Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa
File:                     857B25F03EDF11F1939FAF8DB6833773.roa (raw, json)
Hash identifier:          jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=
Subject key identifier:   E7:DB:D5:A2:AB:68:E2:14:13:82:A3:C5:7B:21:02:BC:1E:A9:54:24
Certificate issuer:       /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial:       29
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa
Signing time:             Mon 29 Jun 2026 09:41:11 +0000
ROA not before:           Mon 29 Jun 2026 09:41:11 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        103.12.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
        Validity
            Not Before: Jun 29 09:41:11 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a423db7-a081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:4a:d6:31:3a:60:fb:82:2a:1e:55:09:20:
                    7e:0f:6e:6c:07:a5:97:2d:42:0b:b9:ae:f1:59:8a:
                    25:60:d8:91:39:73:33:1f:af:57:82:0d:03:72:56:
                    3e:88:41:40:3c:28:80:8c:c0:61:12:bb:e7:1b:e7:
                    a6:a0:95:c3:64:b5:6b:97:d2:95:9f:d3:56:db:28:
                    eb:fa:48:03:23:5f:bf:5c:82:ab:2a:41:dd:68:b4:
                    2e:ab:64:7a:7b:26:ec:85:36:19:91:55:90:74:0b:
                    5f:5b:6c:1d:fa:ba:6b:5d:b9:09:c8:ee:4a:36:47:
                    a2:01:5b:16:66:41:45:14:5d:0e:c3:88:da:3c:3a:
                    c8:47:0d:d2:2c:bc:37:bd:99:b6:91:f9:3e:57:af:
                    f7:86:bf:1b:b0:e8:fe:20:53:89:de:c7:48:c2:a6:
                    21:44:8c:d9:0f:ea:2a:64:ba:2b:85:64:17:3f:ac:
                    e4:92:d0:91:ef:97:bd:6c:60:bd:c2:3d:9a:55:68:
                    94:e4:ad:ce:9e:82:2d:8c:cd:c9:aa:92:f0:c7:af:
                    6d:6b:a1:29:35:3b:96:d3:67:bb:cd:77:1d:6b:25:
                    ca:b2:23:c0:40:76:53:65:88:ed:43:8e:d9:d5:2c:
                    31:1d:04:5c:0d:d1:b9:5f:f0:9a:a2:02:6e:cf:12:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:D5:A2:AB:68:E2:14:13:82:A3:C5:7B:21:02:BC:1E:A9:54:24
            X509v3 Authority Key Identifier:
                keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:ca:83:40:d4:37:8e:df:aa:ab:e9:4b:e5:27:5c:c8:ae:
         c7:52:12:a2:9e:f0:3f:2a:4f:e2:47:8d:26:a7:d1:17:4d:a3:
         95:91:76:f5:0d:9f:6b:2b:75:5e:64:30:8d:6d:c0:9e:4a:bf:
         c8:35:8e:ce:01:90:ac:c2:77:23:01:28:63:03:13:74:3d:d2:
         68:94:ee:a9:c2:05:9d:5d:a0:09:53:9e:24:07:c4:8d:ce:8f:
         d0:d6:ae:c8:f1:cd:1b:b9:15:b4:87:83:a6:7c:46:5e:41:90:
         f6:8d:0e:9d:fb:32:f1:aa:e9:08:ef:c6:63:ab:f4:1f:c7:f0:
         d3:91:68:a9:64:b7:85:ce:e9:cd:71:68:dd:7a:75:e7:35:b1:
         47:6b:2e:f5:65:1d:0d:74:d0:6e:c6:55:ca:68:e4:b1:bd:1c:
         66:a3:17:0f:92:fa:a8:cd:ed:4a:88:38:1c:4b:a2:f8:7d:fb:
         56:af:39:fc:4a:51:85:95:f9:de:7f:4a:77:c6:9e:a8:a7:cb:
         7f:67:0b:d7:f1:99:91:20:63:d4:8b:04:f6:41:e3:76:dd:37:
         89:9a:9a:57:fb:ff:98:60:59:7e:ce:39:60:e7:13:63:df:8d:
         85:01:56:69:85:72:ff:ea:4b:be:4d:8a:94:44:86:95:de:f5:
         b9:7f:30:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:09:20 2026 by rpki-client