Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa
File:                     9E1DAA4A7D6B11F1802936357FA30FBC.roa (raw, json)
Hash identifier:          Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=
Subject key identifier:   C7:E1:88:10:68:0C:C8:6E:68:31:B6:B6:61:56:E6:E6:22:CC:57:BD
Certificate issuer:       /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial:       02A3
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa
Signing time:             Sat 11 Jul 2026 22:10:02 +0000
ROA not before:           Sat 11 Jul 2026 22:10:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141711
IP address blocks:        103.176.246.0/24 maxlen: 24
                          103.176.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
        Validity
            Not Before: Jul 11 22:10:02 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a52bf39-6b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:0d:12:2d:38:da:0f:27:35:60:a3:8a:3b:
                    a8:14:b1:cf:1c:59:1a:19:a3:14:3e:a7:3c:0b:c0:
                    73:83:02:7f:c9:d9:5c:b1:92:1e:6d:9b:12:a7:9a:
                    79:40:a2:8f:0c:86:4a:e1:53:db:f8:47:af:78:b6:
                    63:4c:76:6c:41:53:eb:f5:70:94:c8:08:20:15:3e:
                    16:74:48:ac:e2:04:4f:73:c4:f9:0e:08:22:9b:36:
                    a9:bc:09:f9:b3:96:41:3d:44:c1:16:99:fe:39:fe:
                    20:e3:90:88:0c:6a:71:a0:55:84:cf:3c:50:2c:35:
                    26:aa:63:37:5c:16:13:02:17:fd:fa:4a:2e:fd:62:
                    9d:85:e7:c1:8a:3d:fd:56:96:4b:94:46:5f:f9:1e:
                    04:8e:42:f3:79:11:fc:08:72:a6:b3:7e:2d:1a:2a:
                    97:8e:c9:8f:bd:8a:7f:e5:0b:33:28:c4:64:02:a7:
                    0f:9d:17:b3:41:8c:8c:2d:d7:50:09:7e:9e:50:33:
                    dd:81:b6:0e:47:01:a8:68:85:e9:7e:22:82:5b:ab:
                    61:ee:3a:30:06:d1:dd:04:b1:00:1f:96:9e:d7:76:
                    a5:24:41:be:16:83:6b:c8:1c:5a:84:1f:5f:1f:4d:
                    5a:52:a4:a7:68:ad:4e:f9:71:47:fd:d5:b3:6b:15:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:88:10:68:0C:C8:6E:68:31:B6:B6:61:56:E6:E6:22:CC:57:BD
            X509v3 Authority Key Identifier:
                keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:54:c2:a8:4d:8a:7e:97:05:00:0b:03:52:10:fd:2b:72:ba:
         fe:32:09:42:0e:c8:fb:2a:51:15:15:41:8f:29:15:aa:40:45:
         cf:a3:68:79:e9:cf:bc:98:83:42:c7:21:d2:8a:bc:0f:8c:f4:
         71:76:21:83:84:02:b2:75:1c:16:75:94:1b:56:25:5c:cd:58:
         f9:0d:92:28:52:22:4f:8b:4a:4d:dc:59:c1:0b:2f:e8:b5:e7:
         21:5e:5d:f0:4c:78:f4:a7:06:00:b8:e2:de:62:d7:8e:39:23:
         c3:1a:8e:82:41:4f:25:11:4a:7c:08:03:d8:9c:a5:a1:e1:ce:
         61:72:a5:cd:de:c4:37:1e:14:47:1d:2c:d4:5b:8c:21:eb:5b:
         6c:e3:73:d1:1c:c5:c9:29:98:5c:40:5e:f7:37:00:20:c9:1d:
         30:7d:ef:c9:d6:d8:91:5e:56:1a:43:cc:af:0a:b5:f4:38:27:
         1c:f4:8a:60:b6:ce:8d:27:51:8d:21:7c:04:39:67:a3:59:e1:
         51:98:5d:79:5d:fb:a0:70:32:34:96:95:b2:e6:05:c6:93:96:
         ed:87:29:da:ad:ba:6a:de:75:07:1f:21:cc:f9:eb:31:c0:a7:
         78:d6:fd:f9:ca:b2:6b:c5:9c:5b:8a:9f:fe:c7:19:5d:74:9d:
         47:4d:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:28 2026 by rpki-client