Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/17751640250011F192DC095DB9833773.roa
File:                     17751640250011F192DC095DB9833773.roa (raw, json)
Hash identifier:          DBHQ67/774/B2H1i6/aJzjKS/WICHCleCoK8CNyi6t8=
Subject key identifier:   01:CD:79:08:F8:42:41:C5:8D:A6:12:49:70:FB:E2:FC:F4:4F:8F:59
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A87
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/17751640250011F192DC095DB9833773.roa
Signing time:             Sat 21 Mar 2026 08:29:35 +0000
ROA not before:           Sat 21 Mar 2026 08:29:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139692
IP address blocks:        103.115.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6791 (0x1a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Mar 21 08:29:35 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69be56ef-56a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:db:8e:3a:fb:8d:47:cd:95:69:17:28:18:
                    28:0a:fc:60:ba:dd:ba:27:e1:5f:cc:55:ec:66:da:
                    c4:9a:67:bc:49:3e:3f:b8:94:b4:44:51:91:19:d5:
                    54:75:3b:07:74:4f:20:f6:e9:57:fb:71:56:98:1e:
                    d6:21:32:02:52:d9:e1:c1:2c:1a:fc:92:89:b1:5a:
                    34:0e:4e:fe:06:e8:b1:75:5f:33:65:1a:9f:73:b3:
                    93:a5:13:86:81:c3:5c:d7:3d:64:94:d9:3b:68:f2:
                    5c:c7:26:9d:72:45:d0:fe:a9:7f:b4:9e:c1:fe:10:
                    fb:82:5c:9e:1a:b5:3c:2e:8c:2e:02:ce:a1:7c:81:
                    1c:4d:a7:fd:7b:9a:79:d4:c8:67:cb:1e:ee:eb:45:
                    2f:6f:1c:e3:b0:44:dd:c4:b5:87:ec:30:14:92:fe:
                    9f:f7:f5:a1:bb:0f:02:7d:6d:7f:76:78:ae:5d:fc:
                    cd:77:71:31:70:35:ef:c7:0e:2f:f5:a8:ea:88:57:
                    05:10:0a:8c:4d:49:bf:44:cb:27:e9:7b:0a:b8:9d:
                    51:f3:6b:de:8c:40:47:7d:8f:fa:05:b4:20:0a:2b:
                    1e:7c:2b:3e:ce:f5:c3:14:05:66:ed:a8:3f:f8:c8:
                    2d:16:f5:fb:a0:ae:1c:33:29:72:05:17:c4:cf:04:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:79:08:F8:42:41:C5:8D:A6:12:49:70:FB:E2:FC:F4:4F:8F:59
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/17751640250011F192DC095DB9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:29:22:da:dd:26:b3:02:5a:d0:91:42:73:d6:19:fd:f7:
         eb:c5:f6:0f:73:4d:94:c0:2a:10:44:7c:73:82:e9:15:54:7d:
         a0:fd:b6:9f:06:38:fb:44:94:31:c6:c3:08:d6:62:68:9f:db:
         d7:d2:a3:02:c9:25:f0:6f:c6:8b:97:ee:fc:64:03:19:53:52:
         0b:13:7c:b8:53:10:31:c2:50:4b:c8:90:09:a4:8f:98:c8:97:
         44:b5:d5:9c:06:c2:bd:f8:32:1e:38:0a:6f:e8:36:7d:d2:6c:
         06:20:4c:e7:51:54:ca:60:83:b4:5b:ac:c1:34:f5:27:44:3e:
         64:0a:bd:de:df:01:d7:c1:ad:d8:0b:ca:a5:1f:7e:9a:ba:ea:
         6a:5f:10:3d:f7:c5:03:52:12:71:6e:4d:fb:f8:a9:8b:55:b9:
         ae:54:1f:58:15:e5:31:87:57:ff:c3:ac:b9:d4:54:08:b5:2d:
         a8:26:60:96:f6:5a:6c:4d:1c:94:ed:5d:27:87:5b:f2:57:5e:
         e6:19:88:70:98:b4:d3:b9:79:4b:9e:f8:1f:da:40:c3:74:e2:
         16:aa:c1:d7:d5:ff:cd:f3:07:4b:f1:97:23:76:60:e3:77:d8:
         05:80:80:26:8e:9a:51:d6:30:61:38:c9:6e:50:64:0a:86:53:
         2b:b3:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:50 2026 by rpki-client