Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/5778FB08922911F1B1965EDD6A11F970.roa
File:                     5778FB08922911F1B1965EDD6A11F970.roa (raw, json)
Hash identifier:          vkT0Co848XgmWcMvxPBj3JvFfA8woQU/yLqI+8Rvtxs=
Subject key identifier:   6C:6D:85:B7:2F:00:54:F4:56:C4:17:6C:22:24:18:33:C0:73:EC:6B
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       0631
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/5778FB08922911F1B1965EDD6A11F970.roa
Signing time:             Fri 07 Aug 2026 06:29:28 +0000
ROA not before:           Fri 07 Aug 2026 06:29:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     402475
IP address blocks:        103.204.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 23:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Aug  7 06:29:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a757b48-0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:df:40:fe:92:db:39:2c:cd:b6:e8:b2:6e:
                    43:f8:9d:53:68:97:ed:e4:94:74:bf:05:2c:a2:9c:
                    66:20:24:37:cc:ae:8f:9a:57:cb:49:d8:f6:c5:ee:
                    62:0b:f9:55:bd:9d:68:02:20:b0:f8:0e:ab:d4:73:
                    59:1d:f2:50:04:2b:a5:1a:1c:e6:83:45:b8:d8:45:
                    57:46:30:8e:c8:af:bf:cf:3e:94:84:6d:dd:9e:aa:
                    33:fc:3b:ae:e1:d0:ed:58:8e:49:0f:51:bd:bf:87:
                    b3:75:0e:07:bf:d5:9e:cf:df:ab:f5:4b:76:6c:88:
                    27:88:70:94:02:24:f5:86:de:82:5c:78:1e:9e:bb:
                    c7:48:d7:53:bd:7d:0a:8a:16:f3:2b:73:f0:6d:92:
                    4a:6c:65:dc:ca:ed:40:c4:4c:04:e1:b0:a8:aa:16:
                    e9:2a:c7:1f:83:26:24:7c:84:69:c1:85:44:fd:a0:
                    ec:0d:6b:76:f6:e0:72:d6:58:db:14:aa:b7:ac:be:
                    5a:61:93:ad:a5:cf:4a:25:42:b9:9e:9f:83:04:af:
                    eb:4b:0a:7e:f3:02:9b:65:8f:d3:fc:3f:b6:c2:69:
                    a5:ca:0f:86:18:79:f0:dd:9c:85:91:69:1f:6b:01:
                    cb:82:5f:6e:07:7d:28:75:ce:3c:2e:0c:5d:c2:35:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:85:B7:2F:00:54:F4:56:C4:17:6C:22:24:18:33:C0:73:EC:6B
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/5778FB08922911F1B1965EDD6A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:19:5a:81:6b:25:b2:24:18:e6:81:a0:a0:7f:dd:5f:95:
         3a:6e:51:74:e0:0e:1a:64:9c:aa:e5:10:83:62:75:2b:e4:6d:
         73:52:53:10:44:b1:92:2e:1e:da:d7:0f:c6:15:66:04:fb:e7:
         0b:9f:92:b7:1d:a8:90:23:14:35:d6:a5:36:d8:27:31:30:8f:
         c3:a8:c5:05:18:0c:77:61:be:74:0a:08:cd:72:a5:13:67:6a:
         2b:3e:e6:be:19:4b:f7:6c:b0:3e:2a:a1:6e:9c:42:6a:15:dc:
         4a:f1:ac:a7:c3:4b:2a:41:6e:d3:65:66:29:46:0c:e0:38:07:
         fc:68:2c:01:7e:54:ed:85:40:57:19:c7:df:b8:e1:11:d4:89:
         54:90:8a:7d:3a:45:08:79:57:6a:5e:f5:92:01:0a:85:0f:e6:
         1f:df:e2:99:1e:cd:c2:16:31:aa:3f:79:1a:bb:ca:ee:13:23:
         68:50:98:66:5e:90:33:3b:68:0c:ff:8c:db:5d:3f:b7:a7:44:
         95:86:6e:b0:f4:0b:eb:a3:a3:54:b9:37:00:ec:e6:05:26:8b:
         b7:63:ed:d6:07:28:a0:96:8b:3f:8a:bb:5c:50:2c:1c:64:a8:
         28:62:f6:ac:f7:c5:7d:b2:e9:79:93:b7:ea:b2:ac:8a:0d:ca:
         4d:d3:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:40 2026 by rpki-client