Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa
File:                     20494A1A789E11F19E950C8485A30FBC.roa (raw, json)
Hash identifier:          8QkOo6DSuZrLANDcvUtTMwgZQm2ePeN8RKBM2E7THgU=
Subject key identifier:   74:75:61:DC:15:1F:B3:18:87:93:95:6A:12:7B:11:88:D4:FE:39:B9
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0760
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa
Signing time:             Sun 05 Jul 2026 18:19:57 +0000
ROA not before:           Sun 05 Jul 2026 18:19:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 22:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Jul  5 18:19:57 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a4aa04d-6229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:66:6b:3d:b2:fa:33:51:a7:8a:84:82:8d:
                    5b:74:22:38:15:6f:29:f4:3e:98:4a:0c:1c:a3:a4:
                    93:71:f9:9d:34:3b:17:72:e6:40:22:f7:8b:e1:38:
                    b7:cf:c8:2a:50:ae:49:36:6d:8d:34:07:8f:5f:60:
                    d1:8a:a8:5c:89:ca:16:e0:3b:4e:d3:74:0d:fc:9c:
                    36:f5:58:b4:f4:85:b9:df:e6:ac:ea:fe:e4:23:6a:
                    29:65:a3:74:1f:d2:a2:41:6d:f3:14:f1:74:da:79:
                    ad:c7:25:12:47:44:42:11:49:08:f1:4a:92:10:2e:
                    28:dc:93:42:bd:33:9a:1a:98:0f:b2:e2:2f:3b:e9:
                    fd:cb:d0:95:3c:f7:41:51:06:16:b1:c8:7a:91:39:
                    ce:61:c8:2d:f5:67:97:ec:3a:d5:ba:9f:12:1b:44:
                    b0:ec:a0:81:a5:c4:48:2e:03:ee:18:81:de:42:c3:
                    f5:8f:10:98:11:d6:0c:20:be:f0:68:0d:b1:45:0a:
                    a5:c1:47:71:64:4f:bf:87:28:d0:bd:21:6e:70:b6:
                    e0:51:6d:e0:bf:fc:30:6e:e5:bc:09:4c:c5:e9:75:
                    1d:2c:35:e3:8a:dc:e8:ea:10:c8:eb:61:84:70:49:
                    26:86:51:98:20:13:dc:63:f0:6e:8c:c3:8d:ba:29:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:75:61:DC:15:1F:B3:18:87:93:95:6A:12:7B:11:88:D4:FE:39:B9
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:dc:07:92:6d:8b:c9:40:45:2b:bd:99:5c:17:f0:65:b8:
         61:4a:76:10:61:29:22:a3:bd:16:c7:43:78:f2:1c:c8:9e:08:
         28:25:cb:af:78:15:41:7a:22:81:83:67:59:92:78:fc:42:db:
         c5:1d:d5:86:24:8e:c3:9a:9b:c8:8c:34:78:47:ba:08:de:4b:
         4a:95:3c:eb:4b:6d:40:ec:a0:ad:1a:44:32:d7:84:40:13:ac:
         09:8f:5d:f9:be:41:bf:64:75:74:aa:e1:83:43:a3:54:28:fb:
         59:ca:1e:c1:99:44:f6:83:2f:d0:26:3d:47:7c:49:d4:66:3e:
         7e:81:0a:08:77:c6:cb:06:6e:6e:dd:20:d6:b4:05:89:3c:e6:
         fc:0d:1b:e6:87:4a:46:16:c5:06:64:f8:5d:52:c4:6a:56:32:
         0e:79:bd:a8:a9:d6:a0:85:69:33:81:42:8a:c1:21:d9:7f:95:
         9e:71:01:7a:4e:e8:82:52:ec:0a:a9:fb:23:79:6b:35:e8:80:
         e1:1d:35:a4:6f:8b:fc:72:f3:c2:6f:8b:b8:dc:11:45:e2:df:
         80:c8:8e:30:e1:b4:da:b4:d1:cb:74:41:9c:70:67:6b:6d:2b:
         90:92:65:aa:af:cf:e8:06:ad:77:82:29:d3:e6:9b:ee:66:af:
         3d:64:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:53:55 2026 by rpki-client