Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/48AA7CB08BD911F195480F4B3311F970.roa
File:                     48AA7CB08BD911F195480F4B3311F970.roa (raw, json)
Hash identifier:          w3rYfTj+ciOe8jD0NvAZ3oFMxg/ZdSfRsmtQ+S2odpI=
Subject key identifier:   3A:BE:66:86:77:E9:C6:72:56:F2:0C:1E:02:6A:3F:AF:E0:DA:37:0C
Certificate issuer:       /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
Certificate serial:       01A4
Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/48AA7CB08BD911F195480F4B3311F970.roa
Signing time:             Thu 30 Jul 2026 05:41:17 +0000
ROA not before:           Thu 30 Jul 2026 05:41:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45353
IP address blocks:        103.175.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 01:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
        Validity
            Not Before: Jul 30 05:41:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a6ae3fd-167c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:56:4a:99:24:1b:54:c8:89:61:6f:20:a3:
                    cf:d3:5b:64:25:f8:87:00:4f:c1:f3:67:2b:3d:47:
                    d3:d4:24:26:9e:e4:95:4f:2b:9f:8b:3e:63:86:44:
                    76:a8:12:1b:a5:33:04:35:c9:7e:15:2f:49:ee:b0:
                    e0:70:0b:6d:1e:b5:1a:27:04:6a:fc:b4:cf:62:ef:
                    62:a6:9d:64:72:02:73:b0:2f:3d:63:ca:a6:f4:83:
                    bf:d0:ad:2f:63:d8:2a:df:43:f5:1d:98:c4:3a:b8:
                    82:25:d8:7a:71:bc:0a:b3:28:ba:14:90:8c:d8:0e:
                    06:cf:26:62:cc:89:f9:02:a5:6c:0c:9c:77:9b:6d:
                    76:24:82:93:c7:35:3b:a2:11:a2:26:f0:21:5e:af:
                    4c:d0:76:f0:ae:03:3d:bf:f3:29:1f:45:c7:99:e5:
                    39:9e:63:e3:4e:82:9f:d0:60:12:e9:a6:19:1b:38:
                    b1:97:4c:e6:f5:10:a6:76:7d:ba:e8:1a:8d:0e:9e:
                    c7:48:f2:15:ea:c6:7c:0b:d6:97:db:b2:13:f7:7b:
                    e8:7f:35:41:99:c0:d0:f1:22:aa:e2:02:f1:d1:97:
                    bd:96:13:46:b4:aa:95:53:43:a1:78:25:03:d2:95:
                    70:16:09:23:80:6e:63:8d:c3:75:0e:c9:5c:f3:ab:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:66:86:77:E9:C6:72:56:F2:0C:1E:02:6A:3F:AF:E0:DA:37:0C
            X509v3 Authority Key Identifier:
                keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/48AA7CB08BD911F195480F4B3311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:a2:9d:4b:d8:6a:aa:e9:0d:f5:ea:29:6a:2e:ae:8a:6f:
         94:0f:ae:95:5f:9b:51:06:22:f2:ad:79:ba:9b:1c:ee:ea:37:
         bf:84:3e:69:e7:0e:b5:76:93:c4:11:48:5a:f9:29:3a:71:39:
         9d:a2:75:1c:8f:28:c1:6e:39:02:39:57:6d:57:a4:a3:20:af:
         5b:9c:7c:49:76:cd:a1:6f:bd:53:49:f0:12:59:07:de:e4:09:
         fc:79:fb:6e:d7:0a:57:98:4d:bc:d6:81:ab:40:ab:47:2b:90:
         ff:33:93:1c:cf:71:bb:c0:c2:5d:53:d4:3e:02:a0:eb:9c:05:
         b5:84:1f:85:4c:ec:b8:53:31:e4:21:df:5e:1c:73:23:8d:6d:
         c6:74:36:da:6e:35:62:d8:30:ad:6e:7a:6e:15:8a:05:37:59:
         a3:ae:b8:b5:3f:35:c1:8e:b7:28:06:5a:5d:7f:13:ca:d5:b8:
         1f:c0:a8:03:50:7f:26:b1:8b:7b:6c:78:08:7b:b0:31:73:47:
         19:75:69:a8:0d:0c:57:bd:fd:85:72:a8:6c:e5:e1:1f:3a:38:
         84:60:10:bf:77:9a:39:c0:3b:32:8e:59:68:c8:bd:25:7b:68:
         f3:be:d8:9d:d6:ff:93:b8:e5:b0:df:36:26:ed:dc:d4:ed:c7:
         eb:c8:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:21 2026 by rpki-client