Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
File:                     3763B68C774C11EE81607E76C4F9AE02.roa (raw, json)
Hash identifier:          qPsXriKEB5wC83ytPb17xjQIdxdwGbh1ecny/G9NWvA=
Subject key identifier:   E8:59:51:B7:57:6B:AA:09:8A:60:DC:E7:2D:5E:0A:B7:F2:50:45:FB
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       0256
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 03:51:57 +0000
ROA not before:           Thu 01 Oct 2026 03:51:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150774
IP address blocks:        103.7.120.0/23 maxlen: 23
                          103.7.120.0/24 maxlen: 24
                          103.7.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Oct  1 03:51:56 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abdd8dc-a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:6a:69:40:fe:eb:d0:96:27:92:5f:f6:05:
                    8f:80:23:10:30:43:bb:71:cd:47:e9:de:7e:59:94:
                    ab:bb:65:e6:1e:af:c3:50:76:84:49:61:f4:dc:5e:
                    6c:f5:62:b6:6a:77:c0:39:4e:51:be:25:c4:00:a3:
                    99:97:fc:ef:e7:8b:ab:15:b1:2d:b1:bd:f5:33:e0:
                    8b:82:b4:3e:da:e1:dd:85:c7:96:c2:59:71:ac:ee:
                    e7:8e:20:81:6d:d0:b0:60:c1:5c:e0:8c:a2:c3:4a:
                    61:b6:6c:11:0a:19:7a:1d:64:3d:c3:6a:4f:60:65:
                    be:5f:51:88:3e:2a:87:26:e7:88:31:85:e9:bf:85:
                    59:97:08:cf:9c:c2:68:c9:e9:62:7f:6c:ca:94:dd:
                    6b:e4:f1:15:19:fd:29:58:ce:69:29:4b:56:93:bf:
                    cb:d5:42:46:4d:18:f0:52:ba:5d:2a:05:fd:f6:36:
                    d5:95:5a:a3:1a:43:95:40:b2:c6:ad:36:72:7f:4c:
                    7e:be:7b:b8:bd:8d:94:17:83:df:f8:02:2c:41:2c:
                    91:d3:97:76:22:74:d9:13:99:64:df:df:f6:38:73:
                    c9:63:0b:4e:93:09:ac:b4:77:f6:2e:cf:56:2f:c1:
                    37:62:f3:bf:91:c3:6e:51:bf:6d:29:5d:9a:6b:b9:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:51:B7:57:6B:AA:09:8A:60:DC:E7:2D:5E:0A:B7:F2:50:45:FB
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:09:a0:c6:de:39:f8:b4:16:e8:8d:02:03:d6:8f:3f:d5:
         5b:01:c7:39:08:46:b1:13:84:37:3e:80:fe:4f:34:be:8f:ed:
         9f:9a:70:1f:04:47:c2:25:dc:b2:55:ea:55:9a:7d:b6:ed:13:
         8e:42:a9:8b:87:4e:ae:85:ee:07:ee:cc:d5:7b:a2:9c:95:d8:
         54:cd:32:40:4d:e9:78:28:58:df:1f:e7:5c:ce:f4:72:57:94:
         9b:2c:d6:d2:db:ce:b9:0b:ab:d6:97:26:f7:46:4a:08:5f:bc:
         7e:da:cc:05:f2:d4:6f:a3:1a:02:f4:29:c4:6b:d3:71:cd:8f:
         bf:55:8b:68:4e:a6:a0:ff:18:3e:dd:48:8b:6d:d0:73:ea:a2:
         b9:ee:25:6c:e0:34:4c:93:47:25:76:7f:47:66:11:12:94:00:
         11:65:b4:e6:ad:b0:18:2f:99:ba:2d:5c:3c:ce:03:43:ae:f5:
         97:bd:c3:11:04:b0:c3:4a:88:8a:f0:ed:b4:6c:b8:39:8c:ba:
         e8:d0:0b:42:e4:bc:da:eb:19:ec:d6:20:8f:16:c1:1a:91:9a:
         af:c3:0c:00:e5:32:ee:8d:93:e0:e6:45:a7:32:c7:d8:7b:b9:
         71:95:ad:15:f6:8c:e1:4f:bf:b7:a5:5d:98:04:50:17:4f:e2:
         54:7a:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:00 2026 by rpki-client