Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
File:                     81F4D4289D0111F1865FC6F93911F970.roa (raw, json)
Hash identifier:          vNilSf2o8MEDUb8Bu0Eq8/tkof/0XsYv/JowiUpP2c0=
Subject key identifier:   76:EB:E4:45:84:5E:20:37:C6:DD:BD:78:C3:38:AB:61:3A:7D:49:1C
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0C1A
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
Signing time:             Fri 21 Aug 2026 01:42:03 +0000
ROA not before:           Fri 21 Aug 2026 01:42:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        203.78.132.0/24 maxlen: 24
                          203.78.133.0/24 maxlen: 24
                          203.78.134.0/24 maxlen: 24
                          203.78.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 18:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Aug 21 01:42:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a87aceb-d0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:20:ed:9f:80:34:34:a4:13:a0:89:a3:6e:
                    b9:f7:ff:2d:ca:5f:bb:1f:9e:c7:42:0e:79:0c:1a:
                    0e:ad:17:aa:67:a4:4c:b0:62:e8:52:a0:2f:3d:d5:
                    15:3d:e0:f4:15:d5:63:bd:b5:be:2e:99:41:bf:e9:
                    ba:76:93:a3:14:0c:bb:17:55:98:cf:9b:b0:23:52:
                    bc:32:01:cf:7a:04:27:8e:17:61:c7:1d:65:b7:eb:
                    6b:ec:2b:d8:b7:b1:b1:f9:a3:66:a8:88:13:fa:ec:
                    6d:ee:ee:75:93:85:72:7a:70:ef:bc:71:2d:11:b6:
                    6d:88:34:32:39:df:63:e0:f7:86:c4:75:a9:d9:66:
                    e9:85:fb:24:5b:fd:b1:96:e1:cc:6e:93:a2:d1:cf:
                    30:49:c0:e1:49:d9:58:e8:56:36:d7:c3:6b:20:b9:
                    2c:a2:d7:f7:0e:66:aa:06:5d:1a:32:37:85:93:12:
                    98:fc:ae:bf:a7:9a:79:bb:b4:0d:bc:7e:72:bc:40:
                    3d:d0:96:8a:01:0e:6c:e4:95:69:e3:59:cd:51:c1:
                    dd:df:e9:7f:c1:80:6e:0c:c4:25:4b:ae:c0:c1:a5:
                    a7:c5:63:a8:44:e9:16:fa:98:a4:1b:36:ff:86:ad:
                    06:39:9a:78:7a:6b:0b:06:4c:7b:b0:8d:6e:fa:bb:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EB:E4:45:84:5E:20:37:C6:DD:BD:78:C3:38:AB:61:3A:7D:49:1C
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:de:80:34:9b:eb:c8:21:ef:08:5b:fc:c7:0d:9d:24:a5:
         4a:e2:b2:ea:69:42:56:f7:59:86:b8:a5:d1:44:aa:06:a4:e5:
         78:3e:7e:cb:be:4e:c6:68:fc:aa:15:e9:ef:00:7d:46:64:71:
         0a:a7:56:a0:ac:aa:28:44:e7:93:da:2d:34:f4:dd:af:84:34:
         40:ea:2d:af:f1:62:16:b4:91:01:38:3a:ee:f9:b5:22:af:ba:
         57:aa:1a:17:01:24:13:9c:7b:29:20:60:ce:4d:74:8a:8a:dd:
         08:fc:c8:9a:59:56:1d:d3:54:6b:81:ff:5f:10:52:31:16:b4:
         12:66:6d:e7:86:a3:70:81:6a:dc:c5:37:8c:c1:51:ab:f5:ee:
         9f:44:7c:69:ce:14:d1:ef:66:eb:b9:2e:e8:a7:f5:98:e5:1c:
         0d:45:6d:99:68:28:29:d0:05:17:af:f4:df:b9:e3:5d:68:d9:
         c0:b1:56:c4:d2:07:73:b0:e2:05:20:32:f2:f0:cf:47:29:f2:
         bc:0d:de:ad:00:db:21:57:97:72:68:3d:59:1f:49:56:b2:6b:
         c2:18:ee:f8:a1:1f:80:9c:06:37:b7:2d:4f:39:ed:96:05:35:
         2b:bc:37:3e:16:3b:69:b6:6a:76:0f:a3:4f:40:73:01:ac:36:
         7d:cb:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:24 2026 by rpki-client