Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa
File:                     7E4EFF5473E611F1BA32CE558DA30FBC.roa (raw, json)
Hash identifier:          iWTTS4IDR+HUhOdGPI78d/5YB8edbsgZvg0Sd4nkNyU=
Subject key identifier:   35:3E:D7:34:22:77:54:4D:F1:8D:F8:92:AD:BE:FE:25:48:66:07:71
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0CD9
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa
Signing time:             Mon 29 Jun 2026 18:15:22 +0000
ROA not before:           Mon 29 Jun 2026 18:15:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141342
IP address blocks:        103.11.61.0/24 maxlen: 24
                          103.11.62.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.143.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3289 (0xcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Jun 29 18:15:22 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a42b63a-aa0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:24:08:81:28:1d:78:67:8a:e0:68:e2:ae:
                    27:df:ad:8c:eb:2b:56:57:7e:85:47:e5:a9:58:dc:
                    31:bf:3f:16:3c:70:7a:9a:ea:e6:12:b9:33:16:9b:
                    ad:44:aa:f6:ea:04:a9:28:28:82:73:57:db:db:09:
                    33:2a:9d:b0:da:95:92:eb:08:33:29:5a:1c:dc:89:
                    8a:50:93:22:72:c2:34:57:b4:fd:63:0f:d3:5d:c4:
                    20:39:fc:12:f5:8b:b2:82:65:a3:5f:dc:80:66:a9:
                    56:be:61:60:14:75:f4:95:be:94:34:1b:63:69:76:
                    f7:be:66:e0:cd:68:46:9f:0d:72:be:f3:b1:77:7a:
                    1d:c3:36:3f:76:76:90:b6:56:22:a5:e0:98:e8:87:
                    7e:11:1a:d2:d9:7e:1b:6b:97:0f:a7:d1:6f:4d:bf:
                    27:ba:5b:59:06:e4:03:bb:19:0a:2b:4b:f4:38:8c:
                    bd:8a:d4:a4:55:a4:53:12:0c:d8:8c:82:b0:4b:30:
                    89:50:8c:5f:73:53:eb:94:6f:9b:c1:30:70:dc:33:
                    b0:0c:49:bc:41:83:f6:9a:fb:87:f9:bf:ec:a8:33:
                    8f:27:7e:52:2c:73:90:4c:40:b9:b2:a2:93:72:6c:
                    f7:8e:32:04:30:30:f9:18:61:b7:e6:56:49:1b:96:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3E:D7:34:22:77:54:4D:F1:8D:F8:92:AD:BE:FE:25:48:66:07:71
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7E4EFF5473E611F1BA32CE558DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.61.0-103.11.63.255
                  180.178.142.0/23
                  180.178.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:d0:22:12:4a:a0:cb:86:41:82:51:32:d2:ee:8b:6d:58:
         fe:27:a5:a4:31:f1:98:d9:be:f4:31:8a:ef:9a:94:d4:84:70:
         82:1f:38:0b:db:85:cd:8c:a3:ce:78:90:7a:0a:94:5a:61:db:
         b3:b4:71:c7:52:40:00:1b:a2:3e:fb:7f:cd:7f:c4:c2:d8:79:
         a2:b8:b0:67:8b:4a:56:b9:2d:68:57:25:4b:0a:52:59:e7:9f:
         c8:4a:20:e2:d7:4a:76:49:02:f0:24:47:2a:3e:f4:77:6e:ea:
         98:53:24:e1:ec:72:71:9e:a3:fa:8f:8e:6c:b0:1a:0d:34:e8:
         99:e4:e5:7b:5f:28:35:59:b2:b9:1e:06:de:30:b3:3a:c2:29:
         a1:3f:9a:ba:a4:ef:67:75:ab:bd:86:dd:d3:e6:88:4f:50:39:
         1a:9e:79:c9:c3:89:be:34:73:41:e6:29:42:07:c1:fd:09:b5:
         4c:11:4b:bf:0f:c0:07:3e:4e:9b:a0:ff:92:cb:fd:51:7f:fe:
         72:8a:44:90:f5:ef:03:50:91:e4:44:f2:74:4a:b4:0b:ca:5b:
         ec:8d:b0:0a:2c:23:70:82:e8:dd:4b:7b:45:af:b0:e2:f5:8a:
         3a:cb:cf:cd:e3:11:ce:01:d7:8e:5a:25:e0:00:2d:77:18:a5:
         4f:b8:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:36 2026 by rpki-client