Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa
File:                     4C738434ABD011F08EDDF110C4F9AE02.roa (raw, json)
Hash identifier:          qQN6uale8J4WjFyRmfbzyXjiaHGTOFF5IOq1ywQVuBQ=
Subject key identifier:   3F:ED:E5:FA:1D:61:B5:BC:FA:2D:44:BA:D7:0B:C8:61:A1:45:BB:11
Certificate issuer:       /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Certificate serial:       01B4
Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa
Signing time:             Wed 11 Nov 2026 04:51:26 +0000
ROA not before:           Wed 11 Nov 2026 04:51:26 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     26658
IP address blocks:        103.197.192.0/22 maxlen: 24
                          220.158.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
        Validity
            Not Before: Nov 11 04:51:26 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6af3f44e-2f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:75:97:3f:6f:ad:a0:c6:25:04:60:0e:53:
                    70:91:f9:31:d3:fd:c7:fe:c9:4d:1e:d5:a1:70:1a:
                    f4:91:e8:3c:5d:2a:d9:21:33:8a:6a:04:98:3c:34:
                    48:8e:91:85:6a:91:9e:76:94:aa:90:bd:42:5b:19:
                    cb:fa:af:9c:c0:53:e3:eb:1e:ca:5a:d6:62:1f:29:
                    42:ed:ec:da:45:a0:b1:19:be:d4:13:61:fd:4c:5c:
                    2c:4d:55:3e:95:72:07:82:53:89:44:17:e9:c7:41:
                    57:7f:ab:dc:a7:07:55:7c:e8:ee:ba:94:74:35:fb:
                    58:c6:bf:71:50:6f:93:3f:91:d0:11:6a:86:ea:88:
                    b2:bc:8e:69:6b:34:dd:2a:03:e1:ad:e6:5f:a4:ee:
                    59:4b:7c:90:a2:43:15:19:ef:10:a8:fa:0a:15:ee:
                    1b:3e:8e:fb:98:85:9e:c5:a5:61:74:bd:15:34:3d:
                    98:cc:b6:68:4a:09:ba:e6:c7:fe:b5:8b:93:ae:d9:
                    fc:77:63:7b:be:79:26:0a:e6:18:35:df:06:3c:c7:
                    ee:07:17:db:54:56:59:81:8e:88:b0:50:4e:ca:a0:
                    8f:49:37:bc:7b:c0:5c:25:5e:30:6a:c0:1f:cb:79:
                    c8:11:12:d1:2d:03:32:4d:61:b0:85:6f:f6:36:1d:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:ED:E5:FA:1D:61:B5:BC:FA:2D:44:BA:D7:0B:C8:61:A1:45:BB:11
            X509v3 Authority Key Identifier:
                keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.192.0/22
                  220.158.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:20:60:f8:6d:26:01:5b:ed:73:c8:d5:2e:bb:45:ca:39:97:
         fd:6c:05:15:1d:8c:c0:d4:e9:cf:e8:0a:fb:47:99:98:56:f3:
         23:75:37:32:80:d3:04:12:bf:81:75:1f:2f:a3:00:5d:17:c4:
         ca:b1:57:c1:80:c9:64:68:e3:dc:e4:eb:15:b4:7c:a6:29:4d:
         b9:1c:e5:61:72:20:00:68:a8:cb:93:b9:1f:98:ff:96:6c:ee:
         33:da:22:8a:6e:dc:ed:dd:bd:ab:de:7b:6d:00:e8:c6:a3:29:
         ac:02:5d:6f:ba:73:40:b9:33:04:e1:8c:6f:9e:8d:0f:ec:06:
         46:c3:35:86:a5:7c:50:88:e9:c6:d8:cd:13:22:d3:3d:f4:a3:
         27:80:e2:ef:e2:2d:c3:90:8b:49:fa:48:bd:f0:08:ef:11:53:
         22:3b:19:30:fa:29:18:73:db:39:3e:a6:2a:9b:fa:b8:d8:f1:
         5c:fd:b5:b4:0f:bb:4c:9d:c0:6a:47:07:23:1e:1e:8d:26:5c:
         0b:1a:9f:e0:58:17:a7:1d:6c:55:19:48:e6:3a:18:93:ff:dc:
         d6:47:ea:c4:55:5b:59:6c:d1:57:a4:12:a6:24:92:51:d7:e6:
         1d:11:87:e9:35:dd:54:ad:42:ac:1b:d0:ff:22:f1:f1:27:b2:
         a9:32:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:56:00 2026 by rpki-client