Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
File:                     A91AF6A8CE7811EF89FA3944C4F9AE02.roa (raw, json)
Hash identifier:          fNeBh4F/Z5Lr0cdIogNFqAUQL3+lXFo8GVNnYQF5cVg=
Subject key identifier:   A0:54:4F:54:6B:E3:96:BD:91:22:20:20:6F:53:8B:07:0A:95:D3:7F
Certificate issuer:       /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial:       029E
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 19:04:06 +0000
ROA not before:           Sat 11 Jul 2026 19:04:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149023
IP address blocks:        103.176.246.0/24 maxlen: 24
                          103.176.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
        Validity
            Not Before: Jul 11 19:04:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a5293a6-c2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:8a:14:a4:70:47:52:27:20:06:03:4c:64:
                    6d:3f:cc:9c:13:cf:2b:bd:95:fb:69:ed:51:c1:a7:
                    9e:e4:6e:64:8f:0f:80:39:ef:f1:86:71:c1:5d:f2:
                    d5:ff:6f:76:1a:a8:cf:1d:72:46:21:d9:eb:68:2a:
                    43:c1:d5:d4:89:60:77:bf:7a:8a:4c:16:1e:70:7b:
                    59:79:91:6f:f6:ac:ba:84:43:9c:a5:5d:40:d9:58:
                    04:e1:4f:fa:94:ed:33:5d:01:77:ac:1c:ca:92:dc:
                    d4:b7:a5:f6:68:a3:2a:0b:bd:77:b9:fa:31:1f:e4:
                    1d:6e:44:16:75:58:9a:0e:96:3e:48:21:87:b3:12:
                    56:65:ef:4c:f8:4b:d8:37:75:fd:70:75:ae:db:89:
                    d7:20:8a:58:97:83:f5:a6:e8:22:e2:f2:0d:bb:f8:
                    4a:bb:90:4f:d1:e3:9a:3f:6f:80:97:64:60:52:58:
                    f5:89:c6:e1:6a:b2:53:e0:66:f8:e0:a7:73:ae:c8:
                    61:03:9d:32:f8:c3:5a:7f:2b:6a:eb:03:73:0d:f6:
                    f0:10:d4:77:97:c6:54:5c:45:c6:4a:e4:33:89:02:
                    9a:3e:cb:65:6b:8e:12:32:0a:ba:9e:c0:04:6d:75:
                    52:de:4a:5e:23:ef:75:7c:54:bc:2e:3d:b4:84:92:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:4F:54:6B:E3:96:BD:91:22:20:20:6F:53:8B:07:0A:95:D3:7F
            X509v3 Authority Key Identifier:
                keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:b9:04:1d:6a:10:d3:a5:3d:09:79:09:25:1c:09:9b:2e:
         15:1b:c6:0d:61:06:33:3a:7f:ed:d9:11:d9:7a:85:04:f9:c5:
         f6:3c:da:e7:16:45:5d:0e:77:b9:d7:9d:bc:d8:20:c5:31:f1:
         24:7a:bd:ad:40:7e:dd:43:e6:5a:ad:4d:07:63:5d:12:8a:15:
         5f:3a:d4:4d:c0:87:99:ee:ce:7b:d7:3c:b8:6c:63:d9:27:a0:
         eb:00:e4:bc:af:00:6f:03:a8:6c:3f:81:d6:25:15:2b:a1:17:
         77:99:44:29:6e:91:9e:96:ca:84:ec:81:39:c7:1c:ca:8c:6a:
         70:e9:8b:f0:83:c5:fb:45:62:a6:e0:f2:3b:17:d6:c5:9e:ff:
         e6:d0:74:df:ed:e0:57:48:cb:7a:50:29:82:4a:4c:dc:6e:a7:
         5f:8e:48:fb:0c:1f:ee:61:6a:35:e0:76:bd:86:b7:fc:24:67:
         4c:c0:8b:77:e4:fd:21:36:13:ec:b8:51:b3:c6:68:be:54:f4:
         2b:6e:dc:4d:77:5e:5e:67:95:aa:ec:aa:b9:61:dc:c8:5b:8a:
         70:b4:44:07:08:36:59:e0:e7:10:1c:e3:c9:39:5d:40:65:b0:
         f0:d8:8d:30:05:61:37:b1:21:bd:9e:ac:2f:97:1a:d5:a2:08:
         2c:4e:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:46 2026 by rpki-client