Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa
File:                     EE28B64661D611EE9C66300EC4F9AE02.roa (raw, json)
Hash identifier:          S+Y8oP//RYaIR2kO19UxtIdNUz76sF0XE/tof0f/xOE=
Subject key identifier:   0F:EE:82:F2:82:A5:D8:68:DB:1E:94:CE:B2:5E:1B:8E:74:87:6E:55
Certificate issuer:       /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Certificate serial:       021A
Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 04:52:44 +0000
ROA not before:           Mon 03 Aug 2026 04:52:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140866
IP address blocks:        103.152.166.0/23 maxlen: 23
                          103.152.166.0/24 maxlen: 24
                          103.152.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
                          rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
        Validity
            Not Before: Aug  3 04:52:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a701e9c-c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:ff:fc:5f:b0:2d:39:08:28:77:7e:c5:fd:
                    5c:61:35:42:07:c4:47:b4:7b:36:23:71:35:7e:84:
                    eb:6c:da:e8:99:7b:94:69:4f:96:64:49:f5:f2:29:
                    51:5e:fe:d7:ae:f9:53:40:be:2f:65:d8:73:bc:f9:
                    d2:8a:c9:14:2a:34:2d:70:87:95:8c:12:a1:5e:30:
                    63:06:de:bf:ad:18:29:0e:8c:bf:8e:d3:a5:d5:86:
                    d2:86:56:6f:f7:4f:fa:d8:84:10:ef:2c:d7:a8:2c:
                    73:82:c4:63:97:2f:4a:da:9c:2b:34:44:d3:79:45:
                    a8:97:c6:e7:c9:02:cb:94:c4:aa:3e:26:25:66:21:
                    2c:4c:b2:3b:cb:51:59:29:80:c9:c6:52:42:79:6e:
                    ec:ed:56:55:03:5e:b1:79:29:d1:4e:9e:b9:38:39:
                    cd:b7:31:dc:f3:42:5a:25:91:a4:55:fa:e0:db:cd:
                    d2:99:a6:9e:d5:34:1d:dc:80:93:1e:07:02:7b:39:
                    00:6a:bb:af:b4:c5:6d:fd:55:e6:fd:b0:e2:ed:4d:
                    9d:41:e8:93:3e:b8:15:b7:3a:c7:49:57:b4:f2:4f:
                    df:3b:6b:81:f2:7c:49:73:23:95:92:52:45:36:65:
                    1a:d4:0b:cb:15:a7:7a:31:fb:bb:fd:e0:13:f1:2a:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:82:F2:82:A5:D8:68:DB:1E:94:CE:B2:5E:1B:8E:74:87:6E:55
            X509v3 Authority Key Identifier:
                keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:84:27:ba:de:87:e8:c4:6e:f5:2b:f4:ef:e4:16:e2:b1:35:
         12:5f:10:ec:07:d5:5f:95:85:c5:c7:a4:10:d7:ea:dc:72:6d:
         8a:59:5b:f4:1f:7f:72:8d:6a:7d:19:24:d2:73:07:a6:29:30:
         32:84:5d:8e:db:34:f6:32:6a:5c:cc:8f:65:81:4d:98:1a:34:
         72:99:ff:7a:74:d6:6f:e6:2e:7a:73:de:4c:54:4f:f2:5b:78:
         64:4f:4e:be:e8:1f:40:22:20:3d:18:a0:17:f9:d9:8e:a3:14:
         b1:2f:9f:25:11:94:2d:f7:e2:fb:c6:8b:fe:f3:83:a4:58:52:
         de:bd:8c:37:b7:db:fb:b7:c9:63:5a:89:4c:f6:23:14:f0:1c:
         b2:be:0d:9b:1e:e1:be:ab:ac:c8:dc:61:3f:ae:0a:5b:b5:f4:
         8a:30:41:35:bf:f2:e8:6d:cd:f0:33:40:57:49:47:db:6e:38:
         d3:af:af:5c:97:c3:c6:1b:11:a4:2e:14:05:93:db:62:f3:ae:
         22:f2:0a:cc:1b:a7:22:42:2a:6e:77:7d:5e:e3:4c:31:59:29:
         8b:65:bd:85:2a:dd:2f:1c:3f:39:84:aa:59:30:fa:69:82:eb:
         da:3d:f8:56:f1:0a:4c:99:8f:f6:df:97:aa:2a:56:5e:84:9e:
         63:14:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:02 2026 by rpki-client