Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/C71919900BEE11EDBB84E711C4F9AE02.roa
File:                     C71919900BEE11EDBB84E711C4F9AE02.roa (raw, json)
Hash identifier:          xFIBvJ3CTg1FPk4tU2eV9BwbJUwU0DTmxn/fbJhjxss=
Subject key identifier:   57:B7:D1:56:AA:7F:DA:D7:AA:29:2A:9B:EF:AE:DC:61:D8:6D:7E:2F
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       058D
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/C71919900BEE11EDBB84E711C4F9AE02.roa
Signing time:             Wed 04 Nov 2026 23:42:39 +0000
ROA not before:           Wed 04 Nov 2026 23:42:39 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150140
IP address blocks:        103.173.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Nov  4 23:42:39 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebc2ef-d429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:35:6c:1c:96:a6:64:b3:53:51:31:ef:bd:
                    f3:7c:7f:60:95:ce:44:6c:0d:f0:63:7a:71:57:63:
                    d9:c7:c6:23:61:dd:04:f4:6c:08:04:51:36:55:7c:
                    ae:6f:e6:73:ee:5f:6b:0b:cf:16:50:92:60:3c:91:
                    c4:4b:ad:0b:b4:cd:49:be:ef:d2:b1:32:40:7f:af:
                    95:46:a0:87:1f:14:b6:c6:28:76:58:42:bf:59:08:
                    26:d8:8a:e7:48:72:71:99:c7:9f:2d:0f:b9:60:99:
                    2e:bb:46:ae:8a:03:99:56:6b:9e:63:37:eb:18:c2:
                    36:54:c5:29:16:58:4b:41:1e:dc:6d:73:7f:0d:b2:
                    de:5c:69:59:09:0a:3d:98:c9:ad:65:c0:e5:f8:3b:
                    38:8c:a3:61:ce:d8:f1:fd:d1:22:2c:e9:f6:64:4c:
                    ec:00:70:77:fe:42:f0:13:01:80:b1:df:57:97:c9:
                    17:61:7a:88:38:96:9c:b5:f6:51:b7:b4:8c:4e:40:
                    ec:fc:a1:a8:1f:2c:3f:28:93:83:35:30:d6:c0:04:
                    de:5a:03:69:02:a0:b0:9d:1b:f2:13:9d:08:fc:ac:
                    39:d1:48:bf:f8:c4:38:c0:28:cb:f4:fd:4a:8b:ca:
                    c2:4c:19:62:81:de:c9:c0:01:b3:7b:76:c3:0b:a4:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B7:D1:56:AA:7F:DA:D7:AA:29:2A:9B:EF:AE:DC:61:D8:6D:7E:2F
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/C71919900BEE11EDBB84E711C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:da:a2:8b:0c:46:78:9f:20:30:f3:51:03:e7:6c:ac:0d:2c:
         24:96:f8:5b:cd:51:2b:1b:ba:ea:39:1d:4a:4c:f2:00:8a:f0:
         a2:32:4b:e1:85:56:54:56:2a:53:d0:66:e0:ad:34:88:22:e6:
         22:cb:2e:c0:5a:45:a2:d9:d7:5b:45:47:d8:41:e4:0b:8b:20:
         c5:94:17:45:0f:69:89:a6:d6:f6:52:41:83:8b:cb:28:73:b1:
         d7:5e:45:ad:b4:60:3f:0c:3f:2f:01:8c:f2:2a:b6:5d:4b:29:
         74:b1:c7:51:68:3e:ea:cf:ab:80:4c:72:0c:1c:68:e6:ce:b9:
         50:6a:53:ad:2d:87:e7:b3:69:e5:ef:6e:0f:1d:ff:76:d1:93:
         8e:92:30:88:6f:41:79:b2:35:43:64:0f:fd:f9:ef:dd:5c:3e:
         0a:f8:0c:be:0b:8a:03:e6:28:35:f1:2b:f5:11:4b:c6:59:3a:
         0c:f7:b4:ad:02:72:ce:e2:00:7d:6d:62:2a:36:d2:ad:c1:4e:
         aa:3c:bd:7d:53:9b:2a:9d:4d:f2:20:4b:20:57:d7:da:d1:63:
         f2:c9:41:ee:0f:6e:ef:58:9e:9b:cd:44:03:e8:4c:fc:ec:23:
         3d:62:b3:e8:a9:91:bf:78:a9:60:27:71:6d:7a:49:78:ea:87:
         1c:8c:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:17:54 2026 by rpki-client