Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
File:                     A3583B2616B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          c6JJTbyii4kmmwmKTzsjdZQmeW/PESkjfx7KNoiOGac=
Subject key identifier:   F9:16:1C:8B:CB:17:02:B7:98:0D:31:85:EC:7F:E2:5E:44:6E:A0:B6
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05E0
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 22:26:32 +0000
ROA not before:           Tue 30 Jun 2026 22:26:32 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     55799
IP address blocks:        103.113.156.0/22 maxlen: 22
                          103.113.156.0/24 maxlen: 24
                          103.113.157.0/24 maxlen: 24
                          103.113.158.0/24 maxlen: 24
                          103.113.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jun 30 22:26:32 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a444298-0475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:13:b4:49:c1:ba:53:ae:aa:b1:e9:77:b9:
                    39:b3:5f:bd:d6:47:ed:5f:2f:0a:41:61:71:2e:3f:
                    ef:a1:06:01:ee:0f:df:08:a3:fc:23:c2:95:77:dc:
                    c0:ed:26:32:91:11:95:85:5a:4f:29:2c:d3:8e:00:
                    d1:62:5f:06:4a:f0:bc:bd:78:a3:be:e8:d8:be:99:
                    d7:37:69:d3:04:a3:22:38:d3:fc:a5:9e:8d:61:ae:
                    81:36:59:68:12:d2:74:f1:ae:05:51:1e:fd:89:12:
                    0b:e8:0e:ca:48:c7:1e:58:75:d0:3d:f9:00:a9:60:
                    35:64:b8:00:3d:a5:e4:9e:78:51:58:b1:1d:77:e3:
                    95:cb:c6:ec:31:38:5c:20:58:48:7d:c4:cb:81:95:
                    c2:29:c7:6b:9c:2a:23:5c:75:fc:c0:1e:4a:32:c4:
                    51:7e:2b:1f:ca:4e:a5:53:b9:e5:89:d2:dd:1d:66:
                    60:90:e0:e6:56:09:d6:5a:5d:be:a5:19:91:0f:e7:
                    07:e1:7d:34:a5:2e:d2:92:77:2e:b2:58:e1:7d:65:
                    f8:77:05:12:09:88:27:10:00:36:f8:27:28:09:79:
                    17:71:de:e2:c6:b9:c0:f4:7d:27:9d:a8:64:67:91:
                    fb:39:3d:69:a4:34:57:af:27:fa:3a:38:bc:ae:30:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:16:1C:8B:CB:17:02:B7:98:0D:31:85:EC:7F:E2:5E:44:6E:A0:B6
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:ec:29:e6:b6:f6:37:41:cb:2a:c2:2e:76:72:35:ee:89:
         c9:62:ea:38:3b:27:d8:dd:07:8d:ae:1c:2f:fe:04:5d:c2:0f:
         6e:26:28:0a:76:93:26:ed:28:4e:62:80:fe:7b:4d:71:b9:73:
         56:3d:b1:43:c4:db:3f:f3:9f:89:06:d3:67:fa:7d:50:2f:f0:
         62:8c:9c:b5:4b:ff:4e:aa:82:e0:8c:70:ce:e0:b5:a2:65:b2:
         70:03:83:69:8c:73:3d:31:6a:f7:fb:77:1d:20:95:87:c1:ca:
         2e:1a:dc:58:b2:d7:37:c2:05:2a:84:e9:a5:a0:4b:b7:c1:54:
         87:0b:dc:07:db:74:f4:c8:38:29:6d:b8:07:5a:d3:6e:80:bd:
         1c:0a:a0:7d:2e:06:98:39:af:e7:b9:a3:71:5c:8f:5d:91:0a:
         29:03:4a:4d:23:64:7c:c1:31:04:ff:2b:69:eb:f6:ef:88:dd:
         32:c1:c9:7b:1f:38:7b:75:b6:f2:e6:d6:f4:54:cc:8b:ac:82:
         f5:6a:9f:95:bf:c6:ca:f0:01:19:40:c6:10:16:ec:3d:17:1d:
         c5:04:c2:59:8d:8a:9b:00:ec:a1:d7:47:18:72:34:89:07:92:
         a0:9d:ca:30:d6:75:f0:ab:6a:0f:1d:15:b3:cd:8d:fd:4f:10:
         a9:2b:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:08 2026 by rpki-client