Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/A78C8AB896E511F195E2E0D45C11F970.roa
File:                     A78C8AB896E511F195E2E0D45C11F970.roa (raw, json)
Hash identifier:          y6k5gAl70xPgm1PdqA0djO2XSJUwhklLEIGZFO4hIJc=
Subject key identifier:   BA:2F:1B:12:C3:A9:33:EA:57:49:B1:44:EF:0C:A2:5D:54:AC:F5:D0
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       02A6
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/A78C8AB896E511F195E2E0D45C11F970.roa
Signing time:             Thu 13 Aug 2026 07:07:58 +0000
ROA not before:           Thu 13 Aug 2026 07:07:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        103.83.40.0/24 maxlen: 24
                          103.83.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Aug 13 07:07:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a7d6d4e-a01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:6d:0d:08:94:62:1c:91:a7:8c:a7:b9:10:
                    af:01:ca:08:ab:cb:91:90:e0:cd:1e:76:63:87:9b:
                    06:be:d5:29:66:ba:89:5d:fa:3d:20:42:cb:ba:d4:
                    32:4c:9e:69:0a:39:11:56:31:52:65:7e:94:78:72:
                    97:64:f0:0e:fe:7c:41:24:e0:1e:fe:31:45:68:41:
                    0e:af:a8:00:fe:a7:3f:b2:1d:a3:b8:1b:ba:89:6a:
                    55:44:1b:03:d0:1a:6a:75:00:5f:47:24:c5:74:4f:
                    4f:cb:3b:34:55:02:b6:61:ae:80:6d:d4:43:8e:6e:
                    81:5d:68:83:2c:e4:5d:e8:f1:12:2a:18:33:a5:43:
                    fc:3b:2c:fb:0c:d8:a1:ee:67:b4:3e:ab:ba:53:aa:
                    a5:3d:f2:38:e4:b7:c7:af:72:02:ff:34:10:7f:ba:
                    99:4d:06:da:d1:03:9d:91:87:72:59:d4:eb:5d:da:
                    a3:a2:68:6f:57:e4:5c:b4:f3:68:b6:3f:c5:d8:c0:
                    f1:82:e9:4e:30:38:f0:63:bc:d1:71:f3:8f:92:06:
                    b7:23:39:ec:ee:2f:8a:f1:12:87:e7:99:3b:5c:13:
                    03:12:96:a7:eb:01:a3:c6:b3:1f:bc:a7:50:3f:4a:
                    74:a6:fc:0b:db:8f:3d:25:b8:d9:58:da:a5:cc:93:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:1B:12:C3:A9:33:EA:57:49:B1:44:EF:0C:A2:5D:54:AC:F5:D0
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/A78C8AB896E511F195E2E0D45C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:67:03:50:ac:f9:f6:91:b2:af:1a:3e:16:59:c3:1b:be:
         f0:57:af:d2:26:6f:20:a8:e8:39:27:6b:dc:3e:93:1c:90:2c:
         0b:ef:50:e9:b9:75:77:74:75:6b:ae:8a:ad:05:c3:02:6b:79:
         c5:48:2e:35:61:ba:c5:74:c9:db:1e:20:96:d0:55:6d:9e:54:
         09:a3:63:b5:8b:7e:6b:9c:1a:bf:5e:56:cd:c4:c1:02:cf:0f:
         a9:f4:d2:9f:03:e0:66:7b:19:a0:3a:18:8f:25:c6:7b:53:fc:
         bc:5c:3b:3d:bd:8b:fa:5f:41:a4:b5:60:86:34:6f:7f:26:b9:
         9b:20:06:70:94:68:9a:aa:34:3d:cd:dd:f2:0f:51:86:57:a2:
         fd:2b:cf:6e:08:75:df:c8:81:e2:43:da:84:df:b5:02:c4:f6:
         d8:eb:ed:1c:1c:2e:7e:da:de:95:0d:ed:1e:7d:29:a5:c4:69:
         2f:f3:6e:60:f5:24:8c:3a:ba:b3:04:b3:ff:ec:1e:be:8d:06:
         3f:26:58:66:25:92:db:c5:96:b0:f0:01:30:8b:e1:d5:f9:db:
         03:62:92:eb:31:03:37:65:95:28:83:2b:7e:79:13:23:2b:9c:
         55:07:19:2c:93:16:3d:72:c0:c6:6e:75:87:26:9c:c8:1c:cb:
         20:af:24:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:12 2026 by rpki-client