Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
File:                     76D77AC4DEE211F08292771D536F56BC.roa (raw, json)
Hash identifier:          8hClCjbNy21w3USJNeeuU0mv1n4+eDnisCyB1VwLHZs=
Subject key identifier:   82:53:54:0D:00:FB:98:FF:A2:CD:D5:F7:D9:43:0B:F0:AC:90:B8:CF
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       019D
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
Signing time:             Wed 19 Aug 2026 05:55:18 +0000
ROA not before:           Wed 19 Aug 2026 05:55:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        45.121.215.0/24 maxlen: 24
                          103.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Aug 19 05:55:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a854545-8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:6e:1a:1e:3a:45:87:7e:7b:b8:46:6a:a3:
                    d5:c8:33:89:40:1a:03:52:a9:28:2c:a5:93:2a:28:
                    4b:fa:b5:09:0a:23:54:6f:6e:0b:95:48:f5:cc:cc:
                    4b:c1:15:82:d3:22:7e:17:41:1f:b8:61:7b:f7:57:
                    3a:d4:a1:c1:5e:10:5a:b7:d9:83:58:2c:a2:6c:26:
                    9e:a6:bc:d5:23:62:e3:8e:b4:89:67:e6:99:38:a2:
                    28:1f:8d:c5:98:84:a8:3f:4f:10:a6:80:81:7d:8b:
                    6d:49:40:19:f4:df:51:82:17:3d:8b:5b:20:ed:44:
                    27:24:0d:32:80:96:93:e5:3b:17:3b:98:6a:64:76:
                    75:6a:ac:ea:ed:1b:76:d3:a5:30:e2:60:dd:34:2a:
                    c6:6c:db:a6:6d:34:68:fe:cc:27:c0:59:9a:c9:66:
                    33:55:96:a6:9a:86:11:7a:db:68:d1:be:5e:5b:52:
                    a4:eb:bd:c3:31:9b:8d:80:ca:81:33:73:14:17:51:
                    86:09:f9:5a:e9:d7:13:90:65:67:61:97:78:a1:a8:
                    d6:70:8c:ab:4c:4c:f3:7f:e3:b7:c2:ff:01:be:c7:
                    59:d9:cf:62:ba:19:c8:79:11:c9:67:8f:59:54:8c:
                    24:6f:61:43:44:fd:7c:35:42:8f:f8:25:b4:35:45:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:54:0D:00:FB:98:FF:A2:CD:D5:F7:D9:43:0B:F0:AC:90:B8:CF
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.215.0/24
                  103.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:0b:07:b7:ae:52:ec:76:5f:d6:4f:c3:61:80:ac:53:f7:
         bf:72:02:51:65:3c:5d:a6:19:1a:76:7a:bc:57:17:76:e1:cd:
         82:0c:b5:ec:27:b7:fc:74:34:e7:42:3b:8e:f9:24:92:cf:cb:
         4e:45:ab:a8:7b:93:ea:9a:dc:b4:1d:b1:59:16:61:90:2b:88:
         e0:f4:0d:2d:c5:8e:1f:fc:d8:42:8c:20:9a:61:4b:1b:58:be:
         ef:07:27:9d:60:a7:ec:a8:29:cd:78:29:99:86:b5:0d:36:fe:
         2c:f2:b3:88:74:15:9c:b0:3b:2f:03:4f:e7:6a:53:ec:8b:6c:
         39:1a:97:08:8e:a6:b3:9f:4b:5e:8e:0d:bc:50:7f:91:61:5c:
         a9:7c:13:f5:54:37:5f:bc:e0:4b:61:eb:09:e0:f8:cc:6e:bd:
         9b:31:a0:f8:89:1e:1f:56:d4:c3:0a:b5:bb:48:a0:fe:19:7a:
         63:6c:e9:d9:6f:a2:89:b0:ce:0b:e2:46:1a:77:30:e4:fc:08:
         73:89:72:a5:16:be:da:fa:82:bc:22:a6:52:84:07:96:4e:b4:
         a0:72:05:91:3f:5a:bd:3a:b9:9e:19:e2:08:0c:cb:43:60:fd:
         f5:77:ec:ee:de:4c:3d:31:7c:c8:11:a7:89:38:70:07:4f:a5:
         13:90:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:19 2026 by rpki-client