Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa
File:                     485DCAA8418111F093EDEF69C4F9AE02.roa (raw, json)
Hash identifier:          jOWeJjRUQeO9Y5OSUo0r5cvkNyYl/SeiJy5tV7P1Si4=
Subject key identifier:   D2:93:60:77:1C:47:7F:73:98:0A:B4:71:73:7E:52:88:DC:50:CD:86
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0366
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 01:50:37 +0000
ROA not before:           Mon 03 Aug 2026 01:50:37 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152479
IP address blocks:        103.66.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 00:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Aug  3 01:50:37 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6ff3ed-4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:b6:2d:ff:90:9c:6a:da:d3:44:d1:48:d7:
                    5d:8a:c2:8d:eb:46:7b:59:db:c7:e2:6e:9e:74:d7:
                    69:c7:e2:27:b5:27:49:96:92:7d:ca:15:70:c1:41:
                    d6:fb:2f:b2:8d:55:54:1d:f9:5b:2b:34:c7:e9:86:
                    8b:27:4f:e3:4e:f9:a4:a1:f3:25:b7:2c:7f:a3:5e:
                    d6:04:8d:a0:e6:6e:46:9d:e1:bc:b9:e5:c1:a2:6c:
                    9c:b6:17:3a:c2:19:d6:46:18:3b:bc:31:1e:52:5d:
                    85:26:ff:02:4e:c4:03:80:58:19:75:94:11:b4:70:
                    05:24:34:b2:32:42:4d:7c:d5:49:21:73:50:20:4b:
                    b6:09:5c:41:41:00:bb:3f:5d:87:ba:70:78:b1:21:
                    cc:44:24:19:06:68:fd:69:b3:18:64:17:36:73:d1:
                    81:8e:23:1b:31:69:bf:75:45:c0:46:06:0b:72:07:
                    69:f4:50:c7:38:7c:2f:3b:34:40:77:07:92:03:a0:
                    ee:71:06:11:72:4e:01:80:18:56:89:2c:21:bd:90:
                    2b:19:55:62:af:e6:60:76:29:00:e8:53:0f:a5:ec:
                    03:78:6f:e1:ea:72:29:2b:73:1c:df:43:ee:9b:de:
                    64:4d:6b:8a:b1:66:aa:16:35:29:92:9c:01:8f:2e:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:60:77:1C:47:7F:73:98:0A:B4:71:73:7E:52:88:DC:50:CD:86
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/485DCAA8418111F093EDEF69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:17:44:e1:59:81:8c:99:94:28:c1:57:cb:ac:3b:b9:72:
         cf:85:79:2f:5d:af:e2:9a:da:71:87:25:9a:a6:b9:12:b5:fb:
         1b:50:a8:d7:6e:e5:4b:20:ff:3f:f9:cf:ab:f7:ab:dd:30:d5:
         5a:cc:22:f4:70:e9:30:74:b5:52:3a:0c:0c:8d:f3:15:af:d9:
         44:cd:cb:70:eb:af:50:ec:dc:eb:a1:a7:30:26:bc:4e:4b:7d:
         ff:f8:7d:74:40:1e:41:31:eb:6f:64:aa:fc:e7:fa:70:38:a9:
         2a:95:0e:6d:55:68:af:99:e5:51:ea:ab:0f:d1:20:de:25:af:
         73:af:15:48:be:9b:ea:75:9e:34:a8:40:fd:da:03:6b:82:25:
         bb:e9:65:6b:e1:5f:dd:bc:86:a6:f6:5b:23:c3:5c:9b:84:01:
         40:30:4c:b0:ee:23:2c:99:dd:4c:99:1f:e8:94:ac:3d:1e:19:
         99:9d:9e:6d:95:fe:b6:6b:89:33:f8:38:27:48:39:57:48:dc:
         c7:fa:4a:1b:ca:75:d7:9e:d5:7c:fc:0b:8b:bc:59:a3:11:fb:
         4d:91:d9:68:3a:a1:59:c9:fb:7a:ab:c0:6e:35:c8:a9:dd:3c:
         3e:5c:90:48:c8:d6:81:15:65:8a:7a:d5:f5:b8:a5:24:41:8a:
         12:77:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:44:28 2026 by rpki-client