Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa
File:                     5761FF06493411EF859C1D49C4F9AE02.roa (raw, json)
Hash identifier:          zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=
Subject key identifier:   97:76:3F:1D:3B:35:B0:0A:75:0A:89:9F:E5:CE:5A:10:E5:B8:07:FA
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       35A8
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 15:10:42 +0000
ROA not before:           Wed 22 Jul 2026 15:10:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     3356
IP address blocks:        103.212.168.0/24 maxlen: 24
                          160.202.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13736 (0x35a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Jul 22 15:10:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a60dd72-8351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:b6:53:3a:e6:43:83:02:72:bd:28:d7:4d:
                    e7:b7:a0:8f:48:21:00:7c:d7:79:71:ea:a8:c7:11:
                    93:d4:bd:e8:c6:a4:c4:1b:6e:e8:79:9b:cf:99:34:
                    42:11:b8:8b:4f:f3:93:84:84:59:d5:6a:7e:8e:b5:
                    bd:f9:83:b4:81:53:67:c6:71:6d:3b:87:ef:d2:66:
                    f0:f2:8b:11:e1:db:22:02:42:a5:70:fd:da:ff:2a:
                    91:0e:e8:2b:1c:cf:6e:45:a1:29:ec:8e:13:b5:5e:
                    f0:ab:58:ad:84:02:87:14:1b:ba:7c:b2:9a:7f:b0:
                    8a:91:8d:30:64:5a:40:61:c6:2a:a2:d3:e0:c3:bf:
                    92:4c:15:3c:09:89:3a:4a:fe:6e:f4:c5:6b:55:e3:
                    a6:dd:26:49:30:d2:59:8f:48:e5:b0:74:35:c7:ed:
                    82:56:1b:f5:fb:af:88:43:5f:df:73:ad:b4:83:c6:
                    b4:46:82:b9:ec:33:ab:77:82:e0:2b:95:27:6b:4e:
                    91:55:11:01:e1:32:f1:72:9d:c6:73:0d:7b:f5:ad:
                    c0:85:ae:98:96:75:82:c9:68:db:58:a0:1a:be:a5:
                    52:29:de:93:85:0b:4b:c0:1a:ff:e6:03:43:33:95:
                    e5:a0:38:e8:4e:7d:01:09:85:98:14:09:0b:4b:bc:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:3F:1D:3B:35:B0:0A:75:0A:89:9F:E5:CE:5A:10:E5:B8:07:FA
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.168.0/24
                  160.202.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:14:e2:71:e5:ae:e1:8a:74:ea:88:84:6c:70:1b:a6:79:0a:
         35:79:1f:29:4a:d8:df:a1:34:2d:50:03:81:ad:fc:da:28:5f:
         8d:9f:57:0e:82:94:b2:a4:36:12:f4:d2:bc:9b:fc:80:f4:b9:
         bd:37:48:05:13:c4:37:dc:62:97:10:f6:8e:8d:89:b0:17:c3:
         9b:d8:7c:f1:5a:15:e5:e6:53:67:d4:48:74:27:9d:cc:ef:a9:
         21:65:cb:33:2f:49:4f:a6:46:9f:ae:44:3a:03:46:9f:a1:fb:
         d7:d5:38:b9:a8:6f:ac:ce:09:91:3b:c2:2c:f7:81:f7:6d:8b:
         9c:04:28:82:c4:ec:84:83:16:b0:cb:c9:62:64:3b:5b:45:67:
         d6:78:29:4e:dd:ff:76:fa:53:d5:81:c5:af:3c:12:ee:55:45:
         b3:b0:c8:f4:3e:52:0e:bf:ca:0e:d8:a4:11:63:8a:73:f7:46:
         49:9a:8a:4d:28:f8:0f:12:49:80:e0:5e:07:c7:10:d0:48:e0:
         aa:f9:67:bf:78:72:16:f2:a6:a1:05:ab:3c:a5:94:30:0a:03:
         25:16:8f:18:92:70:a3:44:ae:ea:8a:3b:e7:ff:c0:e8:36:3d:
         e2:46:39:96:54:11:1b:09:02:d0:59:b5:58:f9:93:4a:20:48:
         6b:1b:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:36 2026 by rpki-client