Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa
File:                     382BB29EF45011F0AF80EBA1636F56BC.roa (raw, json)
Hash identifier:          up860oLdxDIT/mm1S3+f0STyL0H48p0LlM1PJVy1wlM=
Subject key identifier:   33:77:CE:23:05:0A:B8:16:21:B9:A6:08:57:EB:73:CD:03:A9:32:6D
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       0891
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa
Signing time:             Wed 12 Aug 2026 20:41:01 +0000
ROA not before:           Wed 12 Aug 2026 20:41:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134226
IP address blocks:        103.59.176.0/22 maxlen: 22
                          103.59.176.0/24 maxlen: 24
                          103.59.178.0/24 maxlen: 24
                          103.59.179.0/24 maxlen: 24
                          2404:2d80::/32 maxlen: 32
                          2404:2d80::/40 maxlen: 40
                          2404:2d80::/48 maxlen: 48
                          2404:2d80::/64 maxlen: 64
                          2404:2d80:10::/48 maxlen: 48
                          2404:2d80:11::/48 maxlen: 48
                          2404:2d80:12::/48 maxlen: 48
                          2404:2d80:13::/48 maxlen: 48
                          2404:2d80:14::/48 maxlen: 48
                          2404:2d80:15::/48 maxlen: 48
                          2404:2d80:16::/48 maxlen: 48
                          2404:2d80:17::/48 maxlen: 48
                          2404:2d80:18::/48 maxlen: 48
                          2404:2d80:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Aug 12 20:41:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7cda5d-a419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:58:5a:28:54:a7:0e:b9:22:2c:8d:e5:64:
                    39:9e:a5:8e:02:2c:36:c4:d9:79:35:d1:01:d1:bb:
                    3a:9d:cb:b3:a7:57:7a:54:cd:7f:9b:0d:19:ff:40:
                    4c:54:40:cd:36:31:98:e2:8e:e3:54:57:ec:ee:aa:
                    78:99:b4:42:0c:f0:33:c3:0e:35:c8:ba:de:a8:c1:
                    f7:e2:3f:20:29:be:7d:56:ed:14:f3:97:cd:6f:86:
                    69:e8:12:60:3b:cf:d0:18:a4:53:09:8b:54:61:0a:
                    60:d8:32:42:31:ce:ec:60:3c:c4:65:b7:0c:95:7b:
                    e7:d5:90:a1:05:a6:39:35:07:d8:1a:03:8c:04:82:
                    45:8c:cb:fc:77:ba:16:62:aa:ae:ef:95:b6:14:39:
                    10:44:33:1e:d9:57:4e:73:87:a9:75:70:72:e1:c7:
                    0f:3d:a9:49:75:7e:0f:62:f9:70:6e:e7:16:e7:25:
                    0d:f8:78:1c:5f:a3:ef:4d:a1:d5:63:62:03:eb:02:
                    5d:c4:06:28:24:d7:46:b0:70:09:25:83:68:b3:38:
                    7e:84:fb:77:23:39:9d:91:6f:4b:2a:92:aa:ea:5c:
                    62:86:a7:ac:91:f1:cb:b2:2e:17:e1:f5:3f:77:64:
                    1c:7a:5f:b5:f4:f6:73:df:00:63:46:ea:30:12:74:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:CE:23:05:0A:B8:16:21:B9:A6:08:57:EB:73:CD:03:A9:32:6D
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.176.0/22
                IPv6:
                  2404:2d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:d6:75:a1:24:b3:2a:c6:e6:65:9a:b2:1f:6d:ab:e6:52:
         bc:d4:4c:ef:29:e7:23:af:6c:c8:f2:63:a1:e9:e5:83:a4:10:
         7b:26:66:43:02:d6:bb:4d:bb:7a:28:24:33:90:1a:8e:d2:fe:
         88:2c:46:a9:77:66:31:9e:cb:a1:06:69:27:68:83:4f:42:5e:
         62:07:23:3e:bd:57:1a:02:1b:28:41:59:f7:9a:e9:06:c5:8b:
         3e:68:7f:16:d0:86:95:d5:ae:4f:6b:fa:9a:e2:7d:b6:9f:e7:
         7c:37:b6:6d:79:f3:54:16:87:fc:39:ac:c7:dc:89:e7:8f:dd:
         28:b2:e9:ed:4a:01:f9:4e:6e:cd:c0:0e:b7:78:32:cb:69:d6:
         94:42:9a:be:89:2b:a3:8f:e4:e0:f3:1a:fc:16:6b:8a:2a:bd:
         b2:c3:b2:f1:f8:81:4d:1e:ad:b9:73:43:05:6e:d4:93:37:2e:
         ad:f2:b7:3b:b6:71:6c:dd:5d:8d:10:65:bd:9d:4a:c6:47:61:
         09:c1:2e:54:cd:1a:ab:f5:ea:68:5a:dd:af:66:1f:1b:f7:ba:
         64:da:1f:22:01:7d:01:f2:6a:52:ad:d5:04:00:0c:62:20:c5:
         91:3a:96:49:c6:49:9f:82:fc:5d:e5:67:c0:d0:32:49:9d:f1:
         24:2d:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:52 2026 by rpki-client