Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
File:                     0853E998C45711F080167D38C4F9AE02.roa (raw, json)
Hash identifier:          9wGGSvONuRhyHPCYZAhrCUe7eBe9FnHcqTP8k+BasBo=
Subject key identifier:   5D:86:97:BA:77:8A:99:7D:82:87:A0:37:60:A4:2B:84:23:A2:BC:E8
Certificate issuer:       /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial:       7F
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 09:35:45 +0000
ROA not before:           Wed 01 Jul 2026 09:35:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.139.114.0/24 maxlen: 24
                          103.139.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
        Validity
            Not Before: Jul  1 09:35:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44df71-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:41:7b:bb:71:60:ff:06:8a:98:59:bb:e2:bd:
                    f2:d6:6b:d7:c8:58:de:33:b5:98:04:d0:d3:cf:0a:
                    f5:97:d7:99:33:f1:1c:81:01:c1:86:a8:eb:87:f5:
                    03:01:3b:2a:59:14:74:8a:6c:c3:fd:0b:05:b9:5a:
                    1c:2e:eb:10:fb:31:a8:53:fd:1b:35:0f:f4:a6:80:
                    75:e7:c8:32:bc:7e:7f:e2:98:93:6f:2b:35:12:08:
                    6b:9b:38:6d:32:f1:89:70:7d:6c:47:a8:f0:a0:5f:
                    9b:d2:a7:01:39:37:0f:02:49:4d:06:a1:69:a4:26:
                    68:7d:4f:a9:cd:de:d1:a9:e7:21:3c:45:55:22:d0:
                    f3:c4:5f:83:20:ed:70:b7:e6:b6:c8:29:15:6d:b9:
                    bf:e0:18:f8:68:11:62:c4:ba:2c:1a:00:1d:ee:d2:
                    5f:3c:cf:d4:58:7c:75:60:6b:cf:21:fd:c3:3f:fb:
                    a2:eb:97:60:8f:89:ce:98:b3:d0:81:96:80:c4:b9:
                    b8:c3:48:76:05:d5:8c:e3:f2:36:25:6d:e1:1b:4f:
                    f0:e9:59:fb:8a:3c:dd:80:d8:d8:26:0b:9d:a4:67:
                    e9:62:7b:04:2a:8f:38:77:51:49:00:9c:1e:86:70:
                    21:10:19:74:b1:69:27:14:18:a0:4f:ff:ce:db:01:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:97:BA:77:8A:99:7D:82:87:A0:37:60:A4:2B:84:23:A2:BC:E8
            X509v3 Authority Key Identifier:
                keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:80:a4:8b:12:71:0f:61:86:c4:10:06:16:a9:a5:b7:69:
         63:d6:b2:f9:4f:fb:20:51:41:64:01:c6:b1:ea:c3:4f:21:48:
         b6:76:69:a7:26:ec:e1:9a:dd:bd:0a:42:4e:2d:06:d2:09:a9:
         5e:fc:21:30:f5:09:27:39:e9:6d:86:79:d7:d0:c5:c3:b5:b4:
         2e:0f:c3:a9:a6:7f:80:a0:d2:9a:54:d9:d2:16:be:da:6d:3e:
         ce:32:83:63:eb:91:f1:54:96:15:95:f7:ab:f3:92:b8:87:13:
         f7:4d:bc:54:ca:36:ad:bf:9a:46:fa:6b:73:a9:10:b6:8d:66:
         bc:07:dc:ad:a5:23:a8:c9:48:17:c3:5b:08:05:40:33:e7:79:
         91:da:59:49:a0:d4:d3:c2:41:c8:96:2f:fd:df:35:11:60:9b:
         97:7b:91:c2:cd:e5:a1:2a:0a:a5:ec:d5:39:48:96:34:70:3d:
         90:b5:4b:53:7c:fa:b9:7b:2f:98:75:e0:9d:08:78:f3:c1:85:
         44:9b:9a:6c:f6:13:0c:63:91:cb:61:80:2b:50:08:33:7b:19:
         e5:2a:c9:a5:79:4a:a8:26:43:3e:88:88:0b:60:92:48:b8:9f:
         16:92:a5:83:71:22:37:eb:96:2b:a3:cb:a2:6a:c8:2f:5b:49:
         e2:b0:cc:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:45 2026 by rpki-client