Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File:                     1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier:          +PXK5bAQHl5n5sjoaxb3xlyTYiUqPD5GYXTU3OO67/s=
Subject key identifier:   42:BA:2C:B0:FA:13:E4:D5:9D:F2:7A:66:4C:3E:F4:F4:28:AB:F6:D8
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0BE2
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 19:39:14 +0000
ROA not before:           Wed 02 Sep 2026 19:39:14 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140866
IP address blocks:        103.141.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Sep  2 19:39:14 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a987b61-c2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:3b:fb:3a:8e:50:8f:78:cd:a8:11:53:4f:
                    3f:d4:9c:83:00:da:9a:31:c3:40:4d:43:b5:b3:8d:
                    75:ab:66:67:c8:a7:39:5a:5d:f4:c3:76:b4:67:b2:
                    3f:6e:a2:46:8f:37:76:ff:35:ac:b6:38:da:82:29:
                    b1:e2:63:8b:9c:24:53:ee:5b:6b:a2:0e:a5:54:72:
                    2f:1b:59:d1:9b:56:2b:d5:f8:59:2e:b8:fb:9a:56:
                    35:84:4b:d8:85:cf:b0:67:ba:75:bf:2a:29:c1:27:
                    e5:22:22:31:69:df:47:aa:2b:8b:e5:02:0c:ba:ad:
                    a5:f3:7b:84:e9:4f:25:f1:80:e1:17:65:4c:e8:0b:
                    c5:11:cd:ad:3d:ba:71:ce:74:6a:ca:ab:c0:96:09:
                    84:d6:08:59:8e:4a:3e:78:d0:47:83:1a:9d:05:62:
                    4f:96:55:82:46:f6:28:95:e3:1a:2d:dc:89:5b:3e:
                    59:a7:c3:d0:03:c5:93:dc:fc:67:c8:c1:81:90:30:
                    c5:0e:8d:57:6d:53:cf:52:57:ae:90:9d:f2:60:7f:
                    75:46:52:2c:e6:8e:bf:98:55:39:34:dc:e4:41:99:
                    cd:88:de:5d:f7:31:92:97:9b:fb:9d:9e:c6:d4:ec:
                    48:f8:c8:d3:b8:9c:e7:34:2d:d5:98:5c:b2:02:46:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BA:2C:B0:FA:13:E4:D5:9D:F2:7A:66:4C:3E:F4:F4:28:AB:F6:D8
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:66:1f:68:43:0e:5f:db:e3:0e:3a:ac:6b:bb:40:db:93:
         27:47:ae:c8:44:e9:74:a5:ea:1a:8a:72:ae:df:24:40:be:e8:
         87:eb:af:73:5a:3b:8b:f4:56:e5:88:5f:61:20:10:15:db:84:
         d2:47:36:52:9f:ab:63:48:fb:6c:6d:2e:bf:9e:6e:0a:9f:cc:
         c2:69:5a:2a:eb:0a:61:37:36:6c:6c:db:7e:d9:76:06:7b:ef:
         a2:6f:4a:b4:6a:45:52:41:b6:b4:da:4e:da:31:47:bd:17:c7:
         4f:8d:33:84:f3:ef:ef:7f:63:08:30:a0:fb:0b:ea:1b:41:0a:
         f9:0f:b5:b0:22:ba:e5:b3:54:f5:28:08:92:7f:d6:f9:67:8b:
         46:49:77:46:f5:fb:53:a9:71:91:92:35:c7:5d:5a:34:5a:76:
         42:fa:9f:66:86:dc:c8:92:51:d0:9e:a6:86:91:09:f1:7b:58:
         1f:48:5f:ad:e0:04:ce:dd:34:80:b5:5e:d6:f3:d7:c9:64:60:
         d0:49:36:93:28:83:84:bb:8e:38:57:4d:0d:a0:61:35:c4:e5:
         a8:11:58:d1:5b:9a:f5:81:7c:c7:88:98:df:a7:e5:5c:7d:c7:
         0f:b5:90:3a:d3:6b:aa:4c:71:87:f3:77:f6:86:50:19:13:0e:
         bc:2e:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:49:38 2026 by rpki-client