Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/7BD32D1678F211F1985843FB5DA30FBC.roa
File:                     7BD32D1678F211F1985843FB5DA30FBC.roa (raw, json)
Hash identifier:          y5JcZuVUbyUkHrroNxYLyYNDHkcGqagm4UKRx6C9gY0=
Subject key identifier:   D4:80:B0:66:1B:92:F6:D2:F3:94:EB:E9:D0:9F:F8:CA:02:51:59:47
Certificate issuer:       /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Certificate serial:       0261
Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/7BD32D1678F211F1985843FB5DA30FBC.roa
Signing time:             Mon 06 Jul 2026 04:23:48 +0000
ROA not before:           Mon 06 Jul 2026 04:23:48 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38195
IP address blocks:        103.67.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 03:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
        Validity
            Not Before: Jul  6 04:23:48 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a4b2dd4-0af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:a0:6e:c6:15:7e:6b:89:9d:48:21:d6:43:
                    bd:09:ae:b7:34:a9:80:2a:26:5f:a7:6e:11:40:45:
                    e7:59:fe:ec:44:7f:db:81:2d:69:f9:84:52:01:b4:
                    39:83:b2:36:f2:e0:4b:bd:91:96:39:94:e0:a2:12:
                    df:00:a4:fc:fb:75:a3:e8:63:79:c6:a3:71:6b:d5:
                    dc:93:bf:7b:86:4d:c0:62:dc:3e:ce:2d:54:51:02:
                    e3:db:9c:df:42:70:10:86:41:86:b4:24:00:93:45:
                    5b:86:8e:44:4e:d6:21:d9:eb:c3:e6:4f:78:f0:39:
                    00:15:b7:e4:89:2e:07:f9:fc:f9:8e:6d:07:35:bb:
                    bd:bb:9f:ff:dc:36:7c:b6:40:1e:d8:d7:20:4b:97:
                    3e:56:5b:13:06:b6:46:af:0e:dd:85:0b:10:d5:c2:
                    92:38:1a:81:8b:af:49:4c:a0:65:69:ac:c5:ec:40:
                    9a:bd:d6:37:08:3d:6d:bc:9e:92:4d:3b:f8:c5:1a:
                    4d:e5:09:0e:83:9c:0a:db:5a:b8:a8:1b:e5:7a:e1:
                    a8:a8:11:e0:ca:41:bd:18:5d:4b:49:52:13:fb:21:
                    df:e9:fe:aa:0f:ef:06:23:ac:7d:82:ba:99:1d:f2:
                    02:a7:e5:72:9e:00:69:f9:a5:8b:a5:57:45:27:62:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:B0:66:1B:92:F6:D2:F3:94:EB:E9:D0:9F:F8:CA:02:51:59:47
            X509v3 Authority Key Identifier:
                keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/7BD32D1678F211F1985843FB5DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5b:f3:f3:83:9f:c8:19:94:f3:03:aa:d3:0f:75:a6:f7:a3:
         b0:0d:60:06:e7:a9:29:83:d9:4b:2c:90:20:5d:a8:d2:28:f1:
         46:37:e1:60:4a:fc:b3:c8:39:68:87:27:d4:b8:82:a1:2f:f1:
         16:14:60:cc:5a:32:38:1e:cf:80:e7:c5:73:a2:c6:4c:50:7c:
         d6:84:13:ae:c0:12:32:79:7e:be:a3:2c:51:fa:25:48:d1:67:
         ce:d1:7d:69:30:29:73:13:af:b3:11:7a:e0:d7:aa:ac:17:63:
         7c:bc:2b:f9:2c:ba:4d:07:7e:07:ae:ca:00:5d:15:5b:ca:d0:
         33:33:5f:e5:fb:57:4b:96:eb:02:ec:14:89:05:5b:05:88:13:
         76:93:17:f1:8a:56:87:33:ec:0b:28:8e:26:9f:02:ea:ed:25:
         cb:c7:34:00:ff:6a:16:16:ad:1d:5e:6f:ef:7c:86:3f:56:cf:
         73:fc:d1:d1:04:d4:56:b3:c9:1a:72:9e:b2:12:ec:8c:e1:b6:
         8e:d8:2d:96:7f:1c:cb:9a:21:9b:06:32:f7:c0:9c:3b:02:50:
         15:2e:43:fa:87:36:a9:fd:60:1c:2c:7f:be:ca:eb:14:5d:92:
         29:d7:29:cf:23:33:c1:bd:93:59:24:80:62:dd:34:7d:06:9b:
         53:37:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 11:59:41 2026 by rpki-client