Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/9359E338DCEA11F1A0FDEE6C1866CEF9.roa
File:                     9359E338DCEA11F1A0FDEE6C1866CEF9.roa (raw, json)
Hash identifier:          NMW/1La5JFHwWKAvGqkAIb/QYQQJ6QWKM7Yeiak8ooc=
Subject key identifier:   08:36:AD:8A:E2:73:38:69:63:16:18:26:F3:AF:25:86:27:25:57:8B
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       04AA
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/9359E338DCEA11F1A0FDEE6C1866CEF9.roa
Signing time:             Tue 10 Nov 2026 09:39:08 +0000
ROA not before:           Tue 10 Nov 2026 09:39:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136787
IP address blocks:        103.114.57.0/24 maxlen: 24
                          139.5.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Nov 10 09:39:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6af2e63c-1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:5c:1f:c9:6e:b9:ae:75:e8:8f:11:1f:1b:
                    b7:35:9d:bc:65:44:b1:69:c4:b7:77:85:d5:28:d2:
                    7a:a2:24:f6:84:6e:d9:3d:18:02:47:73:ce:95:58:
                    8a:cb:d3:1b:1e:3a:90:15:45:59:52:ee:35:18:73:
                    84:39:0b:c6:00:ca:61:dd:d7:53:11:f1:37:3f:86:
                    bf:6f:4c:5a:eb:4e:6d:5b:8e:23:44:d1:ca:e6:b4:
                    2a:32:57:f7:c8:4a:87:96:2f:11:31:43:59:c7:3f:
                    38:b5:59:4b:c4:73:df:37:a9:fe:58:a4:97:92:2e:
                    88:d7:3c:c9:18:fb:5c:d5:0c:cc:45:e1:c6:f8:dd:
                    36:c0:53:d6:21:07:5f:cf:6f:f1:9c:85:65:04:02:
                    4e:a8:3c:6a:8c:8c:ca:b0:c6:b9:49:35:73:68:c4:
                    75:c1:2b:ac:71:00:56:a8:c8:ea:80:fe:21:7e:46:
                    ab:70:d6:e0:22:66:21:a1:18:1a:85:4c:2e:19:be:
                    40:e6:41:b9:7e:45:23:d2:d5:a5:cf:81:69:5d:49:
                    8b:bc:23:e6:b1:f9:4a:fa:4b:09:20:a8:9f:b3:5a:
                    cd:1d:79:2e:a6:37:36:96:7f:f4:f9:59:78:95:d7:
                    4e:4c:a0:ae:a4:47:d8:11:c4:c3:99:79:8b:0e:ab:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:AD:8A:E2:73:38:69:63:16:18:26:F3:AF:25:86:27:25:57:8B
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/9359E338DCEA11F1A0FDEE6C1866CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.57.0/24
                  139.5.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:eb:cf:67:cf:bc:fc:ba:a4:d6:ad:52:29:59:2a:4c:87:
         92:8f:3f:b0:6f:af:44:a6:4b:92:7d:12:8e:e7:0e:f7:2c:50:
         4c:78:b7:cf:ac:15:21:0a:29:a4:ee:41:5d:c1:90:ae:02:a2:
         80:f9:60:2b:40:8e:ba:68:9b:90:c0:f9:e9:48:55:8e:64:08:
         2c:9b:94:a4:b4:a8:7f:68:b4:5f:18:f6:b1:56:87:49:9d:51:
         7d:da:26:f0:76:bf:dd:93:d0:ac:53:20:7e:37:25:c1:96:33:
         9d:fa:e8:9f:c0:1e:40:91:e5:df:a3:5b:ed:1c:69:f5:95:67:
         89:7d:45:3d:48:15:f6:be:c7:a1:ae:6e:78:af:d3:8c:38:31:
         cb:97:a5:23:53:76:47:74:38:66:df:dd:97:2b:cb:3f:ac:e1:
         15:45:7b:1a:af:34:d1:d8:7c:95:fa:02:c1:29:52:6f:20:6a:
         ec:11:1b:2a:83:e2:ac:fb:c1:48:f2:97:48:b9:ca:39:8f:04:
         f3:fe:da:a6:74:c2:ea:a7:99:49:9c:fa:01:14:a5:38:b0:3d:
         b3:4a:87:41:ac:43:44:70:f5:8a:68:2d:1a:ed:e4:c7:b2:95:
         e6:c3:58:c3:47:8d:dc:e6:1d:c9:9f:8e:06:db:89:8a:6c:29:
         19:94:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:50 2026 by rpki-client