Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/17AB2896B63E11F1A51127D96511F970.roa
File:                     17AB2896B63E11F1A51127D96511F970.roa (raw, json)
Hash identifier:          qhGk9BOpK/PikG39MduxVpuCfC6q1uXoToROKPyccRg=
Subject key identifier:   85:42:E7:AD:04:10:37:59:DE:C9:9F:D9:09:62:EB:D2:8E:63:E2:38
Certificate issuer:       /CN=A91924C9/serialNumber=A75B16EC3EFBC1A8F513FA357FA0394A32433A52
Certificate serial:       03
Authority key identifier: A7:5B:16:EC:3E:FB:C1:A8:F5:13:FA:35:7F:A0:39:4A:32:43:3A:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/17AB2896B63E11F1A51127D96511F970.roa
Signing time:             Tue 22 Sep 2026 04:28:43 +0000
ROA not before:           Tue 22 Sep 2026 04:28:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132867
IP address blocks:        103.26.72.0/24 maxlen: 24
                          103.26.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.crl
                          rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91924C9, serialNumber=A75B16EC3EFBC1A8F513FA357FA0394A32433A52
        Validity
            Not Before: Sep 22 04:28:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6ab203fa-fb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:11:cc:39:b9:83:11:d5:53:4d:58:c3:7a:
                    d4:04:34:d2:fb:9a:0f:30:7c:f3:45:8d:fc:9e:6e:
                    01:c5:55:fd:17:8b:3b:3d:38:80:e5:ca:0f:11:6a:
                    82:34:b2:a7:23:f8:4b:26:fe:97:e1:cc:ba:ed:4a:
                    54:01:7c:5a:d5:60:42:a7:03:f8:19:5c:37:0e:b1:
                    ac:62:fc:36:c0:92:9a:30:2d:a4:4e:e6:4f:33:29:
                    11:bf:5e:2c:be:f5:ed:cf:14:a0:d7:a6:c1:75:e7:
                    ee:74:29:62:8e:0d:ca:0c:b4:ce:40:7e:5e:54:94:
                    d0:31:4a:2a:db:72:56:8a:15:62:22:7d:19:b4:ba:
                    20:a4:00:c9:08:fd:8d:6e:46:d2:e3:c1:79:09:40:
                    ef:88:25:c0:84:7d:cc:01:81:f0:18:36:39:21:4f:
                    a9:fe:b9:63:3a:70:d9:de:6c:a5:0c:d1:60:2a:0f:
                    65:30:07:0b:7f:c6:74:21:a2:cd:56:0d:5f:10:73:
                    b5:0b:94:06:84:10:8b:59:b8:27:de:b0:84:b3:eb:
                    06:db:ff:1f:1b:21:d6:5c:f9:9a:29:09:d5:94:a0:
                    d1:9d:7a:d3:54:95:7f:a3:35:51:a0:89:9f:b3:f6:
                    01:f9:a2:0c:87:22:98:e8:aa:10:59:77:15:3d:ec:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:42:E7:AD:04:10:37:59:DE:C9:9F:D9:09:62:EB:D2:8E:63:E2:38
            X509v3 Authority Key Identifier:
                keyid:A7:5B:16:EC:3E:FB:C1:A8:F5:13:FA:35:7F:A0:39:4A:32:43:3A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/17AB2896B63E11F1A51127D96511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:af:f8:80:8a:77:18:b7:1c:e8:0e:c9:bf:1e:89:6e:19:30:
         fb:a3:59:48:b4:8e:e5:71:46:8b:75:71:26:04:f0:c6:c8:d6:
         a1:c6:d7:a2:fd:45:2e:8f:d0:23:62:b7:5e:7b:a7:60:6f:ea:
         32:5a:b1:2a:6f:48:b3:fd:9c:77:1f:c5:a4:5b:19:d0:2e:ff:
         4d:a9:3e:8a:5f:56:52:e1:5e:4f:7a:13:fd:8f:70:d8:0e:8d:
         52:ab:58:fb:23:61:b8:4e:7d:ab:b1:79:d9:b7:14:62:f1:58:
         a8:28:86:7c:d4:d1:df:3c:f3:10:1e:cf:db:01:5d:08:77:3d:
         d3:a2:8f:f8:ab:52:f9:4a:80:0b:40:80:39:5b:d1:93:60:25:
         4d:db:b1:35:8d:8d:30:73:8b:fc:12:af:ba:2b:01:2e:a0:aa:
         d3:a5:0b:7e:5e:72:a0:96:06:59:14:b1:df:dc:54:dd:ac:96:
         57:7c:91:d7:59:11:90:7e:76:ac:bc:bf:21:92:d9:21:ab:de:
         6b:08:36:a2:51:fd:a7:11:14:f7:c0:21:ca:21:d7:26:90:d6:
         3c:ed:6d:81:f2:93:6c:19:42:c0:8f:ce:f7:38:79:75:58:fa:
         bf:90:6a:a0:f0:e3:f4:6b:d6:91:15:4d:73:22:82:f1:c2:b7:
         a3:ac:b3:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:06:45 2026 by rpki-client