Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D520BC1A7F2511F193FF4ECD8AA30FBC.roa
File:                     D520BC1A7F2511F193FF4ECD8AA30FBC.roa (raw, json)
Hash identifier:          cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=
Subject key identifier:   D8:4D:F6:AA:DB:4A:D1:AE:0D:67:4C:8B:71:00:96:25:6B:55:51:5C
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0AB9
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D520BC1A7F2511F193FF4ECD8AA30FBC.roa
Signing time:             Tue 14 Jul 2026 01:46:29 +0000
ROA not before:           Tue 14 Jul 2026 01:46:29 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.26.33.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 19:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745 (0xab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jul 14 01:46:29 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5594f5-2474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:4d:d6:f6:65:38:79:4e:aa:e1:3c:fb:5f:
                    d3:ca:99:43:52:6a:a5:b2:aa:d1:7e:8c:47:91:8a:
                    a5:40:1c:3a:48:5e:f8:1b:4e:47:d7:6e:2c:4b:c4:
                    43:27:7a:b8:16:5d:4a:ac:19:78:d0:b5:11:5f:31:
                    61:b6:a8:13:b5:dd:2f:ef:ec:43:69:d8:d3:d6:6e:
                    fb:0f:d7:ce:d3:c2:44:85:3f:03:41:62:22:95:6d:
                    ba:a3:ea:fb:a0:61:bf:9c:d4:57:79:9b:5c:e0:a6:
                    ce:2a:77:65:65:d5:d8:96:a9:bc:f0:b5:07:b1:4b:
                    12:8d:a6:55:11:57:47:a2:c3:85:44:d0:af:57:ab:
                    2a:60:fb:f3:12:0e:51:5a:27:04:05:bf:7e:39:f1:
                    21:4a:72:c8:fd:74:cb:f3:fa:27:67:e7:f0:1d:78:
                    31:03:78:56:fd:1a:ed:bd:b8:e9:f6:a6:18:98:fc:
                    5a:aa:14:da:73:4e:dc:d8:33:a0:da:37:26:85:08:
                    f4:d3:97:75:ce:d9:c2:ba:05:c3:56:b7:4f:23:04:
                    4d:2f:0e:59:68:7a:16:99:e1:41:08:cf:02:35:d3:
                    21:68:8b:c5:cf:80:3b:73:5c:7e:49:15:85:8b:0f:
                    16:d7:a8:e7:99:00:9a:8c:01:cd:fc:b5:e5:d8:82:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4D:F6:AA:DB:4A:D1:AE:0D:67:4C:8B:71:00:96:25:6B:55:51:5C
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D520BC1A7F2511F193FF4ECD8AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.33.0/24
                  103.26.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:51:f4:3c:f0:ad:a7:aa:54:e7:a1:03:c4:2c:42:80:a4:7b:
         ec:cd:fa:bc:08:b9:2f:cc:8a:2c:2f:60:2d:87:f6:c5:ee:1f:
         69:c4:e9:7d:12:16:84:60:2e:42:a1:00:b9:78:36:6f:bf:a8:
         f6:fa:dc:9e:fc:e9:f2:d1:6f:1b:cd:0a:a5:f9:41:f7:aa:03:
         fe:c3:8b:2e:21:be:71:cd:e5:3e:ae:11:54:38:6b:5c:ac:15:
         a6:7d:dd:93:f5:ea:8d:09:ff:f1:d7:71:67:63:26:91:ff:1e:
         89:be:a6:e3:e4:db:c8:68:4a:51:d0:a7:2a:d3:40:a6:d4:56:
         65:a8:36:bc:ef:39:d6:e3:e7:10:49:e7:e4:49:f0:fd:f4:de:
         b2:2a:f9:ed:25:0d:f5:1a:f4:49:96:42:3d:82:10:6e:f4:b9:
         a6:ef:2e:b2:0a:8a:7a:c7:97:99:bb:e0:5d:5a:68:73:89:f4:
         9a:1d:35:4f:99:d7:6e:e7:d1:bc:86:ce:02:3a:25:6b:b1:41:
         be:2f:38:94:c6:2d:8d:c5:71:7e:5d:ee:b3:eb:b5:0b:81:7a:
         1b:79:ec:4d:ce:52:79:4d:0d:0b:94:79:8f:5d:d8:56:81:1f:
         09:5e:9d:4b:f9:c2:23:67:45:71:71:03:77:f3:44:c9:8d:7e:
         2a:22:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 06:56:40 2026 by rpki-client