Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa
File:                     6959BDA8C05B11EB9540776AC4F9AE02.roa (raw, json)
Hash identifier:          OANS4UGotbrHDA32WOeuOB3Wn0ea/AxoJh5y6ulR7SQ=
Subject key identifier:   B8:A2:1E:2C:56:E7:B8:C6:80:87:54:AD:5B:7A:3A:0E:9F:08:27:FE
Certificate issuer:       /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial:       06A8
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 23:24:16 +0000
ROA not before:           Mon 06 Jul 2026 23:24:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142275
IP address blocks:        103.167.82.0/23 maxlen: 24
                          2407:6640::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
                          rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 23:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
        Validity
            Not Before: Jul  6 23:24:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c3920-2c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:f8:d4:b8:36:17:e3:45:f3:f5:3e:e4:55:
                    4b:37:2a:9a:05:f5:00:a1:08:19:7f:be:2b:f5:9b:
                    77:31:28:1b:ef:9c:52:bd:8b:5c:82:f1:99:b7:46:
                    8a:00:5c:ee:e0:e2:b1:ee:f3:f7:0b:c5:6b:81:33:
                    7b:d4:d2:e8:2f:1e:7e:c3:90:01:a6:19:87:ab:d2:
                    22:5f:79:a8:d0:75:77:32:fa:34:c1:c3:4c:66:e3:
                    72:ce:49:9d:9a:a9:d3:fb:f0:38:04:fa:76:fe:2f:
                    ef:b3:ad:da:3f:a7:7a:78:b9:7d:f9:3f:5e:51:37:
                    51:2b:74:86:51:85:e7:64:cd:be:ac:4a:ed:19:17:
                    fa:71:f3:66:bf:51:51:16:54:48:ab:a2:28:a3:c2:
                    e6:ab:6e:95:18:6f:19:7b:3b:72:c2:41:57:f5:62:
                    cf:dc:9f:77:8e:5d:bc:e7:24:0d:6e:35:e0:00:51:
                    8c:1f:fc:6b:e1:af:7a:cf:ca:ec:27:16:db:76:5f:
                    30:d4:44:99:bb:3f:40:17:2a:4b:b6:53:0c:9c:51:
                    1b:93:3c:50:39:98:6b:ca:ac:45:48:d7:55:43:65:
                    b4:93:99:03:b7:a6:f2:69:33:6a:be:81:fb:05:d4:
                    22:9a:a8:4f:d9:fb:45:6c:ad:3c:ca:9b:da:c4:22:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A2:1E:2C:56:E7:B8:C6:80:87:54:AD:5B:7A:3A:0E:9F:08:27:FE
            X509v3 Authority Key Identifier:
                keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.82.0/23
                IPv6:
                  2407:6640::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:02:2d:48:6e:63:10:04:6e:49:b0:d0:e2:bb:0a:fb:bf:ea:
         0b:28:fe:ee:04:97:46:52:ea:b6:2f:14:f3:0f:aa:75:7a:a7:
         a9:e7:68:64:50:aa:b6:d5:c3:39:63:24:18:55:26:6e:73:28:
         06:60:1b:f9:68:ec:b2:d7:d8:9a:67:d1:80:d0:4a:7f:ff:bd:
         6f:0c:e8:51:79:d2:1e:38:30:42:61:67:54:ae:0d:65:1a:c5:
         8a:53:cf:37:2f:8a:b0:51:1b:25:19:e0:ce:46:20:54:aa:23:
         07:61:02:59:08:46:45:72:20:63:06:22:8c:62:39:94:b4:c7:
         75:37:10:01:1e:a7:00:da:51:26:c7:2c:50:5b:a3:d6:e5:0e:
         1c:e0:66:4c:a0:4e:cf:37:ce:d4:1b:a5:29:31:7e:b1:f1:4e:
         5e:7b:b5:80:8a:d8:3c:5d:19:43:b8:f7:fc:7f:e0:7a:2b:14:
         02:a0:e5:b1:f3:b7:8c:94:49:5e:d5:aa:4c:ca:5e:68:e0:f7:
         6c:07:4c:aa:3b:1e:95:06:e9:0e:82:32:83:c5:35:47:21:e5:
         17:49:17:63:ea:4b:e1:28:c1:6a:86:4a:0b:89:ad:5e:68:ab:
         5c:e0:42:98:c1:b7:a1:65:49:2d:47:d8:db:c0:0a:5a:63:27:
         78:9a:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:03:50 2026 by rpki-client