Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa
File:                     28D1785891E311EBA138E330C4F9AE02.roa (raw, json)
Hash identifier:          P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=
Subject key identifier:   79:BE:30:77:32:AF:75:58:FC:55:14:2B:EF:7B:B5:AF:4A:50:9D:95
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       06FA
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa
Signing time:             Mon 18 May 2026 22:28:00 +0000
ROA not before:           Mon 18 May 2026 22:28:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142002
IP address blocks:        103.164.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: May 18 22:28:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0b9270-45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:35:d9:a5:cf:e8:98:1a:4c:dc:ad:1c:80:
                    45:79:7b:d4:8c:10:da:7a:a4:0d:ca:e4:fb:39:ff:
                    33:ae:b9:c9:03:38:be:19:41:67:16:ca:28:27:03:
                    b7:6d:5c:5c:54:e4:9f:59:d2:ba:00:76:50:84:74:
                    5c:3d:f4:af:f3:75:7d:72:6c:2c:60:37:2d:1c:3b:
                    a1:2d:8f:11:ab:59:9f:d5:c2:87:33:d2:64:a0:03:
                    ba:29:1f:29:5c:c4:c0:b5:20:42:d6:48:2e:c7:b2:
                    68:f8:3f:35:6b:f4:11:19:98:5b:5e:76:7e:33:a3:
                    4c:1f:30:b6:a9:91:e0:1f:63:4c:f6:5d:0e:58:55:
                    4c:69:47:9a:67:27:6e:9e:d3:d5:3a:7a:c9:fa:26:
                    f5:5f:11:d7:49:d1:33:ae:4b:67:c6:24:aa:13:10:
                    89:b4:07:79:bd:8e:8d:4f:e8:0b:3d:55:c1:c3:34:
                    3b:a4:d5:2b:c2:72:8a:4f:d8:a8:17:79:70:e3:89:
                    6b:64:8b:f7:ea:59:ee:5a:e6:84:6d:59:7f:90:18:
                    b1:19:13:a9:61:72:69:d5:e3:fa:dd:0f:89:9c:bf:
                    8c:1d:8f:1e:a9:08:e3:18:f2:7a:32:11:43:f1:d7:
                    0c:2c:d0:7f:e4:20:2b:26:a0:8c:11:df:6d:63:1d:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:30:77:32:AF:75:58:FC:55:14:2B:EF:7B:B5:AF:4A:50:9D:95
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:78:17:04:52:e1:01:de:08:e0:ff:4a:4c:02:59:7b:26:
         a3:4d:5f:e2:9b:ba:93:8e:09:04:8b:f9:36:67:1d:a3:13:0c:
         2d:f9:f1:4e:eb:bb:3f:26:6d:ec:be:dc:8e:bb:30:4c:ee:5f:
         16:1e:cc:50:32:d3:b0:0b:2e:ff:7f:d4:6f:36:89:91:aa:d0:
         04:94:c3:de:59:b2:d0:b3:8c:aa:85:01:9b:b8:ff:55:8c:39:
         ad:3a:0c:87:49:20:2e:ff:f1:ed:cc:8c:24:c8:7c:17:1b:59:
         38:57:eb:dc:9f:ef:4d:39:92:81:4d:19:77:c8:20:e1:ed:1c:
         63:d5:64:a6:0b:98:d1:43:06:73:59:13:35:9c:c5:18:c2:ab:
         0a:9d:0b:7a:72:15:86:3e:fb:3c:94:cf:c4:97:40:a1:5b:bc:
         e3:89:1b:69:45:1f:19:54:cc:f7:23:27:7f:ec:d4:7f:49:b2:
         f7:ea:c7:81:69:3d:33:50:5c:d1:f6:1a:81:ca:4e:6b:77:69:
         44:42:6e:30:e5:b3:65:9e:ec:d1:2b:39:6e:ff:16:65:df:59:
         07:81:c5:8a:08:3d:b1:00:1d:46:71:56:32:0a:14:4e:c5:5c:
         ce:a9:b2:a7:d2:af:44:08:0b:d3:54:84:90:d2:8c:1a:8a:17:
         b4:83:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client