Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa
File:                     AFADDB38960011F18583530F5711F970.roa (raw, json)
Hash identifier:          VW3xSm0BgFMfQUKFEQTwDrUx4dmpNnzjaeetEP1dFwE=
Subject key identifier:   C7:8D:B8:87:0F:7A:09:DB:F2:D9:F6:0E:06:91:B8:B8:10:78:40:2A
Certificate issuer:       /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Certificate serial:       06
Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa
Signing time:             Wed 12 Aug 2026 03:48:32 +0000
ROA not before:           Wed 12 Aug 2026 03:48:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141382
IP address blocks:        103.157.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
                          rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
        Validity
            Not Before: Aug 12 03:48:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7bed10-be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:c6:9c:8a:4a:ec:2f:58:8d:ff:b1:68:9f:
                    b2:cb:99:6b:ac:cb:35:fd:32:f9:58:05:15:4f:05:
                    38:7a:9b:2d:db:c2:65:f9:81:36:20:ea:8c:80:b1:
                    98:98:93:f8:80:d0:6d:4a:06:c0:d0:15:4c:da:51:
                    66:cf:34:16:34:90:16:54:c0:b1:04:9d:8e:b5:c5:
                    ea:25:e6:fa:8e:c5:a2:e0:87:c7:fe:31:9e:5b:d0:
                    b0:52:47:35:54:c0:4e:68:c8:56:ee:8e:4b:3c:9b:
                    01:2f:30:56:13:9f:c5:bf:85:ed:2e:78:00:48:85:
                    a3:8a:d4:ad:77:29:44:23:fa:63:b4:93:72:6f:c0:
                    d6:e7:d3:71:03:19:6a:de:c4:d4:22:88:c9:48:52:
                    5f:63:b5:95:c2:8f:6c:f8:17:02:de:e1:7b:6c:ee:
                    d7:0d:08:fb:37:97:e4:5f:88:85:22:66:e2:b6:eb:
                    59:29:84:81:a5:26:0a:c4:74:42:99:f9:c3:ed:f8:
                    8d:ad:3d:d5:f8:40:32:3d:ae:13:1a:b4:c3:17:9b:
                    52:de:06:bf:e5:79:22:e4:e9:14:64:2a:c8:35:ec:
                    08:7c:54:0e:c5:d4:72:c0:75:4c:6c:83:3a:43:35:
                    b8:96:57:c5:cc:ec:05:1f:eb:1a:39:65:7e:58:55:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:B8:87:0F:7A:09:DB:F2:D9:F6:0E:06:91:B8:B8:10:78:40:2A
            X509v3 Authority Key Identifier:
                keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:f0:a0:92:9f:fd:7d:36:71:01:fe:62:78:44:9e:c0:b4:
         d2:d1:6f:87:aa:cb:5e:78:f8:4d:b8:3b:cc:d2:3f:16:21:b7:
         81:f5:36:96:2c:c6:e0:dc:1e:80:d8:45:77:aa:1f:2b:46:f0:
         91:bc:b4:cb:35:7a:08:8c:79:d6:5a:68:a3:70:5f:39:d5:ed:
         9b:47:8d:89:cd:86:04:39:c8:16:94:99:c2:d4:c6:d2:6a:d9:
         77:52:ac:cf:57:98:18:c4:3c:d2:73:e0:9a:37:28:4d:26:84:
         4e:a8:78:9b:1b:5c:87:e8:e6:8e:60:4f:e5:d8:49:2a:af:f4:
         4d:03:f2:9b:8c:13:69:2b:77:30:6a:d7:a4:87:49:17:59:69:
         b8:d7:8a:19:9f:89:06:11:2d:f8:af:1e:12:47:d5:1d:e2:e9:
         3c:3c:27:15:37:6f:f8:26:07:5d:2e:58:25:51:fd:f2:d7:31:
         18:eb:6f:67:a5:de:12:71:5b:f4:b8:17:f8:5b:47:ed:92:9e:
         35:cb:eb:4a:49:9a:6f:d1:8a:ce:b8:ed:a2:16:8b:1b:0b:a9:
         f0:9a:31:52:04:7f:80:7d:62:ab:74:43:3d:d6:9a:74:f7:be:
         06:48:31:97:e5:ec:7f:e7:b3:b1:13:9f:88:25:8e:27:5b:20:
         fd:00:d7:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:59 2026 by rpki-client