Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa
File:                     E146B994B51F11EA9146DD58C4F9AE02.roa (raw, json)
Hash identifier:          GufOAmUmbBgvjXc0J89UeBy8dF93N+oEnJbdHPQ6yc0=
Subject key identifier:   4A:83:FD:D2:39:3F:B7:38:DD:B1:84:89:4C:91:88:F8:E0:CB:B9:6E
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09BA
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa
Signing time:             Sat 08 Aug 2026 20:40:09 +0000
ROA not before:           Sat 08 Aug 2026 20:40:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140843
IP address blocks:        103.152.102.0/23 maxlen: 23
                          103.152.102.0/24 maxlen: 24
                          103.152.103.0/24 maxlen: 24
                          2001:df4:980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Aug  8 20:40:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a779429-ba07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:bd:5e:42:7f:fb:30:a5:6f:4f:20:17:dc:
                    a1:28:5b:23:22:9d:f2:ec:cb:21:0b:0d:b7:d4:8d:
                    03:6b:93:b7:41:95:9f:66:41:46:05:5a:38:92:c8:
                    e2:9f:e7:a4:2a:8b:be:69:19:60:7a:24:b4:49:c8:
                    47:a5:15:9c:5f:01:fd:47:31:d4:e6:d8:c5:46:24:
                    24:40:b3:7b:e1:90:e5:33:1c:19:0d:d6:0c:fc:34:
                    71:dc:00:c4:74:0b:40:0e:70:12:79:d1:1f:0e:2e:
                    c4:d0:f5:14:f8:85:02:7b:a0:d9:31:11:9e:33:89:
                    b0:6a:bc:59:34:6d:b3:f1:e8:60:91:3d:d5:c6:72:
                    47:4e:7f:6e:96:04:36:4f:5e:98:a4:28:19:54:ed:
                    c8:13:8c:c7:f0:7c:46:d5:6c:56:7b:79:67:32:ac:
                    47:31:f6:96:e5:e3:70:b2:04:ab:6e:8b:a0:a3:d3:
                    0f:93:c9:60:0e:4f:fe:dc:1b:5d:02:a5:a9:ba:29:
                    1f:4e:54:fd:4c:08:d6:04:3d:e5:58:d7:aa:f0:c7:
                    0b:5b:66:6d:60:73:a9:00:77:7d:da:95:6d:ab:e3:
                    57:9a:5f:8d:21:7e:2b:81:eb:7f:13:2a:b7:6b:c0:
                    ea:9d:e9:ed:13:0a:64:0e:d2:7a:c9:ba:8a:88:87:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:FD:D2:39:3F:B7:38:DD:B1:84:89:4C:91:88:F8:E0:CB:B9:6E
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.102.0/23
                IPv6:
                  2001:df4:980::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:f6:73:3e:59:e4:60:19:9b:fd:44:33:ac:5f:a9:66:ea:
         37:03:54:8b:da:16:21:36:bf:cb:88:19:3a:ef:40:fa:84:9a:
         3a:b0:5b:01:4e:75:b0:05:0d:96:30:78:38:d8:2e:42:76:c3:
         4f:32:0f:0b:30:67:cc:fa:96:a8:4a:81:2e:e7:f3:10:31:9c:
         94:30:1b:34:0b:ae:23:cf:52:05:42:ef:8b:05:e3:83:88:ad:
         49:78:28:a2:a4:68:e2:f4:09:86:8f:c0:7b:aa:7e:3d:e1:5b:
         50:c5:71:04:34:26:48:f6:cd:f0:6a:ef:de:72:35:88:0c:eb:
         0f:0b:39:5e:d1:25:6f:df:b2:4a:82:b1:9b:a4:8c:37:8c:8a:
         7d:e4:84:55:d7:e1:96:49:53:1e:7f:22:25:09:fa:a0:cc:b1:
         a2:fe:ac:24:e8:81:42:87:b4:6f:e2:74:ee:91:b0:8c:ab:d0:
         21:ae:7f:72:0a:0d:3d:b3:f0:c4:a7:a9:57:bd:7d:ae:19:6d:
         c3:e4:40:12:81:26:63:d1:f9:08:68:c2:74:81:58:6f:46:4f:
         2a:25:e1:c0:b3:2b:59:0e:ec:e3:ea:98:7a:27:24:eb:f5:70:
         a4:e6:85:5d:ad:f3:08:83:19:eb:8b:e9:23:92:a8:8f:47:89:
         c5:48:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:50:57 2026 by rpki-client