Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa
File:                     974EBF7CB82D11F1A61D0ABF3F11F970.roa (raw, json)
Hash identifier:          0zU3QVFp2AuLbCUg4ObkkKjGIwaRzDdyeZGkUpalRQg=
Subject key identifier:   65:7E:38:D5:29:F9:AA:59:D3:1C:6E:F1:43:BA:2A:2C:E2:DD:79:42
Certificate issuer:       /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial:       0C39
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa
Signing time:             Thu 24 Sep 2026 15:35:38 +0000
ROA not before:           Thu 24 Sep 2026 15:35:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140040
IP address blocks:        103.147.190.0/23 maxlen: 23
                          103.147.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
                          rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
        Validity
            Not Before: Sep 24 15:35:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ab5434a-1a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:5e:ed:dd:ae:2c:4f:18:4e:04:ba:d3:bd:
                    91:b7:5a:0d:8d:2f:48:b2:00:2d:c9:2c:e1:7f:94:
                    1a:a4:41:31:23:3a:d9:a6:c6:b4:41:ec:b6:2b:8b:
                    93:2d:2f:e1:3d:71:3c:57:19:cb:bf:63:cf:bc:cd:
                    92:17:6c:b2:b2:87:23:5e:21:fb:a9:73:53:7f:03:
                    6a:e4:ee:91:b8:d8:ab:75:33:a0:67:29:70:47:46:
                    b3:ba:91:86:17:bf:b0:07:b4:99:d5:e6:85:3c:28:
                    a2:e3:3f:86:a3:f7:8b:a0:d4:53:f9:94:00:bc:c7:
                    29:91:4a:6c:3d:1e:62:ea:e3:e6:86:63:46:5f:b8:
                    4e:ec:47:f1:23:fc:32:2d:2c:13:be:44:17:56:e2:
                    87:c4:c2:63:1c:e7:37:bb:a3:59:63:7b:b4:3e:7a:
                    e3:ff:70:e1:02:32:3c:fe:08:2d:d9:81:22:81:3c:
                    8a:45:62:1e:1e:67:43:99:b0:64:7c:4b:07:2e:77:
                    4a:86:f1:77:58:2b:04:51:4a:7d:11:0c:93:67:aa:
                    ea:84:36:63:d9:16:13:98:28:03:72:19:1a:18:a8:
                    d0:96:67:c3:e4:9a:bb:47:20:29:0b:1d:ab:22:e4:
                    2b:9a:98:a6:71:06:62:84:58:f1:aa:a8:3c:05:29:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7E:38:D5:29:F9:AA:59:D3:1C:6E:F1:43:BA:2A:2C:E2:DD:79:42
            X509v3 Authority Key Identifier:
                keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:47:3d:d0:0e:46:92:81:bc:0e:2b:2e:e5:64:d2:98:10:
         fe:a5:93:a9:43:e4:96:2f:df:17:a2:74:e7:05:9b:8d:8d:80:
         e8:f3:85:5e:4c:c1:55:91:37:04:93:5e:a3:cd:48:76:dd:36:
         c4:54:8b:29:9e:33:6a:ea:80:8d:1f:54:bd:b1:6d:52:57:e3:
         59:2b:cf:b7:dd:aa:8d:06:97:c0:10:9e:c8:ae:7b:44:85:df:
         e9:ea:31:45:54:6c:5c:6a:15:49:f8:95:e2:83:4c:2b:4f:ba:
         19:5b:ff:a6:19:61:01:ec:82:db:0b:be:42:81:0a:f4:f4:35:
         8d:4f:a5:e8:4f:f7:a8:fe:24:6b:0c:d5:ca:01:1b:0f:b9:30:
         40:85:92:f9:4a:a1:a5:a6:18:1b:a2:02:7e:f7:5b:24:d2:d5:
         c8:1f:dd:55:f3:57:d1:e2:20:4b:a2:14:46:ba:7e:7a:f0:80:
         a8:cb:57:63:4a:fb:5d:0e:b3:c0:ae:e0:ed:c4:d7:db:4c:93:
         66:47:e0:a8:b3:6c:7a:fb:db:02:cb:3e:f5:fc:f2:d8:f9:47:
         46:7f:51:35:23:3c:db:62:ed:83:34:3d:63:12:0b:2f:90:c0:
         bb:8a:2f:ef:a0:d5:ba:7d:e2:b3:91:4f:de:45:05:67:c1:a9:
         9e:ad:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:31:39 2026 by rpki-client