Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
File:                     F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (raw, json)
Hash identifier:          WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=
Subject key identifier:   10:73:F9:39:5D:0E:AB:45:3E:21:89:A9:F6:50:65:5D:60:51:64:DE
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       06CC
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
Signing time:             Wed 22 Jul 2026 23:23:57 +0000
ROA not before:           Wed 22 Jul 2026 23:23:57 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132480
IP address blocks:        103.151.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jul 22 23:23:57 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a61510d-bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:fe:8c:30:de:bd:ad:c5:48:f6:d4:6f:e2:
                    97:92:9f:0d:62:13:93:b9:36:60:4f:7f:8a:4d:19:
                    ea:5d:bb:00:3f:07:55:a1:29:83:1b:6b:a6:2d:08:
                    bc:bc:b0:dd:31:2c:56:f3:81:ef:44:13:bf:ea:b6:
                    5b:df:4e:36:b9:af:c4:7e:0c:01:f7:61:ff:1c:35:
                    80:5b:bd:a1:3a:6a:84:aa:d7:ae:72:ea:a8:c3:59:
                    08:be:4d:2f:e4:ec:f6:3f:a5:a4:0b:1c:85:87:c7:
                    ef:87:96:b3:47:8e:ab:ef:e0:49:2e:3e:3d:0b:9f:
                    f7:84:e5:de:6b:30:f3:b4:b4:f2:52:1c:9e:af:28:
                    d6:84:a9:9d:6f:3c:c0:ab:bd:da:9e:d5:aa:45:19:
                    f1:9a:c2:b7:4f:d1:e5:2b:f0:2b:79:0b:e6:f3:df:
                    c4:ff:e1:05:bd:c6:01:f3:9f:8f:ac:a2:37:c6:a1:
                    e6:89:e1:90:2e:c8:8b:b4:0a:d6:57:47:ff:c9:32:
                    3c:33:65:b7:66:40:03:15:2a:9d:ec:eb:1b:e4:93:
                    a3:04:60:f5:32:7e:ab:e2:59:26:eb:d8:b5:24:0a:
                    c0:a0:86:fd:ac:4d:d0:d6:d9:34:44:b6:c3:47:d7:
                    77:0f:57:62:cb:6f:94:5d:1e:8a:c4:41:16:36:f3:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:F9:39:5D:0E:AB:45:3E:21:89:A9:F6:50:65:5D:60:51:64:DE
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:74:85:3c:e1:78:97:4f:27:a8:ad:7e:1f:99:d0:0e:19:f9:
         9b:74:44:7d:64:1e:4b:77:b5:6e:6b:38:9c:2d:53:4c:7d:c5:
         5f:ba:85:26:11:4e:06:c6:77:fd:ba:1d:60:2c:34:54:90:2b:
         6f:ec:e7:ce:d8:7a:4e:2d:c6:f6:d8:98:23:a4:24:23:e9:2d:
         ab:1e:b2:4e:e1:57:f1:2e:35:5d:55:52:d8:ab:ee:5a:bb:ab:
         f3:54:1c:79:cf:d1:bc:8a:41:e9:b0:3a:33:e5:b1:d8:d8:b8:
         10:cb:cc:e6:11:22:7d:ff:dc:de:52:15:68:01:b9:48:c6:87:
         81:3b:7e:6c:48:55:56:b3:18:b2:76:8c:17:83:c7:02:92:69:
         1c:4c:29:f8:ce:43:1e:08:f3:d0:13:5c:90:35:d9:db:3d:6c:
         45:42:e9:3e:02:2b:3c:e7:e4:0c:1c:af:24:f8:3e:5c:25:98:
         ae:a0:4e:63:ac:c1:7c:30:8a:e0:3e:ff:86:16:f4:6c:dd:3a:
         63:71:03:4f:77:ae:01:e8:ef:d4:a0:50:25:bd:b7:31:bf:0a:
         99:39:df:28:c6:b0:71:79:f9:13:2d:e8:c3:b1:9b:96:16:7f:
         1c:47:76:ae:df:e4:71:51:18:2f:9a:75:72:ba:53:c8:ef:41:
         38:fc:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:18:01 2026 by rpki-client