Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/D0551B50046411F09760073DC4F9AE02.roa
File:                     D0551B50046411F09760073DC4F9AE02.roa (raw, json)
Hash identifier:          JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=
Subject key identifier:   C4:AE:27:05:AF:D5:07:DC:92:AF:AD:1B:15:96:55:AD:FC:79:33:A8
Certificate issuer:       /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial:       0E8A
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/D0551B50046411F09760073DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 19:18:53 +0000
ROA not before:           Mon 06 Jul 2026 19:18:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153656
IP address blocks:        103.140.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
                          rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3722 (0xe8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
        Validity
            Not Before: Jul  6 19:18:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a4bff9d-103d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:d3:11:cf:91:bb:7b:07:00:db:9d:23:91:
                    e7:aa:0b:55:5b:2b:d7:18:2c:66:f5:62:5f:21:64:
                    c1:7a:69:87:39:ec:73:15:6a:b8:73:93:99:13:f6:
                    5a:b4:a3:74:12:b1:a4:ec:aa:20:fa:d4:9b:2a:cc:
                    a5:61:65:04:6e:91:51:76:7e:fa:e3:73:af:67:0b:
                    c7:9e:02:4a:7c:b7:f9:de:23:30:3b:e7:c5:6a:c9:
                    85:08:a3:2b:b1:c7:d0:d0:01:56:31:f8:8a:bc:7f:
                    bf:a8:be:48:0c:b5:fe:c7:88:8f:ed:07:d2:b9:d4:
                    fc:3a:c5:c8:89:9a:78:b5:d4:bb:97:fd:0c:5d:33:
                    2f:05:a4:e0:ef:9f:53:70:3d:d5:11:ec:a3:3b:7b:
                    99:8a:d0:f2:ea:d8:50:59:ce:9f:aa:5c:c2:b4:77:
                    45:42:cc:bf:c3:f6:9a:08:c5:e3:4e:dd:27:fe:d3:
                    fc:d5:ff:f5:54:38:33:ab:bc:23:03:46:b5:86:c5:
                    b2:29:be:00:4a:f3:ce:69:ef:b1:73:85:e9:57:65:
                    8b:8b:10:10:f0:e0:3a:7c:a6:a7:cd:6c:e9:c6:5d:
                    af:55:1a:f4:a5:e5:ce:75:c9:9b:ba:aa:cc:19:76:
                    95:67:05:06:0a:63:e7:d3:eb:60:37:62:54:4e:58:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AE:27:05:AF:D5:07:DC:92:AF:AD:1B:15:96:55:AD:FC:79:33:A8
            X509v3 Authority Key Identifier:
                keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/D0551B50046411F09760073DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:13:7c:5b:24:fb:e6:81:e0:67:8b:eb:22:8f:11:f1:79:7b:
         26:f7:d7:20:26:53:48:61:d5:69:7d:d7:54:50:b3:26:d7:0b:
         87:11:d8:e8:c2:e6:0f:b5:91:ac:b4:5c:8b:16:90:4a:45:b2:
         98:60:de:a5:5e:a3:2b:68:e7:1c:d3:92:93:52:82:a1:81:a2:
         4e:9f:10:ea:64:36:6d:ba:c1:ae:db:5d:68:13:67:03:49:61:
         de:fa:1c:53:da:b0:91:e7:71:28:58:a2:47:c7:6f:5e:bf:0e:
         3d:bc:33:ce:c7:ac:36:95:61:09:6a:04:76:e2:35:43:1b:ef:
         36:32:85:26:c9:5a:95:37:4a:eb:9c:95:e3:c0:4f:89:ac:ad:
         7f:17:b0:48:db:bb:af:14:15:25:81:ec:6c:3f:cc:c2:7d:ad:
         5d:7e:53:4a:fa:d9:39:6a:e2:b1:39:aa:6c:67:0b:76:80:2a:
         55:a5:40:a7:b2:61:db:5b:6b:09:8d:19:a4:68:84:50:ae:4f:
         b4:91:63:c5:b3:5b:66:2f:28:e2:82:34:e4:b4:92:c4:2e:63:
         e7:3c:b2:47:5c:81:f9:37:23:a7:59:3d:fa:fb:75:26:d0:08:
         f4:6a:24:5c:df:e0:78:0f:3d:85:b8:32:e7:ac:62:b0:e2:0f:
         ad:ea:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:23 2026 by rpki-client