Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/AB6640F89A2211F1AE84D9C55611F970.roa
File:                     AB6640F89A2211F1AE84D9C55611F970.roa (raw, json)
Hash identifier:          kE1oJdtTs99HeKBcmRbSB/tcajKzhFtQ/Qt14DtpO0c=
Subject key identifier:   A4:FD:12:14:8A:7C:91:C3:74:27:77:D1:2D:F8:C8:4C:F0:2B:3B:5E
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       054B
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/AB6640F89A2211F1AE84D9C55611F970.roa
Signing time:             Mon 17 Aug 2026 10:01:53 +0000
ROA not before:           Mon 17 Aug 2026 10:01:53 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134596
IP address blocks:        103.121.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Aug 17 10:01:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a82dc10-94e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:58:9b:89:ac:de:28:03:e2:8b:ae:c9:c5:
                    3b:a7:e4:e7:f2:3d:57:da:72:07:9b:29:c7:7d:bd:
                    21:64:b7:1b:e4:0b:8b:39:5e:47:56:3f:08:5d:f6:
                    13:66:8f:76:e2:86:ea:31:dd:01:a1:13:a6:1e:4a:
                    8b:e5:c7:6a:14:70:50:72:09:25:c4:55:88:f7:65:
                    6e:ea:97:92:df:fe:b9:d7:74:41:f7:7f:87:51:c8:
                    b5:98:d7:df:b5:91:a9:98:1d:e9:96:af:81:02:46:
                    2c:23:7d:ed:ed:ee:f4:bc:0a:f2:6c:cb:c6:e8:cb:
                    a2:9b:72:59:aa:04:61:60:1d:8b:b6:53:de:41:6f:
                    36:9c:f5:ae:a7:0b:f2:8a:c1:be:bb:62:69:3c:c7:
                    48:62:e5:90:e2:ed:39:a5:ba:ac:77:6a:da:61:db:
                    4d:31:d4:92:80:ea:37:18:18:7a:5b:28:41:8b:c1:
                    75:e7:31:4a:4c:3e:4b:a1:83:c3:87:43:e6:e0:50:
                    a9:02:11:b1:b3:d7:49:65:22:18:c1:07:8a:9d:78:
                    53:b1:21:cc:8e:64:f6:7e:38:69:93:27:cc:d1:1c:
                    69:16:be:94:ea:e8:ba:75:80:90:4c:11:fd:df:64:
                    2c:fc:2c:fd:aa:87:4d:dd:50:c9:df:1c:e5:4d:1d:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:12:14:8A:7C:91:C3:74:27:77:D1:2D:F8:C8:4C:F0:2B:3B:5E
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/AB6640F89A2211F1AE84D9C55611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:eb:69:64:9d:80:07:30:b5:52:87:3a:59:d2:c8:e9:a9:a4:
         a6:f1:ec:99:bc:87:a9:bb:48:9a:4a:7d:26:b7:b8:b6:52:9f:
         a6:1a:ad:3f:a9:1f:0f:fb:b1:9d:7d:76:86:0a:17:53:dc:ae:
         77:69:d9:5e:2a:9f:b1:4e:08:41:8c:2e:f7:2f:cf:84:23:b0:
         8b:b1:39:b4:7c:41:75:34:87:cc:08:b6:33:66:a7:2a:46:b1:
         9e:c5:2b:9a:16:49:ae:cb:c0:3a:13:85:85:19:a4:7d:eb:10:
         73:7c:57:52:11:40:8e:9b:c4:88:63:48:ab:de:6c:ce:75:3e:
         cc:84:6a:b6:08:7a:59:e6:d4:5e:38:fd:90:57:55:0a:82:ad:
         ba:2b:0d:f9:a6:a8:86:0c:fc:7e:ef:93:ff:87:2e:af:9a:30:
         fa:97:d6:13:a1:e2:01:4b:18:f4:65:92:50:51:b1:74:3d:45:
         d2:21:25:cb:bd:8b:a0:35:81:b5:3d:68:03:ba:d8:f7:38:93:
         2a:c6:5b:92:d4:bc:06:22:f0:c1:78:c9:37:15:d1:53:1e:e1:
         53:dd:e9:6e:7c:1e:ed:cd:0a:dc:ac:68:50:59:16:33:6b:73:
         2d:f7:a2:2c:0e:cd:17:47:e4:86:06:0d:c7:c6:ef:2c:eb:ec:
         85:bb:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:11 2026 by rpki-client