Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/0006ED8263DD11EC9A50031BC4F9AE02.roa
File:                     0006ED8263DD11EC9A50031BC4F9AE02.roa (raw, json)
Hash identifier:          n/AQcJZhKfE40BTentYdgzJczeKPOOvqWZVrrawQMVs=
Subject key identifier:   CA:18:32:65:07:9B:EC:A1:8F:D4:85:2E:91:71:34:F8:B6:87:00:E9
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       0639
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/0006ED8263DD11EC9A50031BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 23:43:24 +0000
ROA not before:           Fri 02 Oct 2026 23:43:24 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141164
IP address blocks:        103.155.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Oct  2 23:43:24 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac0419b-7882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:fa:4f:3c:c6:ec:7d:64:c6:12:fb:7b:aa:
                    37:e1:e3:c0:0c:a3:06:bb:b2:3f:d6:f4:03:46:58:
                    90:82:f1:40:a2:d7:1c:35:76:de:24:01:54:13:51:
                    72:96:42:05:01:7f:62:54:12:6b:5a:c2:55:96:7d:
                    8b:ed:f4:40:d3:72:65:69:22:fc:41:5b:9b:0a:6c:
                    ce:c2:af:77:1f:be:ac:8b:85:88:30:9a:e7:ab:55:
                    be:39:fc:e2:8f:8f:4c:ce:d8:e5:3b:44:53:a3:82:
                    ac:63:60:e3:e9:47:fc:60:5f:a7:21:02:91:0a:79:
                    85:39:cb:07:35:20:2c:d3:13:0f:0d:6a:81:9c:55:
                    96:b2:42:dd:20:70:4d:3f:ca:6c:19:fc:ac:99:02:
                    0b:3a:b8:55:7c:3c:bb:68:6b:35:52:59:4f:be:bd:
                    8f:05:77:da:db:99:52:5e:31:62:3b:37:15:70:02:
                    3f:05:b8:ac:c6:11:98:50:8a:ff:cb:17:6d:7c:e1:
                    79:02:af:91:66:56:6c:41:84:da:2e:83:82:9e:f5:
                    2e:b4:55:d4:19:c7:7d:d6:09:7c:0e:aa:ab:1e:16:
                    ca:f7:6b:41:f0:11:fc:39:14:5b:e4:24:ef:44:ad:
                    5f:7d:86:29:0c:5e:d3:cb:9f:f5:29:66:05:8f:c6:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:18:32:65:07:9B:EC:A1:8F:D4:85:2E:91:71:34:F8:B6:87:00:E9
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/0006ED8263DD11EC9A50031BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:4a:b3:d4:d2:53:0d:64:16:a7:9d:ce:ad:07:c3:fc:40:
         6f:10:b1:41:42:da:c2:a6:ae:17:02:76:1f:f7:9d:91:5f:47:
         fc:42:8e:3f:23:56:1b:3d:92:af:93:07:2f:a5:46:a4:e8:6c:
         02:de:58:ab:4d:b3:a4:e3:13:41:20:50:cc:e8:4c:64:00:7d:
         02:79:75:1d:fb:f2:e4:88:79:2a:19:df:14:8c:48:44:cb:bb:
         1b:49:9e:5e:be:a6:97:bc:23:4c:88:7a:f6:1a:55:d4:49:dc:
         e2:8b:09:5b:f6:4b:0d:6d:9c:ab:79:83:be:2d:53:10:31:fa:
         c3:0c:3a:b4:35:26:92:20:a1:c1:c2:75:7b:5d:43:e3:7d:0c:
         0b:6c:a7:35:4d:76:e1:d3:6c:6c:5f:4f:d1:cd:0e:8e:1c:da:
         13:2c:24:f7:6f:f3:25:85:c6:09:5a:99:e9:17:93:51:df:14:
         d5:cf:b4:59:9d:3b:dc:9e:7c:9c:e8:d5:7f:92:59:8b:0c:f7:
         82:26:79:ff:62:73:0f:d9:d5:fc:d4:6c:7e:82:c1:4b:59:47:
         6e:c9:9a:4c:9e:d4:e9:e8:89:f1:38:b5:cc:13:2e:cf:04:63:
         98:38:be:2f:39:c9:03:00:1a:6f:69:fc:ca:ac:d2:74:42:aa:
         29:d0:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:53 2026 by rpki-client