Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa
File:                     9507206A63A111F092E32646C4F9AE02.roa (raw, json)
Hash identifier:          sNJ/z3tciI3P1O0ryKXCTLwVb8opOV1YzGSE7197VSA=
Subject key identifier:   77:9A:78:93:0E:BA:43:53:FA:4B:D3:B3:FD:C1:89:49:58:C1:05:CA
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0897
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 21:41:25 +0000
ROA not before:           Wed 30 Sep 2026 21:41:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        103.151.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Sep 30 21:41:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abd8204-219f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:1c:45:1a:af:ee:c0:ee:9c:67:49:a8:89:
                    ef:8f:ca:a1:5d:19:ef:4b:6f:dc:04:99:d7:93:de:
                    56:4e:a1:c5:2e:ff:80:d0:f2:c2:c7:03:cf:58:48:
                    b0:e9:4a:4c:0a:41:74:88:c5:75:23:e9:ef:b5:09:
                    35:89:21:a9:f8:4a:8a:39:e4:65:df:20:36:35:42:
                    b0:ed:90:91:43:65:71:4c:ed:dd:a7:bb:ee:42:a2:
                    66:69:95:e5:06:0a:ec:b5:9e:9d:e5:12:38:d4:e9:
                    fb:25:ba:19:7a:0d:41:e5:92:74:3c:f7:6e:62:9c:
                    4f:c9:d9:68:a1:5b:f2:fe:2c:49:7d:c0:be:85:24:
                    06:2f:b4:76:fb:4c:63:18:31:ae:08:26:77:1c:be:
                    59:3a:43:4f:9c:13:77:ee:c7:0a:39:92:32:12:c4:
                    00:4f:cc:75:5f:94:91:cf:e8:fd:95:e9:a8:64:2c:
                    63:b5:38:98:ac:7d:06:66:be:c7:07:84:8c:9e:b2:
                    6b:c7:fc:54:60:24:85:f2:f3:5a:13:99:ce:fe:46:
                    6e:7f:51:5c:d4:95:1d:6c:24:25:92:9a:c8:0f:63:
                    37:63:02:db:b4:ca:5c:a4:5a:55:65:5c:8c:87:04:
                    c1:13:b6:d7:0b:2c:a3:79:6b:ba:1c:77:52:80:6c:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:78:93:0E:BA:43:53:FA:4B:D3:B3:FD:C1:89:49:58:C1:05:CA
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:16:4c:71:0e:25:22:ad:24:67:a7:01:f5:82:d5:0c:8c:dd:
         9b:84:c6:04:b8:0a:13:dc:d5:16:3a:7b:ed:5c:3c:76:26:f5:
         bc:42:ff:0c:83:4b:d9:f8:05:fd:cb:e6:b4:bd:56:e4:d3:62:
         c6:c6:17:3f:d7:c0:03:73:5a:a3:50:0e:e7:98:58:2b:3c:e3:
         86:ee:ee:f5:cf:9a:a9:4e:d7:64:9b:59:d7:c7:40:8b:45:7f:
         5c:95:75:a4:fc:c4:fd:4c:4f:70:e1:a6:28:d3:34:a4:53:65:
         e0:a3:10:92:4b:5f:12:d7:66:49:63:d0:77:32:46:62:ec:63:
         40:18:fa:a6:e3:7b:87:61:41:b4:22:e5:77:c7:d8:ad:dd:14:
         e8:7a:55:4c:b2:de:0c:c9:e9:cd:65:80:95:90:35:41:94:b3:
         3b:61:e7:6b:49:a5:f3:6d:7e:65:4a:f5:63:2c:dc:4d:eb:a6:
         b4:7f:f7:59:d7:d6:d9:45:a9:95:c0:64:fd:62:17:05:7d:35:
         0a:51:02:3b:6a:57:30:ef:cc:a1:7f:93:23:33:e3:23:dc:10:
         9d:bf:33:b0:07:4d:d4:df:22:06:e0:55:6e:be:ce:00:11:c7:
         61:92:00:2c:12:bb:a7:c8:ce:af:b2:e0:ea:e0:37:95:41:89:
         8c:e5:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:14 2026 by rpki-client