Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
File:                     A3E3640816B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          bySfqpau117z7inejmmyLC9Bk8/UNdilb+Osy+Q8QJE=
Subject key identifier:   4C:C7:64:6A:D0:55:F8:24:E5:D3:6A:FF:59:75:6D:4C:44:E7:B6:D9
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05E1
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 22:26:35 +0000
ROA not before:           Tue 30 Jun 2026 22:26:35 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     63916
IP address blocks:        103.113.156.0/22 maxlen: 22
                          103.113.156.0/24 maxlen: 24
                          103.113.157.0/24 maxlen: 24
                          103.113.158.0/24 maxlen: 24
                          103.113.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jun 30 22:26:35 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44429b-f706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:3c:3c:f5:22:c2:4a:82:fc:5e:90:59:5e:
                    14:35:f0:58:5d:fe:40:e3:7d:f0:b1:f8:a9:06:e4:
                    6a:a6:12:d9:00:6e:14:f7:f5:18:bb:22:1b:bb:cb:
                    4a:bf:f1:db:c9:c9:b6:54:08:91:a3:1f:a3:12:0a:
                    df:74:36:08:26:aa:60:c0:e5:bc:32:d3:c6:e2:23:
                    31:5d:60:ae:ef:9b:09:10:1f:9c:35:3c:6e:87:32:
                    18:20:cf:3f:e9:1d:ad:1d:bb:5e:b6:eb:96:5b:56:
                    82:11:17:33:fa:34:08:f5:bd:82:a1:4b:ce:71:2f:
                    5f:ba:ff:8f:ae:f8:17:d1:94:b6:e0:42:90:56:fd:
                    16:b1:a6:ad:1a:9d:d3:fb:c1:59:21:46:bd:99:d2:
                    4d:ee:6b:f6:59:92:e7:e1:5c:6f:7c:d1:2c:46:06:
                    d7:69:b7:52:ae:44:e4:ee:6c:e9:ca:44:a8:e0:30:
                    86:50:50:31:ff:11:e5:24:45:24:4e:fd:0b:82:2e:
                    75:46:c9:93:7e:50:5c:f0:99:09:62:78:fa:8d:25:
                    7a:1c:20:e7:88:a1:f8:7c:dd:e0:e7:4c:f8:e4:ec:
                    25:84:40:3a:83:f6:9f:6c:0b:60:7e:5f:9c:53:6f:
                    44:4b:9e:4b:af:95:9c:11:21:6f:9b:4a:da:d2:5a:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C7:64:6A:D0:55:F8:24:E5:D3:6A:FF:59:75:6D:4C:44:E7:B6:D9
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:2c:38:8e:0b:67:85:60:3a:c1:73:f5:fe:ca:60:79:87:
         86:ac:45:38:26:09:2e:88:20:0b:90:8b:84:85:2e:79:82:db:
         b8:cb:31:a9:e8:33:94:3e:60:75:49:78:1d:99:b3:9e:e5:28:
         3c:e1:af:2d:8a:f0:12:ed:f6:37:e9:b3:3c:ee:6d:5d:30:b8:
         96:52:d6:d2:25:f8:3c:f1:4b:65:7b:2f:1e:26:5c:08:b0:00:
         06:12:11:43:1d:a1:97:68:b9:70:fb:9c:df:54:4d:8a:da:c9:
         91:66:17:b0:3e:5b:11:33:19:43:69:a0:96:d1:d6:06:88:fc:
         38:5b:e4:ba:d0:93:8f:33:35:c4:f7:d3:f5:cc:f6:31:2c:59:
         5c:a9:5f:63:cf:55:de:8f:32:79:ca:9c:09:4d:ef:cb:7b:67:
         11:40:48:b3:ed:61:6a:9d:51:53:92:b4:94:17:62:e8:c6:cb:
         f8:66:16:8e:4c:1b:f4:db:71:f2:ea:4a:07:ff:6b:5a:78:05:
         fe:88:9c:3c:7b:79:68:b5:d0:65:ee:4a:17:0b:be:22:8f:07:
         83:17:36:d7:bc:9a:4f:43:73:fd:29:8b:79:06:e0:b4:5b:cc:
         ab:93:8a:c2:75:cc:1d:85:be:47:7f:1e:cc:4e:a8:f2:a7:bc:
         86:0c:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:45:11 2026 by rpki-client