Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/B3110B8E5D6F11F181938A5ABF833773.roa
File:                     B3110B8E5D6F11F181938A5ABF833773.roa (raw, json)
Hash identifier:          88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=
Subject key identifier:   46:7F:B5:76:96:E1:D3:B6:0A:FB:68:F7:9D:8D:52:00:DF:32:85:7B
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       060D
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/B3110B8E5D6F11F181938A5ABF833773.roa
Signing time:             Mon 01 Jun 2026 04:09:35 +0000
ROA not before:           Mon 01 Jun 2026 04:09:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        103.204.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 23:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Jun  1 04:09:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a1d05ff-6a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:5c:0a:28:5b:49:6e:21:64:13:e1:fc:47:
                    a4:8b:ef:3d:74:94:de:a9:ad:ca:e1:94:82:45:47:
                    3a:c5:d5:5b:85:9f:86:65:15:b2:38:d6:45:8a:4b:
                    76:fb:ec:e6:d3:08:d7:69:9a:90:d3:1b:4a:3a:05:
                    0f:d1:0b:d6:3a:20:7d:d4:cd:9d:6f:60:93:19:b2:
                    1e:3d:3f:35:35:03:9a:c2:4d:c5:03:e3:1a:a5:d7:
                    b2:26:bb:39:ce:5c:02:b6:6c:6f:6a:ac:fb:58:13:
                    0e:26:2c:ce:06:e3:62:72:be:3a:f0:29:95:98:8d:
                    c2:c0:a3:ab:e3:79:e6:69:e0:23:7c:2e:e5:2c:84:
                    0a:d4:13:0a:14:1e:a0:66:10:1f:6b:d2:22:21:47:
                    2e:bc:8c:68:c5:05:2f:49:ee:87:07:bc:1c:e0:71:
                    b6:9c:e7:6f:7c:75:68:9b:5e:45:b5:64:10:2a:2e:
                    76:89:e1:74:71:35:2e:5f:ee:25:8b:7c:6e:0e:24:
                    9b:9f:96:48:9c:0c:c8:ad:eb:5b:ba:29:c4:e4:81:
                    4f:b6:e1:21:fc:3c:f2:b8:b9:96:9c:dd:11:05:d0:
                    94:54:c8:73:f3:fa:eb:29:93:32:4c:f2:4c:b7:92:
                    2e:58:d6:01:21:f1:f8:2c:ad:c7:62:9c:ad:c4:81:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7F:B5:76:96:E1:D3:B6:0A:FB:68:F7:9D:8D:52:00:DF:32:85:7B
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/B3110B8E5D6F11F181938A5ABF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:25:9b:72:f4:cd:1c:d0:cb:43:62:0c:43:10:d4:0d:0c:
         0d:08:21:5d:84:a9:48:ed:12:4b:7e:2a:cc:21:ab:d7:53:23:
         8e:d5:ef:13:4b:af:67:30:ad:78:7d:85:89:fc:6f:db:65:9b:
         37:53:f6:89:d6:f0:e4:cb:44:b9:7e:c7:66:02:87:b3:15:30:
         e3:0d:0e:75:a2:1d:ff:37:5c:40:4d:d9:bb:cc:b7:c1:dc:56:
         75:79:4a:8b:7c:3b:75:e1:bd:93:04:f4:d3:5c:4e:8d:53:bb:
         3f:22:9e:4f:25:7b:fb:ed:c2:ac:24:15:26:66:f7:af:d3:db:
         ae:6c:fb:a7:10:49:ca:c2:42:f4:9a:32:57:85:27:df:2e:84:
         3b:3c:c1:51:8f:23:04:9b:81:d2:4f:dd:a7:da:62:0a:b7:ec:
         1f:93:1b:5e:49:1e:ff:33:5e:b3:71:a0:1d:c4:49:e0:ec:9d:
         a3:02:47:27:6e:8b:d0:f4:b9:db:53:c9:08:4d:22:98:87:42:
         60:3d:ab:34:af:9b:d2:2b:ec:32:69:3b:13:e9:a4:04:b9:85:
         cd:62:2b:a8:77:09:49:a9:09:1a:1d:46:38:34:e2:13:9f:f3:
         b4:43:5b:c9:45:e4:33:01:6d:b1:19:d7:11:5f:5c:ad:a8:6b:
         95:9e:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:33 2026 by rpki-client