Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa
File:                     6127B9001FE711ECB8454E83C4F9AE02.roa (raw, json)
Hash identifier:          WXbttLnIbP2dS5ns2q85mnfryDdhOignXdZHx6svPT4=
Subject key identifier:   39:9A:E0:5D:4A:44:C9:71:E7:00:67:89:1B:8F:30:2D:1E:27:4F:34
Certificate issuer:       /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Certificate serial:       11DE
Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 17:20:28 +0000
ROA not before:           Tue 02 Jun 2026 17:20:28 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63992
IP address blocks:        103.58.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4574 (0x11de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
        Validity
            Not Before: Jun  2 17:20:28 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f10dc-ac92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:bf:8a:76:b9:f7:d0:8a:1d:0d:50:f7:e6:
                    ba:4f:8f:3a:c2:b0:d7:b1:df:46:64:17:a0:d3:f4:
                    21:fc:4b:ee:86:8e:c9:50:ff:bd:2a:86:17:27:be:
                    f5:f9:96:7a:8a:c3:66:ea:ed:c0:f1:aa:71:08:59:
                    ad:84:05:ef:e8:69:06:28:e6:a5:2f:f6:a9:f8:e2:
                    60:3e:9d:dd:d4:37:8c:f0:01:59:03:4c:14:fc:16:
                    64:5b:08:c0:23:c2:a9:b4:88:25:30:15:2f:2d:4b:
                    82:1b:be:ea:52:f2:a4:6a:f8:7f:90:e8:db:6d:79:
                    a4:cc:43:d9:80:05:3d:01:48:1c:e4:a1:99:61:f6:
                    09:d0:ce:4f:bb:53:26:eb:92:36:26:6c:e6:0c:41:
                    12:bc:d6:3b:a7:88:35:8f:3d:95:6f:f5:a8:10:e6:
                    92:f3:ef:ef:ff:e1:86:a3:a1:ad:b1:21:de:c9:7f:
                    f6:8d:b6:81:e6:87:ec:20:ad:84:74:c0:1e:82:40:
                    40:00:63:12:1a:7c:1d:c9:4d:f7:91:4e:48:b3:b2:
                    4b:ac:68:e5:1a:e0:ab:4c:f9:97:8e:29:b1:13:fb:
                    92:56:95:48:d8:02:21:d9:13:54:6e:5c:44:de:50:
                    74:25:90:56:9f:72:60:33:a5:8c:fd:89:49:ca:29:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:E0:5D:4A:44:C9:71:E7:00:67:89:1B:8F:30:2D:1E:27:4F:34
            X509v3 Authority Key Identifier:
                keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:b0:76:4b:b4:3a:3a:f2:6a:aa:be:db:73:4a:1a:ab:ed:
         75:09:09:f6:eb:2d:30:50:5b:dc:17:c5:88:bd:2e:cd:28:3e:
         77:d0:2d:5a:dc:97:39:46:60:a6:b8:1e:1f:b8:43:32:e3:22:
         e0:28:7b:f3:d1:01:07:86:ed:4b:cb:c4:7d:eb:39:27:d9:d3:
         da:a2:02:f9:c6:0e:2e:eb:1a:a7:64:b5:54:bc:a5:be:4a:ac:
         ae:c9:50:20:ac:53:16:84:35:6d:f0:97:05:2a:d1:88:2a:26:
         3b:b2:82:cb:18:4d:71:d6:f0:5a:93:55:c4:7a:0c:cc:05:62:
         bf:7f:25:b9:23:ca:c7:aa:e3:de:b0:6a:fb:10:76:ef:0e:5d:
         99:d6:15:d3:47:56:aa:75:16:31:7e:7e:64:2a:ff:c4:97:15:
         63:ea:07:84:d0:c5:f9:5e:a4:72:83:da:5d:75:04:7a:cb:72:
         38:f3:48:3b:ce:df:d2:09:7a:33:1b:c0:37:d8:75:2d:1c:c6:
         40:53:6d:06:9c:d3:3c:3c:18:96:d3:33:95:17:3b:00:79:ef:
         71:6f:eb:0e:41:13:e7:12:9f:b0:2e:1b:77:8c:97:97:0c:c6:
         19:61:5f:9d:c9:7d:e6:9a:ab:6e:dd:06:e2:4c:64:f1:46:67:
         13:a4:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:37:21 2026 by rpki-client