Identifier:
                keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/746CEA6E7CD911F0942A980CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:78:7e:43:09:27:a4:f4:1b:6e:47:ac:a1:86:55:98:a3:
         49:6e:4f:af:4d:9d:59:5f:86:26:89:79:c3:ea:73:e5:ce:c1:
         1b:f2:de:23:e9:ce:db:65:13:60:9d:71:72:ac:4e:31:61:6f:
         c6:fd:61:cb:68:fd:2c:01:34:ca:4f:14:21:00:26:b1:48:02:
         dc:dc:84:0a:3c:b4:3e:0f:9d:50:ac:91:63:2e:0f:41:2f:47:
         a4:3c:aa:89:04:34:94:13:3d:a6:8c:15:bb:de:9d:2b:79:0c:
         a7:95:9e:0a:14:b2:0b:36:e0:41:71:a2:e8:82:ff:c3:f9:4e:
         d0:75:2b:61:65:c4:c8:83:c7:2e:46:78:8d:4e:11:b0:09:a1:
         6b:83:af:bb:fe:af:52:04:c6:ae:61:8e:d4:42:28:8a:01:d8:
         64:19:2e:f4:de:89:2d:1c:bf:24:bd:ed:9b:a8:66:6a:c3:1e:
         42:04:13:2f:10:36:c9:3d:fa:15:06:01:2c:a3:2e:a4:55:ae:
         dd:7a:ae:8c:28:5c:98:54:6f:9e:46:16:ad:13:2e:ab:f8:e9:
         0f:81:9a:3e:fe:b5:05:37:92:bb:80:e1:0c:cd:cb:83:18:08:
         24:db:12:6c:da:37:a7:69:01:c7:fb:4e:eb:9e:69:b3:9f:2e:
         84:d8:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:21 2026 by rpki-client