Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/E8AC04B286F311F1B8F66003A7EE528E.roa
File:                     E8AC04B286F311F1B8F66003A7EE528E.roa (raw, json)
Hash identifier:          gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=
Subject key identifier:   84:1B:09:8C:23:2F:71:2D:84:70:FF:A3:44:C0:A3:28:36:0F:6A:32
Certificate issuer:       /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial:       01EA
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/E8AC04B286F311F1B8F66003A7EE528E.roa
Signing time:             Fri 24 Jul 2026 00:09:16 +0000
ROA not before:           Fri 24 Jul 2026 00:09:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149172
IP address blocks:        103.177.196.0/23 maxlen: 24
                          2400:3d20::/36 maxlen: 36
                          2400:3d20:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
        Validity
            Not Before: Jul 24 00:09:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a62ad2c-71c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:a2:30:3c:7b:46:df:0f:0f:43:6c:2d:79:
                    8b:d5:b0:8f:3d:cc:93:4c:31:87:cf:1f:95:ca:8d:
                    f4:ec:59:ba:db:05:fb:fe:ef:43:97:6b:a0:47:e2:
                    01:d1:9b:ac:b4:ce:e7:94:a1:bd:6e:85:d1:15:f6:
                    11:c7:c0:e4:65:97:aa:58:6c:a6:d9:69:7d:a6:50:
                    7a:6e:7d:20:f3:81:81:cf:c6:72:8a:9e:33:d0:4a:
                    9f:2f:ba:e9:69:7e:6a:8c:08:52:7d:e1:73:00:ca:
                    69:ab:52:05:f6:9e:a6:6b:e9:e0:e1:51:a9:5c:4a:
                    ab:0e:9f:55:78:ae:a3:94:31:93:1b:ef:95:7d:1f:
                    f2:63:06:bc:69:e7:4b:74:9f:5f:a2:43:58:0b:be:
                    4d:76:bb:bc:3c:9f:c9:4d:d3:70:fd:da:20:e6:31:
                    4c:ef:7e:ae:4e:f1:30:75:e0:e7:62:90:0c:c9:a7:
                    cf:5c:d2:e5:52:81:32:d7:2e:61:9d:94:a4:8d:da:
                    7b:8e:e4:43:c8:7f:5d:21:1d:99:4b:6e:33:f9:4b:
                    17:59:e3:c7:b2:7e:4d:4c:5b:56:cd:1e:7c:c1:ce:
                    28:84:cc:fb:f9:a7:20:8b:a6:3c:ae:c7:1d:c5:54:
                    a7:53:14:c8:83:9c:13:dd:45:99:ec:54:7a:41:8e:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1B:09:8C:23:2F:71:2D:84:70:FF:A3:44:C0:A3:28:36:0F:6A:32
            X509v3 Authority Key Identifier:
                keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/E8AC04B286F311F1B8F66003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.196.0/23
                IPv6:
                  2400:3d20::-2400:3d20:10ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:d7:3d:81:b2:ab:eb:82:ab:39:3d:ee:46:71:72:aa:68:
         dc:fc:8d:6c:96:a4:0e:9b:a3:19:91:c3:75:ac:22:04:70:5b:
         4e:f1:26:72:34:40:a2:10:bd:3b:b1:90:02:e5:fb:11:80:ef:
         e9:7c:94:43:94:29:d1:fa:80:6f:74:f6:81:b2:83:86:20:f1:
         f5:25:71:15:1f:95:d7:00:2b:64:ea:cb:19:de:51:fb:0a:ef:
         1b:10:6e:55:fa:33:32:db:6a:14:41:1a:80:b2:b5:fe:73:fb:
         73:5f:2f:39:75:9d:61:76:56:70:62:e4:ea:be:10:53:fb:3d:
         c1:c7:03:38:06:f7:62:24:13:9c:dd:f1:7f:35:f4:5d:f1:64:
         87:c3:a3:70:a5:d3:cd:b6:27:d5:c8:c8:50:05:53:2f:a0:1c:
         46:aa:3a:3e:54:0f:de:1c:76:5b:f7:d9:73:0c:2b:3b:47:61:
         ee:8d:54:4e:02:08:db:3b:58:9a:fb:1d:57:dc:d4:ba:70:0c:
         15:09:92:17:09:35:1f:f7:fd:ce:97:94:53:ab:7a:9c:8a:31:
         d6:a4:b3:96:d8:64:90:ec:1f:62:64:78:c0:55:8d:c3:68:0c:
         c1:4b:b7:a7:1f:db:80:9f:29:53:69:72:3b:7d:44:3d:6a:6d:
         63:8c:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:02 2026 by rpki-client