Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa
File:                     D7F68AC88BAF11F18DC99137ACEE528E.roa (raw, json)
Hash identifier:          6xRVo6naiADGyUh5hdnY9XCvlMgfuKg8NEjgI902K9s=
Subject key identifier:   BE:DA:C9:E5:8D:D8:5F:EF:D7:1E:62:58:89:CA:82:BA:43:5F:60:A3
Certificate issuer:       /CN=A91923E1/serialNumber=A2B761005784304F974A6E8D586A405327089A5D
Certificate serial:       02
Authority key identifier: A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa
Signing time:             Thu 30 Jul 2026 00:44:38 +0000
ROA not before:           Thu 30 Jul 2026 00:44:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141884
IP address blocks:        103.163.252.0/23 maxlen: 23
                          103.163.252.0/24 maxlen: 24
                          103.163.253.0/24 maxlen: 24
                          2400:7460::/32 maxlen: 32
                          2400:7460:100::/40 maxlen: 40
                          2400:7460:200::/40 maxlen: 40
                          2400:7460:300::/40 maxlen: 40
                          2400:7460:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=A2B761005784304F974A6E8D586A405327089A5D
        Validity
            Not Before: Jul 30 00:44:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6a9e76-96e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:2e:17:e2:3e:27:08:2c:db:12:c8:8b:6d:
                    50:3a:a2:65:88:ef:f2:af:31:7d:54:60:8e:a1:36:
                    8b:ac:3f:f5:db:31:76:eb:57:94:84:f0:37:17:38:
                    cd:48:7d:26:fc:4f:9f:59:94:f2:4c:dd:cb:8d:9d:
                    fc:5b:19:f9:bf:cc:a5:7a:b8:dd:e6:6a:95:5e:b3:
                    e7:fa:42:af:f7:a8:a0:59:95:bf:e4:e8:2c:c3:fc:
                    5f:4e:0f:b6:21:2a:22:87:3c:5e:87:c8:f5:b8:57:
                    d5:37:4c:b7:94:a8:67:13:b7:a5:ca:11:93:c3:bf:
                    e3:5e:7a:6f:f2:be:9c:3c:6b:f4:8f:31:40:ea:84:
                    27:6c:af:8f:8f:1c:dd:27:e9:2b:58:1f:3b:a5:da:
                    45:1f:8f:83:e9:63:48:11:f5:11:bd:53:0a:79:9e:
                    83:e1:59:66:22:50:de:d9:6c:7e:a2:e5:8a:52:17:
                    68:89:94:9d:ec:93:f5:90:d5:13:40:68:57:af:cd:
                    71:e8:8c:be:01:e9:6e:83:62:e9:17:73:8b:92:68:
                    d8:7d:60:a4:74:be:88:03:6e:22:31:f5:24:b3:03:
                    6c:90:27:aa:90:65:9b:3f:4f:57:63:90:20:f7:24:
                    70:33:2e:4f:61:98:e6:66:ec:5b:d1:63:5b:9a:e9:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:C9:E5:8D:D8:5F:EF:D7:1E:62:58:89:CA:82:BA:43:5F:60:A3
            X509v3 Authority Key Identifier:
                keyid:A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.252.0/23
                IPv6:
                  2400:7460::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:ba:3b:32:e9:ab:18:4a:b8:45:a0:e4:a6:c7:c2:07:fd:
         49:f7:1e:eb:55:df:7c:f6:d5:74:5c:8b:69:b5:06:79:04:f7:
         ab:a3:11:3e:23:c6:f4:16:4f:7d:a9:0a:2a:4d:1f:a1:4a:06:
         1a:66:0d:d2:b9:e8:57:ba:a3:6d:4f:f4:50:80:c5:f9:cc:41:
         41:87:a9:e7:5f:95:d6:1a:16:d7:51:db:47:e3:76:c9:31:ad:
         52:59:24:92:7e:d5:bf:11:52:17:78:27:1d:b0:f3:f6:38:0e:
         9f:65:95:ed:88:c7:1f:14:d8:36:5e:5b:08:a1:3d:db:24:bb:
         5a:05:60:4a:a7:21:29:c6:54:70:3e:93:b0:82:2e:af:44:b5:
         fd:e3:59:f2:9e:38:09:e8:c6:b9:62:29:48:a7:cc:e1:6b:ce:
         5a:4d:35:e2:65:24:ca:00:7a:29:28:5f:ea:10:c8:94:fd:1a:
         0e:22:dc:7f:23:30:06:10:38:dd:0b:26:9c:bd:7d:5c:7a:43:
         fa:ef:16:9e:53:dd:87:1b:20:6a:24:d1:5c:4f:fd:91:81:a9:
         47:8f:b9:04:3e:59:cf:0d:37:10:ff:0b:33:b9:7a:87:20:89:
         71:fa:56:8e:0c:7d:f6:d4:ed:6f:2f:98:f4:9d:11:63:30:24:
         5d:77:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:24 2026 by rpki-client