Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
File:                     D5981734217611EE9EBE2F70C4F9AE02.roa (raw, json)
Hash identifier:          4D3L2HVQh9/CoYMqSW86iigkVTttSKmbPRkmZFzgEf4=
Subject key identifier:   C0:32:8B:E2:14:4A:F8:6E:CB:E8:EB:76:6D:39:24:84:03:DA:68:0D
Certificate issuer:       /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial:       0237
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 03:29:09 +0000
ROA not before:           Sat 11 Jul 2026 03:29:09 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151410
IP address blocks:        103.227.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
                          rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
        Validity
            Not Before: Jul 11 03:29:09 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a51b885-5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:b9:ab:63:30:22:03:c1:81:94:f8:98:02:
                    e6:c3:98:d2:cc:fe:ad:46:d6:0c:0a:f4:28:f2:50:
                    d7:ff:b4:3b:11:2d:a7:8c:89:44:eb:3d:81:b6:d9:
                    56:28:2c:e9:3e:69:a1:94:4f:1c:2c:ff:4e:19:ad:
                    a4:a7:96:0c:58:98:8e:6c:cc:fb:e3:f4:7f:ea:ee:
                    9e:83:ab:f1:eb:3f:b4:c5:4e:ae:1d:cc:de:54:90:
                    5a:c9:3d:e3:f1:0e:11:04:bc:c2:27:e4:e0:29:46:
                    8e:ce:c6:92:69:34:5f:6f:2a:a2:05:02:ef:15:29:
                    61:32:e5:56:49:62:a7:5b:82:cb:1f:74:d9:96:cd:
                    2b:81:75:2b:cc:7a:c1:3c:dc:29:b2:58:d4:31:85:
                    80:3e:ff:52:0a:e0:23:22:5b:1a:8f:70:aa:17:8e:
                    ee:a7:79:80:c8:2f:61:b0:89:69:ca:cd:c1:3d:05:
                    55:fc:64:33:20:35:33:a9:9a:74:d8:de:16:f8:af:
                    d8:48:8a:34:1a:d0:20:29:c1:c7:6d:1a:b4:b1:2f:
                    c9:52:ca:85:31:24:e1:1b:53:d5:c7:95:1a:3c:51:
                    1d:9c:42:fd:9a:b9:69:98:93:d0:08:88:e9:31:2f:
                    cf:31:99:20:b8:14:c0:92:eb:ea:fa:84:04:5e:21:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:8B:E2:14:4A:F8:6E:CB:E8:EB:76:6D:39:24:84:03:DA:68:0D
            X509v3 Authority Key Identifier:
                keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:09:26:f4:b0:c0:84:11:d4:ab:d0:ef:9f:9f:10:02:e9:
         a0:f5:04:2b:e8:00:4f:50:c2:e0:8a:6c:b3:38:a6:80:3f:bb:
         8a:19:06:bb:11:5e:ae:a4:04:7a:08:39:26:70:e8:b4:aa:01:
         17:af:c4:e2:c2:7b:ef:07:2f:df:fb:5d:b3:b2:15:e6:ff:01:
         51:0d:ab:64:1a:0a:82:b5:f2:a2:fe:7f:28:b1:7a:ad:86:b3:
         7e:54:5e:66:53:72:11:b5:07:d1:85:15:48:89:e7:2f:14:63:
         2d:2a:96:d0:c7:8d:90:34:aa:ea:91:98:2b:b1:d8:81:c7:52:
         7f:05:e3:85:19:3a:cb:02:ec:91:d1:bb:a6:5a:e4:da:c2:e2:
         ad:70:f2:62:f9:06:a1:bb:15:3b:bf:10:08:a3:07:c3:a2:4c:
         e4:bb:52:8a:81:33:a0:b4:b7:de:6b:e3:2f:45:34:8b:1b:b4:
         d1:8c:30:db:db:86:bd:15:f4:b9:58:93:b0:fe:d3:0b:3c:17:
         9b:09:90:1e:52:f5:eb:0e:03:5a:64:3f:cc:3a:c2:14:47:59:
         20:1e:3b:57:5f:ae:ac:12:cf:cf:e7:fa:78:40:f0:ff:a0:0d:
         75:81:b6:ee:7f:5d:2f:b0:67:22:76:e1:2a:64:40:07:8f:4c:
         8c:a2:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:09 2026 by rpki-client