Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa
File:                     D3843904F79D11ECAFF03840C4F9AE02.roa (raw, json)
Hash identifier:          euis7+0H+a235wUq30H05T3gotTS+SI7gYye3MGScoY=
Subject key identifier:   3B:7A:1E:A0:FA:E0:4F:F3:BC:C5:5F:02:B0:99:3D:76:33:CE:7B:08
Certificate issuer:       /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
Certificate serial:       03A3
Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 00:54:08 +0000
ROA not before:           Mon 31 Aug 2026 00:54:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     56264
IP address blocks:        103.190.74.0/24 maxlen: 24
                          103.190.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
        Validity
            Not Before: Aug 31 00:54:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a94d0b0-e962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:4e:68:66:3d:60:58:b9:21:79:9b:66:29:
                    55:76:fa:a5:0a:b1:f5:4b:b9:d5:4a:71:bc:8f:f8:
                    93:af:a2:4a:37:c6:af:b8:a1:7e:e9:92:80:2a:3f:
                    72:18:a3:91:e6:82:68:4d:a3:70:0d:8f:08:b5:2c:
                    09:ca:5b:db:0d:4b:ee:23:6f:2d:dc:83:a1:ef:a6:
                    d3:b5:2a:da:35:77:1b:ce:5b:6e:01:0d:80:12:7d:
                    e4:72:37:f5:d8:3d:ec:24:1f:f1:8d:af:ab:15:cc:
                    43:40:c8:e4:6c:ad:3b:a3:de:f3:8b:1a:d5:01:92:
                    80:34:0e:ed:ab:9c:7c:4c:16:80:71:1b:51:59:fc:
                    ca:ca:56:72:b5:33:2a:27:a2:5f:96:ea:d9:0d:39:
                    72:ca:96:e3:73:9a:4b:37:65:8d:cb:fc:60:6e:61:
                    f8:36:25:26:27:60:b4:dd:ee:f8:25:f3:5e:66:cc:
                    70:75:e6:5b:54:27:53:4d:24:b7:2c:0a:22:77:3f:
                    e6:e7:90:56:ae:83:69:7a:7e:51:49:2f:2c:15:aa:
                    08:aa:8d:29:96:86:ca:6f:55:53:78:49:2e:5b:fc:
                    dd:ef:1a:96:c3:29:10:3d:8d:2c:94:2f:d6:27:4f:
                    07:6d:a0:28:f7:9c:df:a0:8e:da:a3:ec:8c:79:b4:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7A:1E:A0:FA:E0:4F:F3:BC:C5:5F:02:B0:99:3D:76:33:CE:7B:08
            X509v3 Authority Key Identifier:
                keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:ec:92:9c:1c:fd:c9:fd:64:d2:bc:b0:64:50:69:5c:26:83:
         c0:44:1d:be:09:b2:0c:6b:bd:c5:cf:b7:40:db:21:fd:b2:95:
         8a:c9:7a:0d:8e:cc:5c:fb:85:ae:9c:10:11:33:cb:36:7f:88:
         a9:b0:96:48:f8:c3:de:c5:04:d7:68:43:0a:fa:87:1c:31:22:
         8c:c2:fb:14:9e:00:80:8e:63:4b:76:5d:3d:86:d6:fd:78:3e:
         82:52:56:b8:0c:20:ec:00:12:7c:cc:d5:ea:e2:f7:0a:58:f2:
         0b:96:1d:33:de:84:5d:0a:24:d0:23:40:00:21:53:2b:0a:e6:
         56:95:73:14:03:2f:00:be:8f:fb:e7:21:d7:04:10:ae:29:b9:
         a3:75:ab:6d:25:d7:97:b0:23:06:40:7b:05:4f:c5:d9:ab:12:
         6a:01:b7:19:38:7a:1e:0d:d3:34:09:60:00:2a:dc:79:af:9a:
         8a:20:d2:8e:02:5e:49:eb:24:e7:33:d5:16:a6:32:49:ab:19:
         41:87:fd:e2:60:e5:08:4d:c8:bf:02:32:87:ab:40:24:f7:c6:
         4a:b9:3f:88:2c:13:6a:a2:63:a2:cd:24:6b:f4:49:e3:de:dc:
         c0:c6:df:be:b0:cf:13:6c:af:17:1a:7f:85:49:f8:e6:27:04:
         4b:de:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:22 2026 by rpki-client