Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
File:                     41D7A1D4AB0511F0AD64C814C4F9AE02.roa (raw, json)
Hash identifier:          DydiRYH9005xhSjsyzzoBVZ9XTTN65dbbr2Txr1j+ag=
Subject key identifier:   65:C0:7C:39:59:86:93:43:57:D7:72:7A:1E:AB:3B:A6:EE:AF:4E:72
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       A2
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 19:39:21 +0000
ROA not before:           Fri 31 Jul 2026 19:39:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38562
IP address blocks:        103.175.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: Jul 31 19:39:21 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6cf9e8-fa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:19:80:9f:0c:15:b1:0e:5b:d2:af:b7:de:
                    7f:26:a7:9c:a1:87:23:ac:2a:7a:30:e2:67:00:cb:
                    d4:e7:fc:b7:61:37:67:7a:67:cf:dd:b4:dc:76:fa:
                    13:0f:8a:46:62:a1:e4:f7:50:f8:24:c1:4a:bd:b9:
                    c2:26:7a:44:12:ba:80:80:51:6a:c7:65:35:f0:1f:
                    23:9e:94:be:10:4a:02:ee:fa:3d:2e:72:f0:74:ee:
                    98:c7:bd:6b:a6:82:d0:08:aa:b1:94:57:7b:23:bc:
                    77:b5:30:e3:24:42:63:ec:65:20:62:26:38:98:d7:
                    b8:76:76:aa:c9:2d:69:db:1a:ea:c5:0c:58:2b:48:
                    42:58:af:10:e1:ee:a9:b6:3e:e3:b8:9d:41:95:d0:
                    8b:a2:8c:60:7e:b2:8f:26:3b:3c:10:19:25:7f:fa:
                    bc:e2:03:94:32:04:9e:9c:0f:5a:ed:fe:c8:2d:7d:
                    77:3c:e0:35:01:d0:64:1c:74:9d:41:13:8e:1f:26:
                    bb:da:f2:0b:3e:bb:06:66:8a:09:a9:d3:0b:58:98:
                    ac:23:78:8c:27:10:0a:c4:bf:c1:f9:5f:39:d2:9b:
                    d7:9a:05:64:24:be:1c:b9:84:dd:75:63:c6:a2:42:
                    ca:d2:73:22:fe:7b:f1:f3:04:ff:18:24:c8:9a:7a:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:7C:39:59:86:93:43:57:D7:72:7A:1E:AB:3B:A6:EE:AF:4E:72
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:66:1e:22:a4:3b:7f:e3:5c:8a:43:72:cc:28:dc:b4:e5:3b:
         01:c0:b9:a8:38:b5:86:cf:2e:21:ae:d3:45:93:98:05:68:df:
         bc:8f:c4:31:27:84:28:98:c7:9b:cb:2a:88:e7:b4:4f:b2:ab:
         f1:be:44:a7:c7:44:e3:28:4d:70:d4:55:a9:15:d6:d4:c1:3b:
         41:c1:6e:70:f2:c9:33:10:9e:fb:b7:c5:d2:0b:80:65:24:4a:
         6f:ca:f8:cd:1b:bf:77:95:25:eb:12:eb:13:7b:1a:8f:a9:98:
         69:1b:df:c6:54:18:16:62:45:1d:2e:7c:6d:4f:a6:db:be:f5:
         5f:95:6e:da:a4:bd:03:af:7d:ca:ce:b2:ef:53:41:c0:a3:f8:
         c6:42:ec:2b:48:1e:74:b0:b6:24:ed:30:16:4a:f9:75:49:13:
         0c:d0:b3:01:6f:6b:44:fe:64:d9:56:16:ee:75:1d:13:7a:4e:
         5e:ce:ae:d1:89:df:71:8d:2d:be:dd:df:8d:b1:2a:fd:e5:4e:
         b6:0b:be:16:08:f7:2c:82:a5:a3:64:02:b8:93:a7:4d:43:ee:
         92:56:ea:66:56:46:26:25:df:85:5c:2c:8d:0d:8a:74:14:fc:
         04:97:fb:b0:98:5f:9f:e1:25:d9:02:54:df:f4:f0:0a:d6:0b:
         28:00:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:22 2026 by rpki-client