Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/D20FE5749AEA11F1B10345505311F970.roa
File:                     D20FE5749AEA11F1B10345505311F970.roa (raw, json)
Hash identifier:          lQCD85xNKgXTnJFNaTshkIAJABxn7Dc+GupRo6PJLwk=
Subject key identifier:   2E:D6:F8:D0:52:6E:0A:C5:B7:16:90:44:96:E1:9F:63:8B:3A:B1:C2
Certificate issuer:       /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial:       05F2
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/D20FE5749AEA11F1B10345505311F970.roa
Signing time:             Tue 18 Aug 2026 09:54:36 +0000
ROA not before:           Tue 18 Aug 2026 09:54:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140594
IP address blocks:        103.174.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
                          rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
        Validity
            Not Before: Aug 18 09:54:36 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a842bdc-c5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:b0:a8:74:ef:57:c9:c9:d5:c9:c8:2a:f1:
                    76:28:e0:d7:2d:bc:a8:fd:ca:0a:71:2d:a7:d5:65:
                    8b:43:36:38:36:cb:52:5e:ee:9c:b4:ed:a5:99:a8:
                    bb:b3:23:27:97:35:59:af:8e:3f:10:38:fd:82:ab:
                    94:0a:9c:49:74:05:0a:c2:51:2c:b2:12:dc:d9:9d:
                    24:a3:f9:cc:25:ba:38:29:06:80:70:8a:ab:b2:93:
                    36:96:b1:b8:76:1a:5b:41:06:df:6d:40:eb:d3:0e:
                    40:a6:bb:4c:18:3e:5e:4f:6a:2b:9b:16:a3:ed:ad:
                    b8:a1:07:36:e8:f7:40:d9:ac:63:81:d0:14:9e:08:
                    32:a8:ee:20:3a:08:fc:b8:c2:2a:5b:df:ed:ae:cf:
                    d2:ad:a8:d4:88:0e:61:ee:7d:92:95:fd:b0:0f:84:
                    ba:7b:b1:9a:d8:6b:c6:d4:03:67:85:ba:81:76:30:
                    31:38:c9:1a:6e:39:a3:d2:dd:1c:2c:ba:dd:f1:10:
                    c3:94:fc:7b:96:f5:65:7f:cc:ec:f8:f5:97:ec:9d:
                    13:44:df:af:19:a8:ca:1a:53:7b:c9:45:f9:69:cf:
                    d1:f4:f9:ad:6c:f3:1d:b3:3c:87:fd:49:b6:65:2c:
                    cb:6a:88:29:10:6c:09:40:57:3e:28:04:07:98:93:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:F8:D0:52:6E:0A:C5:B7:16:90:44:96:E1:9F:63:8B:3A:B1:C2
            X509v3 Authority Key Identifier:
                keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/D20FE5749AEA11F1B10345505311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:f6:14:10:a7:94:84:bd:42:8b:4a:10:2b:e1:8a:2d:87:
         38:0a:9e:2b:7b:27:4d:dd:98:9a:36:4e:ea:69:25:df:25:1a:
         0d:bf:b5:72:24:f1:09:c2:c9:46:ed:64:61:a8:a0:79:59:e6:
         f8:f6:3b:ca:9f:e2:4d:06:ec:1f:9e:b7:db:f4:92:35:61:fa:
         42:c4:90:dc:b5:6c:d9:a1:8f:f8:84:cb:f7:3c:46:4c:c7:4b:
         12:43:d9:a2:c7:0a:cb:d0:38:56:80:68:e1:5c:9e:17:77:2d:
         52:92:d0:6c:51:cf:d3:e5:59:97:cb:af:14:ff:76:be:88:99:
         16:89:33:7d:7e:e7:39:3e:71:05:07:e8:39:62:06:6a:bf:02:
         0a:c6:5e:14:0e:50:4e:de:df:ed:50:91:7f:4d:9d:90:56:60:
         3a:ae:5e:ef:08:7d:04:17:7e:41:ff:c9:33:a1:c7:e5:50:06:
         2f:42:a3:41:19:b6:de:ee:35:f7:d8:68:5d:ee:a2:39:1c:de:
         16:2f:62:69:85:d2:52:2b:41:3c:0c:4b:4d:3c:77:a8:61:b9:
         85:73:b7:ac:7a:4d:dc:fc:a8:bf:a3:2b:c6:e1:6b:9f:72:67:
         94:4d:2b:7a:99:0e:6c:a4:74:52:59:1e:af:5e:93:da:57:33:
         87:11:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:22 2026 by rpki-client