Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
File:                     5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (raw, json)
Hash identifier:          vkD0HPyQAf9lwCEzMqH+93Ib4tig40Fj/qtTMCAMdbA=
Subject key identifier:   F6:9E:BA:FD:A8:DE:79:BF:F7:11:56:EE:57:09:5B:A7:87:66:36:37
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       01CD
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 01:50:36 +0000
ROA not before:           Fri 07 Aug 2026 01:50:36 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140607
IP address blocks:        103.189.194.0/24 maxlen: 24
                          103.189.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Aug  7 01:50:36 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a7539ec-7125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:0f:73:95:4f:13:d1:2e:e1:06:7a:65:c9:
                    1f:7a:39:c1:49:d9:02:43:29:b6:39:b3:18:0f:da:
                    64:8e:f1:de:09:fc:55:e1:c5:13:9b:ef:d4:e6:ae:
                    a9:a2:fc:3a:d3:a8:c6:cc:38:da:66:2c:7f:09:0d:
                    7f:d9:b1:ae:f9:3c:8b:9d:2f:af:2e:22:e9:5c:47:
                    77:02:f3:50:7c:c2:4a:4f:a1:93:c7:f7:31:d1:e6:
                    46:85:e2:34:17:9a:ba:7c:8e:d6:1f:dd:d0:5d:31:
                    7a:ee:aa:ad:c8:f2:c0:14:17:58:fb:17:5e:6f:67:
                    7d:60:fb:7a:a2:3a:4e:55:c3:35:16:a9:73:5f:42:
                    fb:8b:30:01:f0:8c:19:4c:9b:da:9e:b9:a8:1c:6e:
                    31:b2:0a:2d:e8:f8:ff:c9:93:86:e7:d5:af:79:b5:
                    f0:d9:99:f2:b7:71:a2:db:af:d4:a6:86:95:8f:e8:
                    f1:8b:35:d3:06:d4:ea:db:4f:6e:03:b1:fa:50:bc:
                    d0:40:55:e0:91:a0:90:52:18:3c:eb:b8:27:0b:44:
                    e9:83:06:ef:15:11:83:9c:bc:d3:6e:f4:36:29:4d:
                    f0:a3:63:97:89:0c:74:a4:a7:10:35:12:ba:91:6a:
                    c2:15:e2:8e:f2:ec:ba:79:d0:a7:1a:50:cc:9c:9b:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:BA:FD:A8:DE:79:BF:F7:11:56:EE:57:09:5B:A7:87:66:36:37
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:0b:8e:f1:13:3c:b7:df:b1:65:80:6b:08:08:b5:55:c3:
         b6:cd:d6:a3:40:50:f3:f6:11:d7:60:fc:0e:7f:7b:c4:3a:16:
         70:4c:b9:2f:36:34:30:f5:f6:e3:43:37:04:9a:43:94:7c:dd:
         5d:f5:3b:33:13:58:d0:4b:6a:13:16:e8:80:9a:d1:fd:c4:4d:
         d5:f8:c0:30:6f:56:8b:3f:62:a5:3e:07:90:25:2b:37:6b:64:
         27:b1:19:01:54:f3:a1:27:35:c8:42:46:1e:3f:6d:45:d6:4a:
         21:d1:29:7e:b7:bc:60:80:34:28:91:a4:de:c5:34:b2:8b:99:
         a5:08:70:b4:49:2e:80:f2:4b:ba:e1:26:2b:a4:52:b6:63:bf:
         c9:07:e4:e1:07:b5:f2:80:ca:00:4b:7e:61:dd:d6:6f:71:e9:
         ef:9c:f4:06:ef:7d:28:4a:db:f3:7a:6b:d5:09:7a:b0:b4:f1:
         81:00:2f:ce:c8:b6:74:e0:41:17:d6:93:3d:b0:79:ea:31:6c:
         f9:e8:8c:1b:00:98:6c:92:a9:19:51:81:59:76:61:82:8a:cc:
         73:d7:36:df:e0:1c:eb:07:2f:21:15:29:2a:b7:5f:93:c1:56:
         b8:9e:fc:6b:c6:a9:9e:89:e7:2e:46:a3:f5:64:27:ad:73:bd:
         01:60:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:16:38 2026 by rpki-client