Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa
File:                     81A9AA2A30A011EC9613A82FC4F9AE02.roa (raw, json)
Hash identifier:          PRALUoBFqhC2JvgAv3jlaF5QZjAnuYEo4AE90TsAThE=
Subject key identifier:   59:13:84:20:AC:4C:0E:21:39:CE:D1:32:12:17:A0:A6:4C:4D:0C:BB
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       0600
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa
Signing time:             Fri 04 Sep 2026 23:44:31 +0000
ROA not before:           Fri 04 Sep 2026 23:44:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139484
IP address blocks:        103.172.104.0/23 maxlen: 23
                          103.172.104.0/24 maxlen: 24
                          103.172.105.0/24 maxlen: 24
                          2001:df7:6d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: Sep  4 23:44:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b57de-8d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:76:5e:64:58:61:b6:f1:38:00:10:45:02:
                    6e:66:94:5c:38:45:45:66:30:4e:ac:2c:45:2b:0e:
                    b3:e8:31:80:d7:12:73:cb:21:1f:25:23:a4:94:34:
                    0e:38:29:46:17:a0:e0:34:e0:78:ff:60:3e:70:8f:
                    af:1e:fe:8b:bc:82:a8:9b:5b:b1:af:25:b0:d1:03:
                    96:4d:2b:83:9d:b1:ac:60:81:32:8d:22:af:f2:c8:
                    66:56:66:6e:02:ce:a4:1a:76:96:2b:f1:07:16:c6:
                    86:53:77:0d:cb:6a:59:35:b8:56:e2:d6:d7:42:ea:
                    fc:12:11:b5:fc:c2:e0:9d:7d:0c:1e:ac:7c:21:fe:
                    16:6a:ee:9c:a7:eb:34:ab:89:65:c5:ca:2e:f6:cb:
                    b9:69:a9:c6:ba:ee:16:07:44:2e:a7:e4:50:44:5d:
                    a3:6c:0f:d8:29:80:74:15:24:68:7a:15:25:94:e4:
                    32:39:f6:4e:ac:c6:56:bf:d3:9a:0c:a4:b0:e9:bf:
                    14:8b:2b:9b:79:1b:76:43:54:7f:23:30:a6:0c:fb:
                    a9:e7:4a:04:75:eb:4e:a6:75:cd:0c:a6:13:fe:4d:
                    42:97:21:1c:83:31:e2:1b:aa:4f:94:db:75:24:fe:
                    e0:88:6f:49:2a:b0:1e:68:b6:b3:d1:93:78:4b:21:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:84:20:AC:4C:0E:21:39:CE:D1:32:12:17:A0:A6:4C:4D:0C:BB
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.104.0/23
                IPv6:
                  2001:df7:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:57:12:8c:e1:9c:79:e7:cb:bb:05:f3:ae:e5:77:d9:b0:2e:
         07:20:f0:a9:c6:40:eb:a5:5c:84:cb:d8:a6:13:7b:7c:16:0a:
         85:28:db:03:d7:c4:7d:42:8e:a1:9b:40:31:f0:b6:1e:0f:88:
         3e:e6:1e:2f:7e:67:72:74:c0:6d:e4:dd:f8:47:05:55:dc:e2:
         af:78:ee:6c:35:3d:12:81:6e:da:36:ba:00:9d:a4:82:e4:15:
         a0:cc:bc:1c:d5:bf:98:ff:fa:7d:d5:44:00:cf:db:6c:8f:90:
         fd:78:00:1f:92:7c:2e:de:1e:52:66:70:6e:4c:3e:9f:73:f9:
         3f:44:7a:54:de:b1:4b:e5:62:00:51:fd:af:8a:00:9a:e9:31:
         3f:26:79:60:37:4a:bf:83:ef:6b:6f:f9:31:e5:05:bf:20:da:
         81:82:1f:59:ec:b7:61:dd:1d:15:0f:2e:20:cf:d8:7b:ae:fe:
         d9:16:05:88:49:b5:2c:65:94:cb:ba:fa:67:97:e3:09:c7:6c:
         5f:8b:3e:2a:fb:4f:19:ff:5a:c2:c4:6d:51:dc:17:5e:46:5f:
         8b:c7:31:59:19:e2:69:ba:6a:73:a0:16:08:10:7b:2c:0a:6e:
         eb:81:48:9e:23:6e:84:04:5f:88:63:d6:61:23:05:41:a2:e8:
         d5:28:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:20 2026 by rpki-client