Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa
File:                     1CDBD11CAE3711ECB61BED46C4F9AE02.roa (raw, json)
Hash identifier:          EDtbFOZ30qxpy27dyAdV7M2WWSG7NvMRonEndm53RCk=
Subject key identifier:   74:9E:81:10:18:4F:10:92:08:3D:4D:81:77:02:B7:59:32:D3:57:DE
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       0463
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 01:48:47 +0000
ROA not before:           Mon 03 Aug 2026 01:48:47 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.30.252.0/24 maxlen: 24
                          103.30.254.0/24 maxlen: 24
                          103.70.180.0/24 maxlen: 24
                          103.103.168.0/24 maxlen: 24
                          103.103.170.0/24 maxlen: 24
                          103.193.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Aug  3 01:48:47 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6ff37f-11ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:d1:83:6a:20:21:79:ed:1c:63:63:21:db:
                    a9:f4:2c:43:b4:a7:aa:4e:7a:f7:4d:a8:45:3b:df:
                    cd:b2:10:ef:c3:1a:e2:b5:66:1d:97:7e:2f:d9:36:
                    93:5f:fb:cd:a0:5a:23:a3:cc:ff:c7:14:31:ca:b4:
                    56:48:c2:ef:3b:f1:85:ff:8d:da:cd:cb:57:2e:3f:
                    b0:f0:c7:2e:61:85:29:5f:97:5d:d4:c9:95:4a:b0:
                    60:9f:6a:a9:fc:7e:b9:ce:54:c9:22:5c:b3:29:67:
                    1c:de:a3:7e:6e:0b:99:17:f3:6e:09:ca:b1:b8:a1:
                    d8:78:8b:41:ed:e5:f5:8c:67:f0:3b:cd:f3:21:52:
                    9c:ca:f5:73:1f:f0:df:14:87:83:d2:98:5b:3f:75:
                    05:66:e9:ef:98:b8:02:ae:5f:92:6e:9a:31:9d:e7:
                    ad:6e:6c:6f:d0:c4:eb:03:94:dd:2f:0a:85:ea:c9:
                    92:6c:e6:f0:86:67:ea:b4:4c:99:61:f0:26:a1:04:
                    f5:fa:63:aa:9f:c7:9c:ff:cc:ab:3a:93:be:e0:0e:
                    d8:db:9e:78:e4:46:4e:54:cb:ef:f4:a1:c5:5b:12:
                    d5:7a:bf:aa:ab:bf:91:c8:91:2b:cc:c2:ac:c1:4f:
                    41:ca:94:45:60:4d:8f:48:a8:a9:b3:b4:35:81:2a:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:81:10:18:4F:10:92:08:3D:4D:81:77:02:B7:59:32:D3:57:DE
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.252.0/24
                  103.30.254.0/24
                  103.70.180.0/24
                  103.103.168.0/24
                  103.103.170.0/24
                  103.193.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:8a:93:97:ba:be:9a:03:e5:aa:6b:a3:7d:f1:db:b2:ad:67:
         4d:33:d6:4d:7e:03:81:35:f3:e9:a6:24:c0:1a:48:7a:f9:32:
         3c:c5:62:ae:c3:65:b2:f0:e6:f0:0a:a4:e1:8e:7c:05:ce:d6:
         f7:58:6d:40:0d:5e:5b:5e:f7:55:74:46:01:7b:df:d4:5a:5f:
         4a:16:40:ff:d2:63:51:74:dc:fb:e4:bc:96:93:2e:1d:2d:6f:
         dd:25:65:b3:87:77:ed:e4:2c:9f:7c:df:ba:13:03:7e:95:d8:
         e5:2f:2c:51:88:57:1f:de:59:a2:c1:c2:ca:9a:c9:46:f3:a1:
         98:d4:60:6b:fb:df:48:b5:22:53:f3:f8:eb:c5:61:c6:d9:58:
         8b:fb:5e:d8:7e:8b:eb:59:63:8a:43:89:a8:67:8b:4d:3f:71:
         cc:fa:0c:aa:38:96:0c:5b:41:c1:f2:27:ef:a8:3b:f6:47:a2:
         8f:d7:75:4e:a3:00:7c:e7:58:f5:99:51:89:71:2b:10:bc:05:
         f1:d4:ee:69:b2:3e:a6:48:58:f6:a0:f4:53:c7:9e:a8:b2:de:
         9b:c9:2f:94:3a:aa:44:fa:78:8d:71:71:4b:c3:58:be:77:93:
         0a:fd:a1:3a:6e:c5:30:29:09:99:2c:f4:b9:7f:a0:b0:67:c1:
         bd:64:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:40 2026 by rpki-client