Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa
File:                     7CDB77C68D7511F1B81A5A6E3211F970.roa (raw, json)
Hash identifier:          wW3zDmhseyh3Yh/oOeh4ea2UWN+ukBkLwblwcoglm2g=
Subject key identifier:   EC:73:A2:D3:AB:0B:ED:A8:A8:E5:E2:9E:0D:21:D6:B4:97:DB:9A:B8
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0DB2
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa
Signing time:             Sat 01 Aug 2026 06:51:57 +0000
ROA not before:           Sat 01 Aug 2026 06:51:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     23532
IP address blocks:        43.246.129.0/24 maxlen: 24
                          103.7.209.0/24 maxlen: 24
                          103.7.210.0/24 maxlen: 24
                          103.26.164.0/24 maxlen: 24
                          103.26.165.0/24 maxlen: 24
                          103.244.211.0/24 maxlen: 24
                          160.20.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Aug 2026 18:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3506 (0xdb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Aug  1 06:51:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a6d978d-f650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:ee:7f:6b:fb:8f:b7:51:96:41:63:14:63:
                    32:19:59:cb:b5:4b:3b:df:a8:8f:4f:7c:e9:db:8d:
                    35:d7:02:90:4b:a6:6f:69:a3:3c:61:9a:19:95:1e:
                    bb:5a:54:73:d9:1c:ef:fe:49:54:36:44:e0:e8:8c:
                    9c:6e:06:91:a1:43:27:83:bf:73:11:62:28:10:23:
                    0f:18:03:62:cb:2e:6e:cc:0e:f4:50:9a:e1:d4:9a:
                    c6:33:d9:e9:89:7f:41:ec:6d:6b:b0:58:15:88:ed:
                    9c:03:6b:08:b4:3e:c9:29:ba:53:3f:29:f4:b6:78:
                    f7:2f:12:f2:91:0d:16:02:29:e7:51:b8:d7:c6:1f:
                    a1:47:e9:5a:a2:d1:59:79:8c:08:77:0d:d6:5d:ee:
                    76:15:40:f2:db:65:c2:96:dd:29:ec:e0:f9:d5:cd:
                    3a:53:1d:b4:f4:3a:95:f2:4f:70:60:ab:92:44:8d:
                    70:23:be:fd:cb:3d:a4:60:01:1b:1d:77:f6:5a:8b:
                    23:5f:95:87:68:f9:d5:d8:86:31:9b:a6:93:70:7f:
                    8f:78:e9:02:e7:1c:f3:56:5d:97:0e:83:f8:a8:8d:
                    b5:24:b3:94:76:4a:75:4e:ed:56:e6:4b:6a:51:e0:
                    4b:ca:80:41:78:19:43:14:17:88:5e:18:48:3a:a3:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:A2:D3:AB:0B:ED:A8:A8:E5:E2:9E:0D:21:D6:B4:97:DB:9A:B8
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.129.0/24
                  103.7.209.0-103.7.210.255
                  103.26.164.0/23
                  103.244.211.0/24
                  160.20.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:e5:d5:4a:3e:6f:d8:97:08:97:ea:8c:11:e8:fd:e2:17:67:
         df:ec:15:9a:52:04:f4:2a:1e:4b:cb:3d:50:16:ef:42:98:c3:
         ca:ac:8a:9f:d7:28:95:c1:4d:e3:fb:11:c8:30:d6:59:5a:d3:
         6f:41:65:05:70:43:fd:54:71:07:30:a6:02:62:76:98:0d:84:
         2d:8b:78:bc:c9:ec:7b:52:5f:a6:c5:c3:c9:79:df:6c:17:30:
         1d:b5:d5:d0:37:07:aa:10:d7:68:96:27:66:c4:f9:67:de:6b:
         a2:0f:bf:03:c9:d8:ab:0b:d3:dc:a8:2b:46:4e:5d:9f:a1:5c:
         f9:a4:b6:76:10:66:3f:64:92:27:c3:cf:21:d0:7f:12:24:d9:
         b9:d0:e3:e1:27:d7:f1:cb:26:07:ec:5d:5e:e0:3b:98:ff:97:
         82:8a:7a:5b:21:80:f3:96:ff:63:8f:5b:8d:e2:80:00:58:d4:
         e5:45:13:e6:05:90:8b:42:d7:aa:31:37:58:62:f3:3a:f6:69:
         1d:7d:f9:70:a6:21:6d:52:af:9b:ae:a1:ec:d6:8a:88:4e:e1:
         15:d6:f6:7f:82:c9:b5:3e:60:ff:e3:e4:a4:9f:b3:d4:24:b8:
         82:dd:2b:60:42:af:fb:7b:c7:48:ef:81:fc:17:f8:85:25:f9:
         16:03:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 15:02:49 2026 by rpki-client