Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa
File:                     81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (raw, json)
Hash identifier:          wnVdG3tQEExhwFfmpCLAwbgBN9gJAE52Y8V7E+ybcug=
Subject key identifier:   86:E6:78:70:7A:A9:4F:C6:3C:97:A4:0D:11:3B:C1:31:2C:54:AF:BA
Certificate issuer:       /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Certificate serial:       0766
Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 22:42:34 +0000
ROA not before:           Wed 30 Sep 2026 22:42:34 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139592
IP address blocks:        103.142.32.0/24 maxlen: 24
                          103.164.6.0/24 maxlen: 24
                          2400:e5a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
        Validity
            Not Before: Sep 30 22:42:34 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd905a-4a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:71:c6:62:cc:24:29:d4:e3:b0:17:5a:65:
                    8b:e1:8d:83:aa:07:e8:bc:c4:9e:b3:d6:21:58:cc:
                    1f:aa:3a:b0:93:6e:f9:87:10:ca:6d:15:db:2b:63:
                    68:55:77:86:e7:a2:f1:65:d6:cf:51:0a:fa:15:96:
                    9c:ce:37:6b:64:e9:f6:f8:f3:87:c4:eb:0e:12:97:
                    b9:41:e7:dd:e7:e2:93:1e:df:46:e3:64:39:70:ff:
                    2c:6f:99:3d:cc:d7:76:27:92:76:35:40:1d:2b:51:
                    46:9a:93:1b:74:48:b3:b6:27:f6:21:f7:6f:dd:9f:
                    75:11:39:c7:f2:e6:e3:35:bc:3a:e2:03:61:54:c3:
                    2d:36:df:06:de:7b:50:b5:5b:eb:47:db:46:a8:af:
                    30:9a:b2:3a:f4:a4:6b:f6:70:8c:52:8f:83:25:f5:
                    59:49:e7:9e:df:d0:90:1b:12:44:7c:a0:6c:2f:f6:
                    3c:fd:2b:99:31:30:1b:d7:83:80:58:f6:d0:8a:be:
                    1f:50:74:10:22:bc:20:e6:87:c4:e2:09:8c:a6:53:
                    08:83:4c:2a:40:27:1a:76:9b:97:a6:59:33:07:5a:
                    f7:13:c7:c9:cc:3a:0b:88:3f:8b:ee:da:78:da:f1:
                    72:89:5f:f8:59:11:54:54:de:92:00:2d:31:41:05:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E6:78:70:7A:A9:4F:C6:3C:97:A4:0D:11:3B:C1:31:2C:54:AF:BA
            X509v3 Authority Key Identifier:
                keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.32.0/24
                  103.164.6.0/24
                IPv6:
                  2400:e5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:15:42:f3:8f:d2:4a:9d:aa:d4:78:24:7b:35:d5:a3:5c:7d:
         2f:18:da:0a:98:84:20:eb:f9:36:a1:3b:ce:9c:d2:87:dc:09:
         57:33:fb:fb:5e:18:70:19:41:20:91:8e:f5:6d:04:c2:a7:ff:
         0f:85:0a:f8:ae:2e:75:d8:b6:59:33:49:8a:2c:3f:63:78:14:
         d8:83:f7:38:34:26:47:7b:bf:4c:13:9e:42:81:ed:17:20:5c:
         9c:70:25:c3:db:0d:78:2d:9d:a3:7e:7e:cb:73:0e:73:0d:db:
         42:d3:4c:c3:ae:3c:dc:82:6b:0d:36:6c:cf:4b:f6:79:28:58:
         19:5d:ae:e7:8d:e1:7a:02:17:37:86:b1:1c:16:a7:d7:e1:8e:
         46:20:77:50:4b:c1:98:55:8b:a4:75:db:a6:07:e8:85:76:6f:
         97:ca:d3:7d:cf:cd:a3:ba:69:d2:43:8a:1f:98:63:dc:e0:b2:
         39:26:4b:a1:c3:d8:85:55:ce:e6:04:ba:d0:bc:c3:0a:98:2f:
         09:34:78:14:94:16:86:a1:4f:91:f8:67:e6:77:f6:44:01:df:
         45:db:29:f5:46:e8:ba:4b:07:18:31:3a:74:c8:88:33:84:5a:
         f2:fa:bf:b6:d6:49:4b:8e:08:4b:00:6d:86:09:92:0d:a8:cb:
         1c:46:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:47:50 2026 by rpki-client