Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
File:                     86BB53D0105611EB85F56114C4F9AE02.roa (raw, json)
Hash identifier:          0FLsVFnSdoOS4qQiWQsx1o6McKf51GhqbIOg2OyHSDk=
Subject key identifier:   4D:C3:FA:1D:E6:73:73:03:D9:E4:21:50:9A:F8:FE:97:2A:52:FB:75
Certificate issuer:       /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial:       0860
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
Signing time:             Sun 28 Jun 2026 21:26:02 +0000
ROA not before:           Sun 28 Jun 2026 21:26:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136556
IP address blocks:        103.92.160.0/24 maxlen: 24
                          103.92.161.0/24 maxlen: 24
                          2001:df1:2500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
                          rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
        Validity
            Not Before: Jun 28 21:26:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a41916a-29e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:f9:6a:5a:50:11:3a:c1:75:0a:00:37:63:
                    88:a6:d7:76:23:94:4c:d8:ea:1c:2f:9c:5b:89:59:
                    ea:42:52:e3:22:04:bb:ed:54:59:62:27:55:b0:ce:
                    88:d2:59:78:66:be:d1:7a:ee:a9:d1:37:f7:4d:ed:
                    76:c5:ea:73:bc:8e:6b:66:51:f4:33:ab:31:81:a3:
                    55:a5:3a:6d:fb:95:74:d9:44:2e:f4:29:1e:53:0e:
                    5e:70:0b:a6:8c:0b:5d:55:ba:69:f3:b4:59:37:29:
                    2c:c1:fc:2c:81:77:40:ba:b2:52:6f:01:aa:11:70:
                    8c:50:d1:d8:fd:6c:72:dc:54:6a:7f:99:80:23:9a:
                    3e:2a:c5:c3:b4:63:00:4d:f3:1b:76:1b:b0:b4:f5:
                    5f:1b:be:e3:22:fa:33:b0:aa:c8:92:db:08:8a:70:
                    34:01:81:7c:ce:0d:b1:88:97:6c:8b:ed:d6:a8:f2:
                    1d:10:e3:64:90:78:90:56:b6:27:ec:b7:1e:77:d0:
                    20:18:02:f3:1b:44:61:67:39:a5:2a:d3:21:b6:ca:
                    f4:f7:4e:01:b7:00:38:c1:41:09:92:f3:07:da:72:
                    52:ae:3c:33:64:cc:f7:7a:97:ff:56:95:6e:10:45:
                    94:af:aa:8d:c1:51:c1:f9:77:87:8d:a0:a1:56:20:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C3:FA:1D:E6:73:73:03:D9:E4:21:50:9A:F8:FE:97:2A:52:FB:75
            X509v3 Authority Key Identifier:
                keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.160.0/23
                IPv6:
                  2001:df1:2500::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:98:20:30:c3:26:94:03:32:db:8d:ea:e6:b8:46:d2:80:
         a4:ce:a9:91:07:d6:63:f3:0c:84:bf:d4:58:15:c6:3a:f1:33:
         9c:98:ed:2b:30:1a:d2:bf:79:0a:9d:2e:10:e2:94:a4:7b:ed:
         c5:f6:6a:95:41:15:bb:2f:02:79:14:22:1e:6e:4f:81:83:76:
         b9:a0:21:f7:fe:4b:56:eb:e8:6e:6b:86:47:d7:60:52:1b:b9:
         4b:f2:ab:f2:91:b6:7c:03:ca:e6:67:3d:9a:a8:08:5f:b5:be:
         0f:66:1b:fa:03:74:fd:3c:c3:bc:fb:f6:5a:44:39:30:13:23:
         62:c0:10:9d:1a:2d:11:f4:b8:36:a4:31:90:a6:18:c5:ad:9e:
         7b:38:af:49:96:69:7b:10:8d:82:4a:23:0f:f2:ee:2d:ab:2d:
         27:7c:6a:27:0f:57:03:d3:1b:2a:45:aa:e4:b6:ed:97:3e:a8:
         f6:5b:08:2d:7b:f6:19:ed:eb:5b:7a:82:33:78:0f:fa:00:13:
         31:a3:1e:67:2b:34:4d:b9:71:77:3a:29:6f:7c:ae:e4:90:f9:
         3c:54:79:7a:7b:01:82:e2:76:40:7b:47:5b:4d:82:39:8e:3e:
         10:04:ed:fd:fd:30:d8:54:a1:05:d6:b7:7c:33:6e:c6:a8:79:
         79:b1:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:08 2026 by rpki-client