Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa
File:                     0328D1B21D3611F1B8D3A442193D8C67.roa (raw, json)
Hash identifier:          62AP+vth3IHL6j/HC8cmvLMr9p9kc5zTDVg9NLYNpxs=
Subject key identifier:   6F:7C:E5:AC:B9:A5:C8:E4:AE:BB:62:1E:58:07:DA:4B:8D:53:DE:F3
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0D2F
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa
Signing time:             Thu 02 Jul 2026 18:19:32 +0000
ROA not before:           Thu 02 Jul 2026 18:19:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151476
IP address blocks:        103.115.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 18:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Jul  2 18:19:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a46abb4-5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:54:48:e0:3f:06:e0:c8:38:3f:ea:fb:7f:
                    02:cb:de:9f:13:ac:d3:82:b6:79:24:1f:3d:b9:aa:
                    58:1c:4f:e5:5c:f7:b6:35:b1:96:6a:5d:ff:34:95:
                    4b:7d:db:97:3d:58:9e:26:e0:17:56:aa:ec:0c:6e:
                    7a:4f:c1:7f:a7:4c:5d:7d:17:8c:e0:94:84:2f:3c:
                    32:e4:af:e5:23:58:0c:fa:20:7f:5f:9c:a9:97:21:
                    28:e9:90:e7:8a:f7:15:46:b9:f4:9b:6d:70:6f:de:
                    e5:20:75:5e:75:e8:6a:15:1f:72:50:5d:71:3c:0f:
                    39:d9:98:d3:fb:32:ff:7e:68:a1:47:d0:d8:be:d0:
                    bb:54:08:4e:70:65:7b:2a:84:02:ad:6c:ff:2c:e8:
                    af:45:93:5b:6a:8e:fc:56:f0:ba:c3:4a:4a:2b:92:
                    83:be:20:70:35:d1:bd:01:03:91:62:92:db:78:68:
                    f4:1a:8f:ba:fd:b5:59:98:81:9c:b3:12:66:a6:33:
                    ec:c3:53:61:40:8c:00:ed:38:0f:da:ba:9f:03:5c:
                    d3:de:72:11:e3:c4:24:b9:07:4f:9a:7a:ea:b7:49:
                    60:09:a1:68:94:21:22:2d:7d:a9:e0:6f:05:91:c9:
                    7c:ee:f9:d3:45:d0:4f:97:d2:40:9b:16:16:d5:78:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:E5:AC:B9:A5:C8:E4:AE:BB:62:1E:58:07:DA:4B:8D:53:DE:F3
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:bb:0c:fd:5f:c1:95:7d:96:e3:e9:20:09:a0:3e:4c:66:
         5f:fd:13:6e:f5:74:d5:39:d2:61:c8:e2:66:c9:d8:1d:3c:db:
         f8:52:d4:49:81:34:64:ce:b1:d9:b7:d4:b8:fe:e9:f5:22:e3:
         6b:74:e3:41:cd:d4:22:60:80:fb:7b:3d:f4:df:2f:b2:64:5b:
         78:0a:2a:22:48:96:d6:f7:c0:df:68:b6:96:ad:4f:77:20:84:
         03:5a:f9:d1:38:1d:fb:2f:83:50:4a:22:3e:1e:e0:8d:51:c4:
         fe:98:9a:8c:f2:ad:fa:af:cb:28:54:3b:cf:ae:d3:9d:3c:6b:
         32:cd:90:e2:95:38:ee:f0:3a:4d:dc:81:f7:63:b0:70:72:c9:
         f7:78:c6:d6:a0:c5:9d:e4:52:75:c0:18:41:35:61:63:c5:d4:
         d5:14:65:d0:74:32:a5:66:7d:db:8c:60:8a:cb:c6:1f:06:13:
         da:19:ed:ac:15:06:b4:de:78:48:30:26:c1:fc:4f:ad:a1:4a:
         36:2d:06:67:9e:4b:c0:95:dc:3d:b1:d9:91:58:35:65:a4:b0:
         04:18:69:6c:4f:45:d0:6c:07:68:a3:fe:e2:bf:55:7d:b5:cf:
         a0:ad:ed:19:f4:9e:d6:c9:a2:ab:43:0e:01:9f:9c:78:1f:b1:
         f8:c5:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:28:25 2026 by rpki-client