Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/6751E26C415511ECA2FD715CC4F9AE02.roa
File:                     6751E26C415511ECA2FD715CC4F9AE02.roa (raw, json)
Hash identifier:          egPFdIJgqpiM36iAmA3lcbcAAODxGK0BgzRyWyd0iUM=
Subject key identifier:   7B:26:81:1A:36:7E:64:7C:4C:5D:45:E6:B3:3C:8B:46:77:87:A1:9E
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       0D0D
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/6751E26C415511ECA2FD715CC4F9AE02.roa
Signing time:             Wed 06 May 2026 18:22:09 +0000
ROA not before:           Wed 06 May 2026 18:22:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137553
IP address blocks:        103.113.16.0/22 maxlen: 22
                          103.113.16.0/23 maxlen: 23
                          103.113.16.0/24 maxlen: 24
                          103.113.17.0/24 maxlen: 24
                          103.113.18.0/23 maxlen: 23
                          103.113.18.0/24 maxlen: 24
                          103.113.19.0/24 maxlen: 24
                          2402:b5c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl
                          rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3341 (0xd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: May  6 18:22:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fb86d1-28c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:18:98:23:a8:dd:8e:58:8b:90:cc:af:b8:
                    1f:33:2c:74:8b:c5:c6:7b:2f:10:c4:6e:b5:de:1b:
                    fa:d5:47:2f:42:14:60:96:db:cc:c4:a0:a5:fa:2c:
                    a9:14:50:0d:4a:33:b2:5c:e2:1f:b0:40:8a:ab:58:
                    2d:13:cd:cd:12:4f:82:e2:52:e6:fa:a1:56:be:30:
                    7c:8f:b9:f7:90:d3:ed:57:d9:28:98:f3:89:9c:37:
                    37:a5:83:92:54:07:bb:42:68:7f:df:d0:76:4f:a7:
                    a1:02:9b:a3:90:a1:1a:6a:98:82:0b:cf:5d:70:bf:
                    a2:2f:b3:19:ee:20:3b:31:f2:47:62:e0:ef:14:15:
                    78:c3:b5:c4:fa:22:1a:b8:7e:a5:69:6b:32:30:1f:
                    cd:42:99:42:bb:b5:d7:17:1b:4b:a4:b9:37:df:93:
                    ff:6c:0c:28:9e:8a:d0:f3:d3:f0:ea:b0:db:c0:fb:
                    de:1b:20:9b:56:41:f5:f5:32:18:97:d4:28:31:cc:
                    15:03:31:f1:4e:10:ab:1e:80:bf:fc:06:26:e0:35:
                    72:01:71:7c:e5:70:48:70:36:e2:0d:20:06:35:96:
                    da:2c:e2:fd:94:64:a7:11:58:34:32:e1:15:de:89:
                    63:89:b8:e6:f2:48:fd:85:cf:61:56:67:e4:70:66:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:81:1A:36:7E:64:7C:4C:5D:45:E6:B3:3C:8B:46:77:87:A1:9E
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/6751E26C415511ECA2FD715CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.16.0/22
                IPv6:
                  2402:b5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:84:62:32:a1:46:55:e5:d3:a0:96:ce:7a:a5:64:38:00:fb:
         17:f4:61:0e:08:57:2d:b0:f5:ed:a7:b5:d4:ec:26:7a:29:d5:
         43:53:2c:38:bc:c4:25:80:82:83:03:5a:cb:78:94:69:50:b3:
         03:8f:e6:78:84:1d:ba:7b:68:83:4e:02:7d:78:2c:24:15:81:
         38:42:5a:ac:7f:c8:77:22:12:48:31:93:cf:13:10:7d:25:03:
         d9:19:54:10:b8:61:7d:88:2e:35:98:c3:7a:43:61:48:08:63:
         27:fc:d0:2b:85:44:c2:0d:ec:b6:85:6e:49:69:01:e5:90:6d:
         8d:c2:58:21:f8:76:71:fb:be:9d:a9:bf:49:a4:75:b5:e9:a8:
         39:ef:4d:69:5f:23:ad:c2:03:de:ae:3b:1c:6d:28:2c:68:45:
         88:f6:ce:f0:72:8f:9e:88:16:9a:fb:23:c5:5a:da:e6:b3:08:
         32:4c:d3:56:7c:50:d1:00:a5:5d:7e:5f:4e:8b:f5:05:66:45:
         a6:a5:ba:f2:56:50:1c:0c:40:35:48:25:4b:98:8b:5b:f1:ca:
         a7:f2:d8:00:d3:24:4d:b4:e0:bf:67:b1:3d:22:8c:0a:ee:b4:
         ef:86:6a:00:f6:77:1b:0e:6b:76:d9:95:f3:e1:ff:cf:61:50:
         04:ff:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:57:41 2026 by rpki-client