Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2ACA766C751511F18829B6FC70A30FBC.roa
File:                     2ACA766C751511F18829B6FC70A30FBC.roa (raw, json)
Hash identifier:          fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=
Subject key identifier:   58:7D:72:77:BB:84:49:E8:18:6F:18:06:3C:92:15:92:35:A8:66:CC
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0AB0
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2ACA766C751511F18829B6FC70A30FBC.roa
Signing time:             Wed 01 Jul 2026 06:22:00 +0000
ROA not before:           Wed 01 Jul 2026 06:22:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     15380
IP address blocks:        103.26.33.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jul  1 06:22:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44b208-dd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:b4:1c:52:aa:35:ba:ea:b6:45:fe:0c:fc:
                    19:b0:97:94:e3:63:58:4d:86:9e:0a:04:83:4a:26:
                    ae:07:af:eb:82:75:28:2a:49:c4:ed:8e:66:02:60:
                    11:f8:74:01:98:65:71:8d:3e:55:94:f3:03:04:11:
                    47:3f:fd:a2:ef:81:15:e9:82:05:ec:8d:b7:92:ed:
                    2b:5a:b5:5c:1e:e7:f6:d0:01:c2:6b:e8:6a:71:49:
                    a4:dd:6d:5a:3e:3d:ff:65:93:59:62:22:51:0e:14:
                    c0:5f:8e:b7:8c:97:8a:87:bd:95:b0:5f:85:96:86:
                    52:30:18:6a:52:dd:c0:82:f5:b4:71:e7:f7:51:65:
                    50:37:63:62:32:b7:49:7c:5b:6b:4c:5f:63:d5:03:
                    64:d4:6f:c8:a5:97:cf:1a:3f:5b:bd:b5:04:23:16:
                    0d:fe:c4:f9:a6:71:bc:76:d3:a7:f7:58:fe:5b:f3:
                    4b:54:eb:0d:b2:18:e2:b5:6e:24:15:c3:e9:8a:97:
                    bf:88:86:ff:ac:8a:1c:2d:02:07:2f:63:41:56:8f:
                    2b:54:69:a3:6b:7e:fb:82:30:81:27:b7:8c:24:ba:
                    ac:1d:39:0e:92:13:fa:67:d2:2e:af:0c:7f:91:d1:
                    ad:db:d7:88:0c:cb:3c:65:47:66:0d:37:ff:18:c1:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7D:72:77:BB:84:49:E8:18:6F:18:06:3C:92:15:92:35:A8:66:CC
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2ACA766C751511F18829B6FC70A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.33.0/24
                  103.26.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:f6:fb:b1:d4:75:53:5f:af:fd:98:f9:7a:4d:2e:de:72:
         6d:83:bc:4c:7e:9e:84:c8:ac:77:6f:79:fe:6e:a0:cc:86:64:
         a2:e8:19:1c:b7:bf:28:8e:05:c0:5f:bb:7b:59:cc:c5:f1:71:
         ac:12:78:ba:62:f3:12:d5:62:ac:6d:86:26:56:2d:67:24:9f:
         6b:df:4f:16:83:0d:39:2e:5e:3a:3b:0b:a0:8d:7e:83:04:8a:
         e4:e4:0e:8f:37:14:ce:2b:d2:53:98:1a:a7:ff:ea:74:8c:e8:
         f5:ba:86:2f:43:ba:6f:42:8f:57:50:6d:f7:27:3f:68:29:da:
         f4:4c:78:7b:34:82:a2:0f:1b:c9:f0:54:a0:ab:01:ee:ba:49:
         76:4d:c1:78:0a:8d:53:78:db:c6:ff:5b:6b:1f:c1:ff:c4:08:
         60:c7:1c:33:62:35:85:e6:ab:5e:f8:99:94:58:02:5d:84:49:
         12:d6:6c:bd:5c:47:d6:c4:11:c7:6e:34:96:32:2c:7a:6d:b8:
         0e:f6:41:6f:75:e0:fb:3e:4b:cc:14:bd:f3:3f:03:0b:a3:c1:
         13:a8:25:f3:b3:d2:ec:17:58:66:45:d4:73:ec:c9:1b:70:10:
         9c:45:70:0a:3f:b6:12:2c:e6:aa:49:4b:64:0a:09:df:11:fe:
         33:c6:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 17:38:16 2026 by rpki-client