Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
File:                     BB250202BC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier:          mH/kM+3rqWh6tWSsikS5qDnxx87ieq8dd2YHV0YNADM=
Subject key identifier:   33:8B:01:68:1F:65:D6:B4:8F:23:9F:C3:7B:5B:CD:AD:15:27:7A:82
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       09B6
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 20:40:38 +0000
ROA not before:           Wed 02 Sep 2026 20:40:38 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.240.80.0/24 maxlen: 24
                          103.240.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep  2 20:40:38 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9889c6-7078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:7f:61:aa:77:55:b9:18:07:59:c5:84:f2:
                    b4:0a:dd:b0:8e:aa:74:ef:94:dc:db:44:c2:11:ae:
                    74:5d:7c:75:b2:a7:73:83:ed:8b:fe:79:7d:e2:c6:
                    95:75:6b:b7:5b:6e:74:b2:62:17:00:f4:33:0c:2f:
                    58:3c:59:6a:8c:b3:cb:3a:99:20:68:be:df:52:a5:
                    19:1d:81:7d:83:52:76:b7:8e:97:22:d0:13:f7:91:
                    9e:bc:b6:b5:93:3d:73:eb:81:ec:dd:3a:e1:f0:37:
                    98:e8:b9:d0:2e:7c:79:97:f4:68:fe:87:2a:fe:f3:
                    b5:e3:e9:41:46:dc:f6:fd:cf:cb:35:67:cc:73:6e:
                    6d:12:ec:15:a7:b5:b0:e1:ad:d5:be:51:2a:19:a4:
                    e6:eb:e4:5f:75:3f:75:2f:37:37:a6:5d:4e:6b:63:
                    ab:ca:d4:ab:0b:b7:72:18:a5:d5:29:d2:ab:a0:15:
                    97:2e:4d:c4:67:80:64:fa:a0:18:28:f2:7a:4a:7e:
                    2b:a6:71:ae:79:6b:33:e1:24:23:67:31:ab:89:98:
                    2a:fe:f7:a5:fb:5e:a6:47:4e:90:23:5a:20:f8:2b:
                    ca:a8:c6:93:98:77:cd:18:a1:b2:28:cb:d3:a4:ba:
                    e9:d5:ec:a5:16:eb:33:be:72:52:0e:f5:d1:b4:55:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:01:68:1F:65:D6:B4:8F:23:9F:C3:7B:5B:CD:AD:15:27:7A:82
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.80.0/24
                  103.240.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:9b:b1:d1:66:1b:f2:4f:64:ea:d3:71:77:53:a1:c1:6a:6c:
         24:8b:3d:a8:3b:8f:a9:b7:0f:f9:a0:f9:42:88:0e:c5:60:65:
         6f:80:3b:d1:cd:b5:d7:57:f8:d5:b2:5b:8f:e2:05:bc:71:e1:
         20:ce:ab:e6:36:32:6f:e9:a3:90:4f:6b:20:cd:18:eb:9e:0e:
         87:d2:60:7a:4c:4c:f4:54:5c:26:26:9d:b3:ff:1c:54:fb:ea:
         eb:17:3c:59:f9:b0:26:e2:c0:86:c2:63:93:f4:39:81:97:79:
         e2:b1:37:b9:75:d0:e8:73:4d:1d:3d:51:58:8a:e0:50:39:5f:
         57:b7:b7:b7:1e:d3:e3:e1:0f:f8:df:86:73:2f:aa:f3:89:d3:
         bc:87:2e:e5:a1:8d:c0:9a:8b:fb:93:ee:3d:0e:b3:6f:91:48:
         71:d8:51:44:bb:52:5c:2e:96:d7:46:27:c8:80:2a:00:52:53:
         21:2d:8c:59:f1:d9:c0:4d:54:44:c2:cd:63:53:72:07:e5:fb:
         61:8a:09:08:12:52:99:49:76:de:f1:79:80:ea:4d:fe:73:2d:
         a4:4d:07:8b:6e:64:0c:23:2b:5d:ce:96:d8:e8:ef:19:ec:cf:
         39:ba:1b:a1:02:a2:47:64:1f:80:a3:14:14:4d:c1:ab:62:d4:
         ae:5f:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:05 2026 by rpki-client