Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/B0673A76A03F11F1B2499D913A11F970.roa
File:                     B0673A76A03F11F1B2499D913A11F970.roa (raw, json)
Hash identifier:          QbAiCgDaIA+i20x48YtNqs+AcxSkyOGToaGMFSA1seE=
Subject key identifier:   12:C7:24:00:CB:CB:EB:1C:C1:16:8F:1F:B7:53:06:7E:29:E0:A2:87
Certificate issuer:       /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial:       0252
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/B0673A76A03F11F1B2499D913A11F970.roa
Signing time:             Tue 25 Aug 2026 04:44:43 +0000
ROA not before:           Tue 25 Aug 2026 04:44:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.215.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
        Validity
            Not Before: Aug 25 04:44:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8d1dbb-80fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:5f:20:8e:5f:60:88:29:48:7f:be:28:6e:
                    29:93:72:3d:16:07:90:20:00:34:dd:9e:97:9d:e1:
                    f1:04:52:6f:96:d0:09:11:6d:b8:ee:7b:41:9e:b7:
                    6a:01:70:0b:b0:54:ae:25:39:37:09:c0:88:f0:8d:
                    0b:1b:d2:40:2b:ec:77:ca:17:fa:48:5a:49:f5:1c:
                    ec:0d:b4:70:e3:19:ca:df:d1:3a:ee:f3:af:ae:87:
                    a8:47:79:09:fa:06:45:57:40:15:47:98:18:ba:8d:
                    c9:0d:7e:ae:fb:60:53:8b:81:c4:b1:fe:7a:75:48:
                    0e:0e:07:73:a1:0b:f1:54:35:88:1b:e2:be:8a:24:
                    17:16:8c:9e:b9:33:36:58:39:de:27:79:c1:cd:e4:
                    20:4f:35:ed:71:84:e9:8d:d1:21:80:06:4c:a8:ab:
                    9f:59:c6:42:8f:16:71:d7:1d:d3:5e:11:20:a7:81:
                    7f:f8:36:39:16:1d:5b:b3:12:81:04:c6:fd:68:05:
                    85:a4:f0:22:38:49:46:73:0f:40:d2:9c:1a:cf:f5:
                    24:a0:98:d1:2a:7b:5d:a1:32:2c:50:2b:4a:65:a3:
                    45:24:9a:88:ca:97:0e:c6:d4:eb:4d:c5:9f:6f:54:
                    07:02:95:f9:63:32:18:0e:f3:eb:d7:b8:bf:15:42:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C7:24:00:CB:CB:EB:1C:C1:16:8F:1F:B7:53:06:7E:29:E0:A2:87
            X509v3 Authority Key Identifier:
                keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/B0673A76A03F11F1B2499D913A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:c0:39:40:ce:90:5e:a6:2e:28:ea:72:5c:fc:3c:ef:3e:
         d9:0e:5b:1b:28:11:3d:70:27:9e:6d:a7:c9:ce:b0:52:b1:dd:
         58:36:16:01:ac:d7:46:7f:c7:7f:c6:29:ca:c9:e4:84:9c:64:
         af:33:50:69:65:b4:a0:fb:ea:5d:7b:9a:c3:9a:02:85:2e:44:
         40:08:b4:4f:8a:cc:34:33:31:09:ec:66:d1:94:28:4c:f0:e4:
         b2:ec:ba:ac:42:ef:b4:d8:fd:0a:1b:ee:ec:f0:02:c4:ef:7a:
         32:de:a7:37:43:0b:5a:1b:ec:e3:a1:f3:74:ba:8c:a9:41:c0:
         a5:51:5f:94:db:d1:70:1e:14:7e:66:5b:59:cd:ec:e8:5e:10:
         32:c0:75:7f:65:60:6b:a2:e2:9d:6e:89:7a:c5:5a:ad:ce:ac:
         16:18:82:e9:c4:8d:a0:74:e7:14:db:be:98:02:49:b4:69:1b:
         1e:20:2b:8f:a4:41:a5:d0:35:dc:ae:29:c5:e1:8a:d6:5e:0c:
         89:be:75:c6:21:aa:e5:66:b5:65:9a:f5:e9:c2:31:7b:69:07:
         c2:71:4f:a9:53:0a:bd:13:8e:64:0e:bf:fb:3d:00:3b:ee:06:
         3a:1b:c3:3d:d2:5a:bf:51:b3:a0:31:60:1a:9d:5f:8e:37:a1:
         c0:d4:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:15 2026 by rpki-client