Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa
File:                     9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (raw, json)
Hash identifier:          /gvEqRmEcBBJsgYPjYvvjjFizcU0bI3zTeQb96cSavo=
Subject key identifier:   76:37:07:DB:2E:BF:64:E1:0A:73:E2:A8:C1:F0:0F:18:54:08:7D:7E
Certificate issuer:       /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
Certificate serial:       09EE
Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 20:39:38 +0000
ROA not before:           Tue 18 Aug 2026 20:39:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138022
IP address blocks:        103.120.32.0/22 maxlen: 24
                          2403:51c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2542 (0x9ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147
        Validity
            Not Before: Aug 18 20:39:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a84c309-180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:fb:f0:7a:0a:b1:b1:01:89:e4:e9:bd:2e:
                    10:51:a0:58:b2:60:f6:c3:17:92:d7:b7:a1:b6:5b:
                    27:ce:9e:ed:bd:61:40:0d:17:6b:c4:b7:ec:02:42:
                    1a:a0:5f:b5:b8:72:30:fb:92:7a:a8:78:4e:29:a4:
                    8f:04:e1:46:93:6d:05:48:10:c9:0b:9b:3a:e3:5a:
                    89:96:c3:77:0d:fc:4b:56:2b:ed:e6:05:da:fa:94:
                    3d:cd:d8:89:91:6f:80:71:fe:41:72:cd:1d:32:78:
                    55:64:2f:90:ff:9a:5d:09:a2:a5:bd:eb:e4:ff:aa:
                    8e:77:d3:97:40:5e:9e:5d:98:95:c6:42:84:77:1b:
                    21:87:b7:4f:00:cb:0e:8c:43:15:1b:16:11:8e:b8:
                    fa:5b:28:64:56:8e:e4:2f:81:1e:15:16:bb:9e:17:
                    d1:9b:3b:a3:04:b6:e5:fc:87:4b:88:36:22:da:ef:
                    14:0b:76:9f:f0:74:ad:e4:42:1f:9a:40:de:9d:82:
                    21:56:bd:a0:bb:77:5c:90:91:c9:26:e4:cf:3d:07:
                    f9:d2:89:80:68:89:5c:94:1d:17:99:b1:de:8c:13:
                    c6:d1:ce:92:97:d1:b3:ac:81:8c:b8:37:a8:dc:50:
                    bb:12:ff:0e:37:6c:f4:be:7e:39:fa:0a:71:ef:d0:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:37:07:DB:2E:BF:64:E1:0A:73:E2:A8:C1:F0:0F:18:54:08:7D:7E
            X509v3 Authority Key Identifier:
                keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.32.0/22
                IPv6:
                  2403:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:79:83:44:d7:00:b1:5e:30:09:ab:4f:11:6a:77:5c:3c:
         64:ab:91:1f:43:83:78:c8:9d:4b:d6:7f:39:c7:03:b7:55:d9:
         c8:f6:6f:6c:f5:08:ee:e5:bc:ca:ed:fc:c3:a5:3d:68:3a:02:
         47:9c:3e:30:10:17:e8:2a:4f:61:1f:fd:2e:25:a6:28:f7:df:
         98:59:18:ac:bc:14:32:de:a2:5e:3c:11:c0:39:f4:03:29:8e:
         aa:44:e2:43:02:ee:31:18:d5:ba:7e:aa:98:80:19:6c:f9:ee:
         1a:df:b1:15:60:55:57:e3:69:56:dc:12:cc:9a:25:0d:b8:4a:
         e5:26:d3:dd:b9:6d:d4:f8:fe:d6:a1:34:53:52:11:80:a8:7c:
         46:ac:42:8b:e9:b9:b9:9f:22:9c:e7:36:fa:7d:ac:81:c4:d1:
         17:2e:3b:cc:9d:b8:a1:ab:ce:62:50:9d:d0:67:8b:24:da:48:
         15:8e:98:a0:83:fe:43:5c:93:47:ad:d7:10:da:fc:13:40:c1:
         1f:66:f7:82:1d:77:5b:bc:5a:19:54:8c:5c:a2:60:43:4b:ae:
         26:90:46:ee:6e:e6:05:a1:50:bd:e5:0f:d7:5d:71:d7:9c:aa:
         2d:84:6f:d2:58:fd:3d:b8:17:5b:01:45:c6:1f:8b:c8:a7:b6:
         8f:d7:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:00 2026 by rpki-client