Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
File:                     A074721624CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier:          ud4RqAynqteyGcYlwCRj/pI7/LcC6bbzv1nvzPS3nj8=
Subject key identifier:   6C:C8:10:C8:19:95:32:F7:00:06:F6:C8:A8:16:77:45:DE:C9:27:FC
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       01F8
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
Signing time:             Wed 21 Oct 2026 04:51:56 +0000
ROA not before:           Wed 21 Oct 2026 04:51:56 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134165
IP address blocks:        103.37.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 21 04:51:56 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ad844ec-7108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:92:6e:23:df:ef:d2:6b:d2:dc:01:00:f2:
                    d6:80:15:2e:88:97:58:ac:ac:47:8a:db:c0:fe:9f:
                    b8:27:b5:c2:1f:fd:22:90:ec:eb:d7:70:18:35:60:
                    46:72:ab:57:a2:1e:36:5b:f1:d0:49:90:5d:22:21:
                    ab:aa:59:af:f6:dc:c2:79:9a:45:74:05:a1:bf:bd:
                    c1:ab:d7:c0:d5:d3:1c:76:6c:e5:3e:ca:d6:13:bf:
                    86:e2:99:a4:4d:51:42:d1:d2:b8:96:14:0e:fe:3d:
                    57:a4:af:22:38:10:d5:c1:97:92:45:06:af:1f:01:
                    4d:0d:be:9d:0c:d1:5b:b4:c5:4b:ae:c2:e1:91:ff:
                    cd:65:b7:77:ea:7d:f5:5f:f7:8b:f5:4b:8d:fb:86:
                    d3:59:8c:a9:00:9d:96:5e:7b:41:b1:59:fb:58:40:
                    5e:8f:13:9b:7b:f4:28:f5:e2:18:22:d5:ef:2f:11:
                    bb:47:ba:9d:c6:47:1e:62:e9:bd:d1:eb:0a:f2:ef:
                    78:66:4b:4e:35:6f:9c:69:f8:64:92:8c:c6:53:11:
                    f0:95:38:48:25:1e:80:be:74:84:49:70:a1:d4:77:
                    7a:e1:96:da:10:c2:89:0b:69:cc:98:b3:58:2c:1e:
                    3c:6c:d6:f8:05:88:b6:42:8b:9b:de:69:cb:50:06:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C8:10:C8:19:95:32:F7:00:06:F6:C8:A8:16:77:45:DE:C9:27:FC
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:c3:5f:78:e3:6a:6a:fa:80:58:7a:87:f8:e9:83:82:55:
         da:6f:07:18:fe:cd:94:67:bc:2c:0a:2e:7e:1f:9e:73:e0:d1:
         8f:8d:02:5a:b1:7a:5c:43:2a:8e:01:88:ec:6c:bb:bd:e7:84:
         1a:47:06:2d:45:97:06:da:c7:0d:84:55:3b:53:30:ca:b3:a7:
         f4:1f:ef:18:37:10:42:a0:ac:7a:14:d9:f3:2d:fc:4e:5a:24:
         b1:77:fe:ba:e2:aa:03:6e:3d:72:7d:d1:aa:ba:73:d6:c3:e5:
         e6:3c:fb:bf:f9:69:1d:36:2e:6c:51:6e:e9:e4:d2:13:40:34:
         e6:bf:ed:22:6a:aa:f3:f3:65:bd:28:8f:90:6f:03:fd:10:a0:
         95:80:1d:73:7b:2d:ba:b4:f7:15:32:4f:69:1b:74:fe:02:8e:
         48:02:21:2e:76:d8:90:b2:a9:2b:67:0c:d6:78:92:3d:99:e8:
         7c:f4:db:51:6d:70:1b:07:e5:5c:55:e5:64:1b:fe:f1:4f:d8:
         7e:fc:d7:25:c5:e3:40:5d:f9:f7:3b:82:f6:4a:9f:c3:78:d1:
         e0:a5:ba:35:fe:6f:bd:39:19:0e:15:c9:bc:c9:30:cc:66:15:
         46:5a:2e:9b:00:6b:b9:9d:7e:96:2c:b9:02:cc:93:b4:34:05:
         c9:e5:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:41 2026 by rpki-client