Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/4BE5757097E511F19253A8476911F970.roa
File:                     4BE5757097E511F19253A8476911F970.roa (raw, json)
Hash identifier:          kp1Hz7ncHNN2Q2V/Opxr60e+iP8FHQPNukxZnZrbqQU=
Subject key identifier:   82:A2:19:98:AD:46:F8:0A:46:65:B1:29:76:B5:C1:14:5D:D3:A5:38
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       0C15
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/4BE5757097E511F19253A8476911F970.roa
Signing time:             Fri 14 Aug 2026 13:37:30 +0000
ROA not before:           Fri 14 Aug 2026 13:37:30 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        103.123.32.0/24 maxlen: 24
                          103.123.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Aug 14 13:37:30 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7f1a1a-7f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:94:e8:1d:30:df:bd:cd:bd:f8:ec:3b:90:
                    78:0a:13:5c:f2:1b:9e:1e:7d:2a:a3:69:aa:ad:9a:
                    f7:05:41:7d:4c:24:1f:b3:0e:5f:e6:4c:73:bb:48:
                    4b:2f:eb:2e:0f:9f:d4:a4:2d:2e:cf:0f:08:81:a4:
                    bf:d4:bc:dd:cd:7e:7a:d5:67:8f:bd:8f:60:bb:a7:
                    50:dd:86:3a:56:04:9a:45:a7:a3:e4:ca:2d:ac:04:
                    89:57:f5:cc:2b:6f:ef:ed:5b:de:f7:bc:18:5e:69:
                    6e:33:79:fd:55:66:93:8d:3e:ce:65:9b:65:c1:e7:
                    d4:ec:e5:83:d4:e1:db:5a:fe:4d:8e:77:5c:00:07:
                    84:d2:b8:5c:c0:74:be:24:cd:f9:75:e5:79:c0:9b:
                    95:bf:63:74:20:30:0b:98:2c:54:45:e8:ac:d9:c7:
                    94:f4:a7:12:b1:2c:89:12:48:1c:79:cc:69:b1:10:
                    b1:bd:4a:cc:30:91:3d:10:6f:75:63:57:ef:a4:73:
                    01:dd:71:da:fb:ec:28:74:0e:2d:f5:c5:21:a3:18:
                    8d:d7:0c:d9:43:93:74:40:d4:89:26:0b:79:e2:03:
                    4f:07:91:67:57:bc:28:df:53:50:3b:0f:06:45:22:
                    e3:be:de:33:f2:37:52:4c:e1:a7:04:0a:4d:39:13:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A2:19:98:AD:46:F8:0A:46:65:B1:29:76:B5:C1:14:5D:D3:A5:38
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/4BE5757097E511F19253A8476911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.32.0/24
                  103.123.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:1d:94:b2:2e:11:90:7a:21:19:70:13:0a:45:cd:33:75:
         fe:99:82:f6:de:20:28:46:2b:7c:d2:16:8d:61:ff:4d:b4:e0:
         d5:01:08:c0:7f:11:23:16:6f:01:16:64:7d:9e:2a:16:3c:ac:
         17:be:43:91:91:18:81:75:54:5c:aa:b8:9f:3b:8b:ef:17:f1:
         11:46:29:36:d1:28:9a:18:9b:e3:ee:3c:86:04:c4:79:56:17:
         cd:f4:31:05:0b:e4:45:70:c2:6f:c4:2a:3e:28:71:7e:d2:35:
         ea:ef:62:c2:48:4f:c9:c5:14:71:7c:57:05:e1:eb:19:99:6b:
         66:d3:2b:8d:b6:ab:a5:43:80:8b:3e:99:04:de:15:d3:8f:27:
         33:1b:8d:03:82:ea:c8:df:7b:08:b0:b2:4c:9a:94:2a:3b:32:
         f1:02:18:c5:cb:23:d2:ec:25:a3:8b:27:66:b0:bd:16:ea:42:
         d0:b9:30:3f:3e:84:90:95:57:c7:6e:61:a8:79:04:a6:93:4c:
         b8:a4:91:e7:d8:3c:79:ca:c6:47:14:e0:80:98:c4:80:6c:2a:
         99:10:f6:8a:ab:40:37:6a:06:4f:b3:e5:a5:fc:52:3e:ef:06:
         be:ac:e1:99:22:aa:ae:e2:0b:8e:c7:87:79:6d:96:6a:3d:4a:
         af:0f:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:01 2026 by rpki-client