Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
File:                     FD678F40214E11F095B05918C4F9AE02.roa (raw, json)
Hash identifier:          Vm3x4XjI71ZGXzqh/k1zDRwiOP341qe7iTCno94apNg=
Subject key identifier:   42:95:52:47:DB:7B:64:16:90:30:1B:6E:C4:0D:70:A6:03:9A:9C:85
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       0268
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:35:06 +0000
ROA not before:           Fri 05 Jun 2026 02:35:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153563
IP address blocks:        103.140.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Jun  5 02:35:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235da-5369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:02:69:3a:7f:91:17:40:83:c5:3e:4d:63:
                    6e:80:66:63:a3:97:3a:f8:38:4f:0d:80:fc:5b:09:
                    43:8c:dd:ce:e0:85:fc:fe:dc:2d:ca:4c:80:67:aa:
                    8a:2e:84:8e:46:c3:00:bc:00:1f:63:0a:e2:d2:f9:
                    ec:66:03:42:d1:d8:80:f5:c6:ee:cb:65:9b:db:e6:
                    91:33:26:ad:92:8f:61:e8:90:f8:4c:56:eb:5f:2c:
                    55:98:77:2e:96:6a:cb:e2:6c:77:3d:64:ad:16:7d:
                    a6:a4:9e:13:8f:5f:c6:67:74:92:38:63:b4:c3:a4:
                    2c:d0:65:5d:e6:cb:37:b2:b1:71:e1:af:cf:65:af:
                    4e:44:9e:ea:48:b6:eb:7f:cd:9e:0d:b5:3d:8f:10:
                    c3:23:56:fd:10:a1:31:d7:89:c7:63:aa:bb:28:73:
                    38:a1:68:e6:b8:d3:7b:b2:3d:57:af:93:f0:35:b7:
                    63:b7:b2:ef:db:b6:e6:f5:71:8f:be:c6:8a:ae:ae:
                    3a:32:57:fd:9c:89:82:c1:05:99:d2:7f:f4:08:b0:
                    81:75:91:e1:41:7e:14:a3:10:3d:f5:89:10:81:70:
                    5a:ac:d4:36:88:03:ae:b2:3b:e9:a9:3d:e2:79:cd:
                    9c:4b:3d:69:e8:ca:15:bd:82:6c:09:b5:8e:43:72:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:52:47:DB:7B:64:16:90:30:1B:6E:C4:0D:70:A6:03:9A:9C:85
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:d6:cd:5c:d0:d0:25:cd:8c:18:55:87:46:bc:4c:79:fc:
         c0:59:e0:3d:63:12:c7:8a:e2:a7:bf:4c:24:ba:e7:c5:5f:79:
         6a:22:5f:d7:e3:ce:df:36:73:e7:22:03:98:e7:06:01:6d:a8:
         fe:2f:16:0e:23:23:08:30:de:cf:91:2d:41:95:cb:b5:d2:6d:
         60:a2:4b:77:d6:4a:93:b0:66:c7:46:38:e8:e1:7b:9c:ec:ac:
         1e:b4:e3:4c:02:06:d1:7b:20:27:98:91:c3:93:f0:2d:2f:74:
         86:65:b8:90:d6:83:42:f3:9c:0e:b7:b0:98:a2:c2:b4:f0:fc:
         69:d2:5b:48:f2:24:a6:36:d7:65:51:9a:16:7b:18:5d:b7:a9:
         16:bb:6b:b9:8f:e5:41:62:a4:da:d0:28:59:3b:bc:6d:47:22:
         f6:cf:23:7c:d9:25:fb:69:41:2a:63:37:f0:6a:91:d6:a4:f0:
         9c:1c:67:9f:0b:5a:6e:db:66:d7:e4:67:60:77:6f:e8:49:2b:
         14:97:35:e5:9b:82:7b:46:39:0e:71:48:cb:7f:e2:ce:cf:0e:
         24:5d:76:31:7c:e7:b4:5a:e0:41:53:65:0e:b3:02:3f:b9:ce:
         11:50:4d:0f:08:6d:64:b8:a5:cc:3f:89:35:a8:be:9c:98:8b:
         cf:f3:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:44 2026 by rpki-client