Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa
File:                     27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (raw, json)
Hash identifier:          IQmFPZry2FQoQeGofQfwp5ZnQLtjkSdff4LphfeR4HU=
Subject key identifier:   37:46:38:DB:57:AB:73:A7:29:A2:38:4A:96:5F:BC:9B:0D:B2:56:E3
Certificate issuer:       /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
Certificate serial:       08D7
Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 20:42:11 +0000
ROA not before:           Sun 30 Aug 2026 20:42:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140986
IP address blocks:        103.154.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl
                          rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
        Validity
            Not Before: Aug 30 20:42:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9495a3-cfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:a3:44:80:22:34:08:f5:b4:d7:cc:9d:eb:
                    b7:93:a0:ee:c9:b2:45:be:b0:89:a3:af:98:b2:10:
                    2e:43:ec:84:1b:4e:e4:9b:6b:99:5b:b3:70:c0:53:
                    85:fb:56:72:b0:ce:ec:80:90:4b:0c:99:0f:76:cc:
                    69:36:9a:9a:19:9a:2d:2f:32:82:a8:56:52:15:28:
                    a5:a7:3f:ab:3a:63:b4:20:ef:da:aa:7f:ae:a0:f9:
                    e4:d6:c8:9d:f6:4f:d4:e7:5f:2e:c2:75:69:b1:ed:
                    ea:f5:8d:69:93:91:4b:db:9e:49:96:3d:e7:2d:9e:
                    d6:72:b6:73:e6:5d:2d:9b:e1:ce:03:00:d9:71:bc:
                    a8:97:a6:c4:78:5e:a3:fb:64:f8:46:04:57:47:b6:
                    5a:b5:9a:2e:65:d7:40:a1:6f:cb:a2:66:b6:4b:96:
                    45:76:21:c3:14:ef:98:9c:2e:66:58:1c:a6:b5:21:
                    96:77:50:c9:b1:73:37:8e:7c:e8:dc:79:f6:e5:77:
                    07:8d:62:13:e8:7e:63:cb:91:b0:42:78:6f:5c:37:
                    e4:3e:8f:df:7b:9b:5a:c2:ff:50:90:20:25:3f:17:
                    51:7d:77:ff:99:ac:63:d5:19:7f:06:aa:ae:5b:18:
                    11:e8:a4:18:b3:44:c2:a1:c9:af:f2:89:99:35:a1:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:38:DB:57:AB:73:A7:29:A2:38:4A:96:5F:BC:9B:0D:B2:56:E3
            X509v3 Authority Key Identifier:
                keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:19:67:97:b8:6f:c2:a7:b2:2a:48:4f:c3:a1:88:76:b8:17:
         4b:c7:d8:c1:41:59:f6:31:44:cd:2e:81:3e:96:f2:49:30:80:
         65:78:fa:68:5b:a5:7b:44:a7:d6:0d:43:e3:b4:9f:1f:51:66:
         b5:93:ad:bd:ea:96:ff:81:84:31:bf:4b:ac:e0:be:4e:bc:41:
         ce:c7:ca:fe:7c:0a:ef:9b:46:03:15:82:8f:7d:d2:67:70:2d:
         78:48:75:a6:ac:b9:ff:7d:32:46:4d:13:a4:76:ca:04:5b:5f:
         91:3e:9d:72:73:64:ec:28:95:f4:0d:29:89:3e:18:bf:b3:78:
         d7:cf:86:7e:8e:65:d3:59:fd:73:8f:54:53:e4:2a:e5:43:92:
         f1:2f:f2:98:2c:47:10:ee:89:67:1c:02:9a:7e:e3:5c:a5:17:
         d9:76:39:a7:5b:1b:8c:88:f9:45:2b:7f:bb:80:a5:cd:5d:88:
         09:8a:70:b6:78:2d:03:88:9d:04:9c:68:dd:8a:57:77:70:fb:
         99:b1:56:16:fd:7b:45:f8:c4:ff:fe:f8:70:7f:9a:a1:62:3f:
         8b:71:fa:37:75:6a:69:6a:b7:25:af:69:5d:8e:49:d0:50:52:
         b3:7f:13:18:ba:20:e2:09:e9:7d:31:3d:45:c0:58:ee:74:46:
         97:51:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:14 2026 by rpki-client