Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
File:                     E869880C500511EA98307A59C4F9AE02.roa (raw, json)
Hash identifier:          eDmxH/4SMnVpNQqwIMaBf1pbV6bCEaBXN55W5wLAprg=
Subject key identifier:   76:91:BA:EB:C7:39:4D:0F:37:3C:34:D2:8C:21:57:09:2C:A5:85:54
Certificate issuer:       /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial:       0B9D
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
Signing time:             Sun 28 Jun 2026 19:23:16 +0000
ROA not before:           Sun 28 Jun 2026 19:23:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136534
IP address blocks:        103.91.232.0/22 maxlen: 24
                          2401:1540::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
        Validity
            Not Before: Jun 28 19:23:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4174a4-84b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:03:92:7c:9f:e8:56:36:f8:1f:4a:e1:08:
                    6e:7f:f8:1b:ef:61:52:21:e3:0a:ed:90:4c:00:a6:
                    2f:ac:16:10:95:d4:a0:0f:90:56:00:a3:a6:cc:00:
                    c1:81:a0:73:3b:59:ab:2d:32:21:1d:5a:13:39:45:
                    72:64:b4:2e:a0:0b:56:05:fb:80:c3:ef:4f:7e:cf:
                    63:26:78:10:bd:9a:a2:c1:56:63:87:cf:0c:98:2c:
                    02:8b:d6:ed:2a:30:df:8d:da:7f:66:4a:da:81:7f:
                    c9:3b:9e:d9:fe:ad:38:91:a8:be:5f:19:29:e0:68:
                    29:42:00:89:3b:26:bf:8f:c7:f2:82:e0:55:4c:06:
                    b1:56:59:54:a9:a8:6a:18:7c:2c:a4:b9:fa:f0:98:
                    18:2d:81:dd:5c:98:95:47:70:3f:05:98:03:fe:7e:
                    85:f6:f6:52:c9:62:dd:32:60:46:48:16:8e:02:5a:
                    b1:db:61:93:e7:40:62:cf:9b:c3:85:b9:d7:36:fe:
                    53:26:52:4f:25:19:8d:2f:a5:da:00:35:37:b9:42:
                    26:a1:19:f4:72:df:96:58:6c:04:a4:9a:74:d7:53:
                    a5:e0:25:5d:83:6e:66:77:00:62:8b:46:eb:35:94:
                    13:cf:ab:ba:13:5f:66:a4:fe:59:cd:b8:b2:d2:0c:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:91:BA:EB:C7:39:4D:0F:37:3C:34:D2:8C:21:57:09:2C:A5:85:54
            X509v3 Authority Key Identifier:
                keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.232.0/22
                IPv6:
                  2401:1540::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:5b:ed:38:8a:ac:4f:ea:1c:c2:3e:9c:61:4a:e8:72:65:
         a9:b0:ce:90:8b:5a:56:f0:a7:38:9c:a3:58:18:96:6f:fc:70:
         f6:56:52:19:6c:5e:de:39:8b:61:cf:f4:cb:c3:b4:89:c4:2f:
         f5:81:1b:5a:51:d3:46:74:10:0f:63:e7:50:62:cc:d5:3a:16:
         81:a9:4e:58:a8:3c:ac:79:e3:b2:52:bd:97:60:2a:36:f4:6e:
         b8:bb:65:16:bb:16:ab:32:3f:ee:7b:df:65:48:42:51:03:a3:
         f7:50:f7:1b:37:83:90:3d:39:cc:a3:f3:1b:5b:4b:ee:63:f3:
         06:4c:ca:8b:69:98:5c:41:40:5e:b0:e2:9d:40:a6:0a:67:2e:
         db:d0:6c:44:8e:da:a0:9a:68:bb:af:1e:09:f3:e1:25:fc:9b:
         4c:e1:b0:0d:3a:c3:7a:5f:35:7b:68:7b:01:e5:13:0f:fa:41:
         1d:76:78:e2:1d:e9:ae:f7:75:a2:ff:f8:87:67:58:1f:ed:cf:
         af:10:63:57:cc:e1:69:1f:f0:f3:0a:27:b6:14:e6:0b:a6:15:
         fc:07:19:09:f4:a6:85:f7:de:d2:06:c7:d3:0c:22:df:aa:0d:
         7f:44:cc:62:1e:44:0a:8b:a4:ff:bb:c3:e5:34:1b:a0:93:c8:
         4b:ed:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:43 2026 by rpki-client