Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/56929F3A948D11F1AE18FA4A6611F970.roa
File:                     56929F3A948D11F1AE18FA4A6611F970.roa (raw, json)
Hash identifier:          PbTtA8TcQhv6+ggsOF9mf81T8e6tyt2mjKGu8rIUdWs=
Subject key identifier:   46:B0:7C:7D:5C:EF:58:25:62:1B:B4:F7:14:C2:5C:86:DC:46:B1:BD
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       3565
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/56929F3A948D11F1AE18FA4A6611F970.roa
Signing time:             Mon 10 Aug 2026 07:30:19 +0000
ROA not before:           Mon 10 Aug 2026 07:30:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17553
IP address blocks:        103.10.104.0/24 maxlen: 24
                          103.10.105.0/24 maxlen: 24
                          103.10.106.0/24 maxlen: 24
                          103.10.107.0/24 maxlen: 24
                          202.124.205.0/24 maxlen: 24
                          2001:df0:9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13669 (0x3565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Aug 10 07:30:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a797e0b-e2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:5b:b1:c9:5a:fd:02:ea:ac:79:b9:b8:bd:
                    bd:30:7b:68:d7:21:dd:81:f7:35:fa:56:4b:27:c5:
                    2e:37:bc:93:3e:b3:62:0e:f0:36:c0:4a:3b:57:c0:
                    83:b5:6f:37:ae:51:67:3a:f8:79:ed:d9:e5:d0:d1:
                    61:77:4a:da:84:2a:3b:f7:b5:3a:b5:6c:50:ec:15:
                    65:56:82:00:55:ec:56:20:53:d8:5c:2a:13:f2:11:
                    4e:53:c3:20:4c:00:aa:ee:08:f6:b8:79:8d:9e:0a:
                    61:cb:82:b3:f3:a6:f6:6d:ef:24:25:4c:e8:c5:02:
                    58:55:28:5a:f6:6d:9d:84:e0:d3:66:f0:09:db:9a:
                    56:2f:b8:4d:45:65:df:fd:1d:bf:4c:53:30:40:05:
                    91:03:1e:14:8c:f8:2b:00:4e:3c:82:ab:ea:ff:1e:
                    8d:b0:2c:64:69:77:30:d2:94:fd:6b:1a:30:1f:62:
                    ba:20:31:be:3f:3c:3f:e8:7f:d6:a3:f9:74:49:94:
                    7d:51:5c:5c:0a:f5:ff:11:b3:66:0a:24:2b:1d:41:
                    4c:3c:fa:0e:e1:7b:90:82:51:75:d2:20:90:a7:64:
                    3e:2a:87:ef:f4:33:11:53:31:75:b0:ae:77:f9:11:
                    3e:3b:fd:3e:b7:4b:41:8c:81:b7:d5:ef:fe:4e:e6:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B0:7C:7D:5C:EF:58:25:62:1B:B4:F7:14:C2:5C:86:DC:46:B1:BD
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/56929F3A948D11F1AE18FA4A6611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.104.0/22
                  202.124.205.0/24
                IPv6:
                  2001:df0:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:ad:f1:b6:1c:92:11:46:e3:60:2b:69:3c:ba:bb:f0:12:ff:
         60:0d:db:d1:a9:5d:2d:03:cb:53:1d:4b:36:fa:ef:2e:e7:d0:
         e4:f3:5f:dc:f6:93:f4:95:bc:fc:3c:00:ec:43:bc:2d:51:7b:
         61:54:35:0d:ff:64:8a:92:e1:b2:b7:3f:34:77:9f:65:c3:2a:
         9a:15:8a:0b:a1:50:5f:03:30:84:3b:6d:d6:71:39:57:e3:84:
         6a:7a:2e:c2:a4:e2:69:80:9a:54:1c:e0:dd:14:5d:5e:8c:e4:
         74:92:8e:2d:80:e7:60:90:99:f8:85:bf:fd:3b:19:55:c8:06:
         42:97:e7:bf:e9:cd:46:95:88:a6:2d:9c:fd:ac:0f:0e:a5:04:
         fb:5a:9d:4b:2d:b5:bf:7b:14:fa:70:a9:db:98:5d:3b:ff:d3:
         06:32:d7:59:db:0b:28:ce:b5:a3:ed:a1:01:f8:cf:0d:32:85:
         b7:36:01:ad:53:5b:f5:91:3c:cf:67:06:19:ba:03:96:bf:74:
         c2:18:a8:20:06:fd:4f:3b:94:8c:c9:a5:49:8a:90:ba:02:75:
         e7:9d:79:c6:05:89:c5:ea:87:b4:2c:bb:95:fe:73:d5:2b:76:
         1c:b5:35:a1:0d:96:be:7c:5c:45:9c:c6:dd:b1:1e:03:25:c9:
         1a:70:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:18 2026 by rpki-client