Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa
File:                     14E68648B42D11E9A44FF25BC4F9AE02.roa (raw, json)
Hash identifier:          Pu0JLncruXRjK9bzpTN/LXkweSlyI2MUsZIXpCmzjVE=
Subject key identifier:   1E:58:EB:BD:E9:17:E9:F6:4D:08:30:7C:17:E3:51:3A:60:02:4B:C9
Certificate issuer:       /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Certificate serial:       0EBE
Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 18:18:30 +0000
ROA not before:           Fri 10 Jul 2026 18:18:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139255
IP address blocks:        103.140.112.0/24 maxlen: 24
                          103.140.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
                          rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3774 (0xebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
        Validity
            Not Before: Jul 10 18:18:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a513775-d0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:38:19:6a:46:f3:85:41:f4:c7:a5:c6:5a:
                    0d:a6:f6:c1:aa:f5:c6:0e:9a:24:ba:0c:02:35:0e:
                    35:ef:d4:b0:8d:4a:cb:c1:27:d5:8d:09:af:71:25:
                    93:65:62:4d:9f:c6:a1:b6:57:05:3b:2f:44:47:dc:
                    19:d6:7a:63:14:f0:3a:ee:b4:45:d4:7f:75:ea:b1:
                    fe:a5:2e:b2:fa:aa:3a:f8:83:82:09:1a:0c:cb:83:
                    73:9a:15:64:9d:b0:c2:ba:05:d2:80:56:57:a0:40:
                    64:88:35:a4:4a:e0:19:b4:81:f1:5a:94:af:06:9c:
                    05:09:52:2d:e6:fe:e7:ab:aa:b3:a5:59:16:c9:3b:
                    15:78:b8:7a:02:9e:f2:62:c4:01:b3:cc:f1:45:d9:
                    a4:c9:9f:43:bd:71:46:72:6d:45:97:20:ae:60:35:
                    88:bf:ae:0f:c1:9a:fd:cd:ae:c8:26:fa:df:10:17:
                    3b:f7:d2:d7:14:46:69:d9:24:41:e0:d3:be:8a:08:
                    51:96:1b:70:f9:0d:ae:a9:e9:de:e0:c4:67:ba:ae:
                    74:6c:52:90:ce:91:f9:52:b7:9d:d6:b2:d6:1a:cd:
                    58:7a:1b:a7:98:39:a7:17:bf:9f:11:5c:03:3d:f6:
                    1a:e9:5c:bf:37:8c:b9:3e:a4:ab:81:dc:58:8c:3a:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:EB:BD:E9:17:E9:F6:4D:08:30:7C:17:E3:51:3A:60:02:4B:C9
            X509v3 Authority Key Identifier:
                keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:2b:d2:7d:c6:3e:17:d4:41:c0:ca:55:2d:bc:52:a4:53:
         98:55:62:22:c8:42:12:37:15:86:a6:c1:b9:94:34:e7:37:79:
         e4:14:88:45:76:ed:20:9b:25:cf:ed:8b:36:97:80:23:79:10:
         dc:a2:f1:01:f1:01:dc:a6:7e:81:0a:ba:58:ae:e2:17:8d:ac:
         b0:12:49:72:d1:b8:4f:df:8d:03:17:9e:11:96:cd:21:3b:92:
         8f:3d:47:32:be:f2:7e:85:27:6d:ab:0d:1b:98:1f:8b:29:b0:
         6d:aa:58:ec:79:f3:33:4f:d0:c7:d4:60:83:fe:9c:06:a5:d9:
         94:c3:c5:48:eb:ec:05:05:d7:bd:64:9c:51:d6:e8:d2:a7:10:
         84:4f:67:75:8d:e7:16:fa:e0:fc:d8:52:45:89:f2:3b:e0:ab:
         94:2c:f5:e0:60:fb:2a:8e:20:76:88:0c:ad:73:1f:62:80:c1:
         2a:91:15:7c:5a:e0:b8:a6:2f:de:94:b6:c7:17:2b:c3:1e:69:
         21:b2:e5:66:d2:65:d5:92:44:1e:04:d5:a2:d5:f6:5e:9b:bb:
         30:ee:14:17:4c:8e:35:3b:97:3c:04:8a:c0:41:e4:81:6d:1f:
         be:d3:6f:73:96:d6:29:30:85:aa:af:1e:f7:c6:80:5e:43:d1:
         0e:73:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:33 2026 by rpki-client