Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/74CBF518D5E311F1A10F4780FB65CEF9.roa
File:                     74CBF518D5E311F1A10F4780FB65CEF9.roa (raw, json)
Hash identifier:          +7U05j0iLpUCgmnplM2PHzzERgi/Hub2k72s0/IT/bE=
Subject key identifier:   ED:10:AB:7B:4E:FD:57:18:AF:98:42:24:3D:0E:7D:44:46:2A:98:11
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       081B
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/74CBF518D5E311F1A10F4780FB65CEF9.roa
Signing time:             Sun 01 Nov 2026 11:00:32 +0000
ROA not before:           Sun 01 Nov 2026 11:00:32 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     211392
IP address blocks:        103.68.192.0/22 maxlen: 24
                          121.54.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Nov  1 11:00:32 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ae71bd0-6e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:20:94:7e:32:45:bf:99:6b:c9:8e:7a:51:
                    21:bd:60:f8:d4:bf:af:c3:1f:21:fc:5e:47:80:94:
                    df:fc:81:d5:c1:fd:30:8e:7d:b3:df:58:f5:13:92:
                    20:1e:18:b3:e8:e4:d1:11:97:97:89:64:73:18:ee:
                    97:2b:d1:ef:10:84:af:24:0f:fa:f3:34:c3:eb:33:
                    cf:61:2c:a3:3e:f9:89:4f:ae:5b:b7:94:55:05:4a:
                    76:cd:cb:ce:ab:e4:e3:6c:c1:89:60:73:d3:24:94:
                    9e:d1:23:69:f5:10:b1:b7:3b:5b:2f:cf:3d:9a:6f:
                    66:5c:ea:76:7e:64:08:19:fa:59:65:dd:0e:47:2e:
                    9d:5c:9c:bd:64:0f:85:ee:d4:ff:68:20:3d:a1:92:
                    de:2c:cd:83:78:2d:e7:92:bf:69:a0:75:41:d6:de:
                    2a:8e:c6:c2:f8:d0:c5:67:c6:56:06:34:f4:ed:28:
                    54:15:34:bb:16:90:c1:d4:32:85:35:f3:64:26:37:
                    a4:29:da:a0:47:93:59:39:9a:6d:ef:52:8b:2a:3e:
                    5c:1e:75:56:b6:33:9a:c8:aa:dc:60:c3:05:68:ba:
                    f6:cb:10:7d:4e:9a:ae:63:b4:32:f3:71:b9:8d:b7:
                    8e:e7:bd:53:c1:07:d9:ad:3b:d9:dd:6d:a3:67:fa:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:AB:7B:4E:FD:57:18:AF:98:42:24:3D:0E:7D:44:46:2A:98:11
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/74CBF518D5E311F1A10F4780FB65CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.192.0/22
                  121.54.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:57:46:1d:d0:3b:8b:2a:85:e0:cd:e7:5a:54:e6:84:4b:
         e4:4c:0f:be:65:eb:2a:0e:51:97:a5:e2:f0:f1:85:0d:e3:02:
         b5:f9:d4:5f:52:83:b1:66:94:5a:19:7a:5d:ea:9c:c1:db:93:
         94:cc:c8:32:7d:d7:99:6d:f2:c1:9f:66:3c:14:02:37:9f:4d:
         4b:10:0c:b9:70:8b:91:5c:32:82:48:9e:86:d2:1f:ad:a4:a1:
         bc:79:d7:c0:b7:c5:d4:d5:02:76:ba:1d:0a:96:38:e8:49:0a:
         09:c1:4b:a5:cd:2f:08:b8:cc:35:f9:00:07:73:f3:ba:c6:82:
         c6:aa:83:ec:2b:2c:4e:99:a5:08:a8:fc:de:c5:45:da:08:65:
         b9:c5:c7:7a:3d:6b:60:8c:d7:0a:d3:88:59:1d:dc:f0:16:00:
         92:61:b8:fc:72:be:15:c7:70:d1:db:73:73:b9:b2:20:5b:a6:
         bb:57:18:93:e5:49:66:2d:c4:30:24:9f:2d:a3:a1:3e:f6:43:
         32:d9:cd:1c:9b:3b:6f:f0:e5:46:4f:b4:14:2e:a7:42:5a:86:
         53:32:3f:40:8d:ae:d2:8b:82:8e:2f:da:41:cb:3f:d3:77:1c:
         10:d5:9e:05:44:c7:1b:84:72:82:01:c4:63:80:f2:52:46:5d:
         2b:0e:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:37 2026 by rpki-client