Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa
File:                     9DB6EBB4972E11E9B776A755C4F9AE02.roa (raw, json)
Hash identifier:          anud056i0pXYbRncgVJTkdjRCUcpxpVeDT3/UVMnGCM=
Subject key identifier:   5A:34:15:58:57:6D:E3:02:58:54:E9:36:2C:C1:DB:AC:A7:C0:BB:39
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3703
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:26 +0000
ROA not before:           Thu 30 Jul 2026 15:11:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55407
IP address blocks:        103.19.104.0/24 maxlen: 24
                          103.19.105.0/24 maxlen: 24
                          103.19.106.0/24 maxlen: 24
                          203.209.97.0/24 maxlen: 24
                          203.209.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14083 (0x3703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b699d-2284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:02:8e:4f:63:57:23:68:17:1e:5b:92:f1:
                    4d:b2:32:1b:37:b8:2f:66:d1:5e:04:43:49:f9:d9:
                    7f:de:7d:98:8c:df:a1:ab:02:ad:c6:26:52:82:16:
                    d3:6e:2e:97:cc:20:b5:84:3d:4d:32:50:c4:af:8a:
                    46:78:79:9a:1d:87:7d:c3:89:23:ef:cc:6e:05:8d:
                    24:39:c1:bb:2a:5a:75:de:24:e7:39:53:52:43:bf:
                    7a:d0:ba:63:78:e7:05:b3:6f:83:33:be:ae:8f:dc:
                    68:14:ad:6d:1e:86:95:49:cf:46:6e:c8:29:02:7c:
                    95:3f:51:40:7a:63:02:34:6f:28:bd:46:3c:89:53:
                    41:10:7a:f6:70:19:6c:aa:49:c5:25:17:a2:2f:06:
                    0e:4e:a0:ad:b8:9c:c4:7e:31:bc:b7:0b:ab:56:de:
                    ae:2b:ac:99:ac:b8:4f:7b:d3:da:7d:58:a8:32:36:
                    72:48:47:ed:fd:dc:ee:96:19:9c:9b:12:8f:4f:b1:
                    e5:d9:dc:a3:d0:e6:18:f2:86:26:5f:95:8d:49:ba:
                    d2:94:de:41:98:21:9d:96:5c:1c:85:30:b2:77:b2:
                    a5:50:24:9a:e1:cd:7f:b4:f5:cb:c7:8e:17:11:e5:
                    59:c6:d2:8e:38:59:83:35:4e:b3:72:ac:8f:c0:ff:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:34:15:58:57:6D:E3:02:58:54:E9:36:2C:C1:DB:AC:A7:C0:BB:39
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.104.0-103.19.106.255
                  203.209.97.0-203.209.98.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:d3:a2:01:ef:1d:c0:4c:3e:b2:8f:e2:62:0a:23:c4:f1:
         ba:aa:a4:ab:8c:a9:d4:62:58:e8:af:15:79:5a:ae:b8:a8:a5:
         09:3a:a5:bc:16:1c:94:55:f3:dd:7b:b8:f6:b8:06:d5:39:96:
         89:7a:2e:10:1d:2a:8c:bc:2f:e8:b1:33:2c:0a:64:72:8e:22:
         91:7a:ba:e2:00:79:f3:d1:18:09:06:18:28:6b:6c:29:e0:c5:
         db:7c:30:9d:98:0c:17:3e:5c:00:07:da:6c:3f:47:ad:b7:44:
         bd:ba:d6:cd:ef:51:77:de:8f:24:dd:21:8f:4c:8c:de:0e:fc:
         9c:83:44:26:02:e5:ea:27:8c:1a:f9:14:96:39:2e:8d:80:9b:
         f5:6f:c1:1e:c5:0a:43:3c:fe:85:42:5f:c7:d7:e6:56:38:de:
         8f:4d:18:4e:9b:15:53:29:bb:0c:c7:0f:b0:94:1a:8b:40:6c:
         b8:9f:a3:59:b3:2c:f3:ab:9c:d2:0c:40:15:2f:09:bd:e7:fe:
         5d:6c:04:76:de:80:e2:21:bb:da:e8:bd:83:4d:b5:d6:41:77:
         d4:6b:a7:09:0b:dc:18:bf:9a:e0:82:47:bb:f4:1c:0e:31:09:
         ff:49:86:a1:5f:a5:03:c6:7f:c8:98:a2:6a:65:95:a5:f2:ed:
         6e:4c:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:53:49 2026 by rpki-client