Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa
File:                     8320FBE8232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=
Subject key identifier:   64:12:3C:15:42:77:84:D0:52:E7:67:C8:75:2B:C5:FB:FE:D9:2A:80
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       086F
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa
Signing time:             Mon 24 Aug 2026 21:40:59 +0000
ROA not before:           Mon 24 Aug 2026 21:40:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138538
IP address blocks:        103.153.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 21:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 24 21:40:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cba6b-aea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:d7:79:37:e1:cf:93:62:cf:22:f3:b4:08:
                    54:c1:2a:78:ea:39:00:1f:8d:6f:3f:b9:f8:a4:33:
                    ae:6f:75:cd:82:ff:67:79:ac:58:5d:0b:ef:83:df:
                    e3:02:08:ef:d0:17:47:58:ec:d3:e5:63:1d:bf:0a:
                    a9:29:8d:07:1f:33:14:4f:7e:79:33:0e:3b:a2:f8:
                    44:17:e9:54:fd:5f:63:e3:43:f1:a8:41:dd:83:e0:
                    9b:f5:fc:81:30:37:7e:83:3a:a2:47:5f:76:8b:2d:
                    fd:89:30:15:fb:39:8f:c5:71:8e:be:f1:d8:df:6a:
                    2b:7f:8e:4f:f7:8e:ae:db:33:52:4f:7a:40:ec:1b:
                    f5:d2:c6:17:09:a7:b9:d2:30:a5:1a:3e:2e:b9:ca:
                    b2:8f:a5:1f:b6:18:30:f8:dc:8c:56:5d:fe:41:f4:
                    d3:96:61:99:df:e9:fa:1b:99:5a:4b:24:c8:bc:18:
                    64:f4:b2:72:fb:3b:48:32:b3:c0:dd:c4:75:f9:a9:
                    fa:54:7b:d9:a5:72:e4:36:a3:f2:76:61:e0:ab:66:
                    76:7c:ba:4b:ff:41:5e:65:6a:66:50:0e:a9:b5:0a:
                    c0:59:07:9e:23:4f:2d:0d:ae:2b:33:dd:e3:1c:e9:
                    0c:69:62:61:58:77:06:4f:db:64:af:d8:9a:4b:40:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:12:3C:15:42:77:84:D0:52:E7:67:C8:75:2B:C5:FB:FE:D9:2A:80
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:fe:f1:2c:a8:16:90:c8:26:f2:c0:17:20:82:76:db:92:
         71:0f:f3:de:a2:5c:25:52:cd:de:49:0d:8d:f3:95:79:12:96:
         0c:2d:37:75:05:ad:4c:1e:85:d4:4a:af:f1:13:21:70:22:1a:
         ff:68:5b:c0:07:f0:c1:ba:8c:14:bf:0a:ee:1c:f1:dd:48:e7:
         8b:e6:d3:b4:00:72:c4:35:72:61:e9:35:36:6a:e3:a3:79:68:
         8f:99:d1:b3:ca:cc:8a:8f:20:59:ad:60:4b:58:49:d8:41:3f:
         b1:92:ba:2e:3b:22:e7:fa:29:94:7b:ec:a5:70:cb:2d:78:ce:
         d6:e8:55:86:c7:aa:50:d7:e2:bd:4b:ad:0c:3b:fe:f5:c0:81:
         a3:7a:83:51:e7:a6:fd:c5:e9:c9:0b:62:75:34:4a:c3:63:39:
         5c:9f:05:9f:e6:11:f3:da:4b:a9:a9:ac:14:1a:d8:bf:cb:7c:
         0a:44:eb:47:75:78:80:75:d5:b8:a5:f2:e6:ea:9a:46:21:48:
         14:49:93:5d:15:fa:77:a1:94:77:8c:93:14:7c:a3:17:37:dc:
         76:4f:e1:7b:ca:63:9e:6d:11:4b:f0:b2:2a:98:7d:44:ec:01:
         b4:7f:ed:02:57:ba:68:3d:fe:c7:c3:a8:0b:d3:fb:55:c7:c8:
         04:93:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:28:09 2026 by rpki-client