Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa
File:                     3B7794D2664A11EDB095B812C4F9AE02.roa (raw, json)
Hash identifier:          ZIr2apk71YLUZpnRbpwK15/NMysCEMo14Up36kPk0Wg=
Subject key identifier:   D0:16:52:33:3B:BD:BC:0A:AE:AE:64:55:85:2E:B1:CA:99:5B:E5:13
Certificate issuer:       /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial:       02D2
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 01:51:38 +0000
ROA not before:           Thu 03 Sep 2026 01:51:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     150321
IP address blocks:        103.55.178.0/24 maxlen: 24
                          2001:df1:4c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
        Validity
            Not Before: Sep  3 01:51:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98d2a9-770a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:0c:9b:5f:b5:92:60:9b:c1:95:08:e4:0b:
                    26:ac:56:1a:cc:30:58:72:42:51:e2:a1:a4:ce:5f:
                    b6:b7:c6:f9:3f:7a:d9:b7:0a:00:90:57:49:b1:c9:
                    17:61:21:f9:da:6e:27:f5:4b:ad:74:c1:73:ca:0d:
                    70:11:8a:a4:06:b5:3b:25:a5:79:70:f4:7e:46:53:
                    00:21:a8:9f:5a:bc:78:7e:08:f6:f5:6d:b0:5b:c8:
                    d7:69:0b:e4:16:6e:0e:c9:14:89:01:f9:67:58:47:
                    a9:58:a3:c5:93:63:bf:35:a7:d5:66:7e:44:ea:85:
                    b8:85:ce:eb:bb:76:8d:27:96:da:96:06:70:2a:a8:
                    bb:56:65:fb:b6:5c:2d:d0:ce:4b:04:86:2c:d8:fa:
                    9e:57:2d:d3:8b:a9:7d:2b:56:01:72:41:7a:99:20:
                    01:aa:3d:42:f5:d6:c6:2a:2a:2d:26:c8:d8:bc:cd:
                    6b:a7:0d:92:f1:e2:7e:4f:60:8e:eb:12:9a:56:ea:
                    c5:8e:56:bc:b8:96:e8:8f:6e:42:de:82:da:96:9d:
                    17:51:0a:bd:f5:f3:c0:a4:94:ed:89:28:0b:b5:90:
                    1d:0b:be:b0:34:9a:aa:25:3b:02:4f:6d:59:dd:1b:
                    41:66:5a:57:4c:a2:a4:42:5c:d0:56:47:20:28:18:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:52:33:3B:BD:BC:0A:AE:AE:64:55:85:2E:B1:CA:99:5B:E5:13
            X509v3 Authority Key Identifier:
                keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/3B7794D2664A11EDB095B812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.178.0/24
                IPv6:
                  2001:df1:4c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:05:ff:6b:cd:de:f8:7e:7f:91:84:10:fe:ce:a9:bd:90:
         83:3d:90:81:86:f6:20:c2:57:5c:a5:07:1e:fc:ea:dc:b1:71:
         ea:d4:62:10:4b:92:58:86:f8:10:1a:4d:a2:9c:54:a6:72:76:
         4f:bf:ee:74:8b:59:66:a2:e3:63:74:c6:9d:d8:9c:5b:5f:41:
         6a:27:a7:14:7e:e3:50:87:1c:e6:fa:88:da:c7:c3:31:67:6d:
         9c:0e:ae:a7:c2:7f:6c:66:9d:18:4d:8c:2a:9b:78:73:25:ac:
         f8:6c:a8:7e:58:09:c5:54:01:4b:9a:9f:66:04:b2:9c:aa:bd:
         b5:5a:bb:c2:35:63:cd:ce:56:bd:23:e9:3e:b8:fb:6a:6a:0a:
         bb:f4:24:a4:b4:95:a0:43:20:73:dc:fb:90:53:13:c8:ac:70:
         28:67:58:f3:e0:3f:25:af:19:2e:45:40:99:d7:6d:53:bd:c4:
         c8:30:61:c2:fd:6d:fc:19:e0:0f:02:d8:72:9b:f1:14:c9:10:
         0f:a2:d4:f2:04:e5:3a:ed:45:dd:1e:a5:f1:e4:5b:ae:52:e0:
         37:de:0f:71:4e:45:8c:da:7a:51:16:fd:b7:98:62:d1:c6:8f:
         96:2b:26:4c:e7:2b:64:c1:60:b4:93:2d:4c:b2:18:52:cb:de:
         e1:88:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:11:46 2026 by rpki-client