Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D61FACAC7F2511F193FF4ECD8AA30FBC.roa
File:                     D61FACAC7F2511F193FF4ECD8AA30FBC.roa (raw, json)
Hash identifier:          Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=
Subject key identifier:   2E:3B:29:41:47:E6:80:FB:44:FF:E6:4D:84:E1:56:AF:25:E8:EE:9A
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0ABA
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D61FACAC7F2511F193FF4ECD8AA30FBC.roa
Signing time:             Tue 14 Jul 2026 01:46:31 +0000
ROA not before:           Tue 14 Jul 2026 01:46:31 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17941
IP address blocks:        103.26.32.0/22 maxlen: 22
                          103.26.33.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
                          2404:5480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jul 14 01:46:31 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5594f7-217c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:23:c2:c3:e2:7c:4c:8d:ca:11:d7:22:96:
                    50:3f:f7:85:ad:43:00:02:cc:c7:15:71:53:58:4c:
                    8e:2c:7e:44:26:1a:d4:b4:6c:87:90:b8:7e:f9:85:
                    2d:14:93:06:25:fd:54:26:7c:74:17:91:18:a3:46:
                    07:c5:49:61:76:4e:f1:e8:69:67:eb:1d:97:d2:3c:
                    97:dd:56:a1:2e:a3:48:b9:46:67:11:05:c8:59:ef:
                    56:3c:07:c9:20:36:92:2b:31:f6:0e:a5:48:45:c3:
                    25:b5:48:37:84:d5:15:3a:69:61:20:e6:3a:4c:41:
                    a2:ef:1e:fb:23:86:39:ad:7f:d1:c6:ff:f1:fc:44:
                    b0:80:cd:4f:71:47:af:93:39:9a:e6:0c:57:be:a8:
                    a0:95:ea:66:3c:20:e5:fe:1e:6f:3a:eb:ec:05:66:
                    59:f2:71:29:a2:92:71:25:b9:c9:a0:0b:7b:9b:0d:
                    5d:a6:f6:ab:21:10:26:81:46:a6:0b:be:4c:46:83:
                    61:4f:c6:bf:11:14:ad:69:53:a4:c1:ff:4f:e4:15:
                    91:c4:8f:d0:ac:d4:bd:35:dd:df:5d:91:f3:e4:c8:
                    02:17:8d:29:d0:dc:7a:cf:0a:31:01:9c:17:94:44:
                    0f:12:81:16:b9:a1:4b:ce:ad:b3:43:78:11:97:02:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:29:41:47:E6:80:FB:44:FF:E6:4D:84:E1:56:AF:25:E8:EE:9A
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/D61FACAC7F2511F193FF4ECD8AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.32.0/22
                IPv6:
                  2404:5480::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:88:89:ec:80:5c:3a:cd:df:30:9a:8d:a8:05:cc:7b:08:
         a0:33:84:74:75:61:dc:4c:05:d3:89:e2:f8:ea:5c:c9:db:cd:
         e8:22:bb:6b:73:1c:f6:13:fa:ca:13:d1:dd:41:48:b1:b3:a9:
         09:8e:c5:dd:0c:37:88:52:fb:b8:b8:f4:28:e1:dd:b3:db:1d:
         af:86:c0:4e:f8:c7:db:dc:6c:6d:98:09:95:b8:48:c1:52:c2:
         3b:a5:58:3a:f1:39:97:16:16:42:10:4e:10:e9:a5:e6:dc:37:
         70:40:39:c0:61:df:7d:fb:dd:aa:9e:8c:23:d5:f5:31:f8:c7:
         e4:b3:76:8c:9e:e4:79:ba:eb:17:2e:c9:55:05:00:0b:8d:82:
         d8:cd:79:56:a2:38:81:d9:3a:50:86:a7:4e:91:ce:99:95:1f:
         c9:57:de:86:8c:4a:5f:93:59:97:7d:10:4d:eb:ca:55:d9:3f:
         12:ab:b8:43:e1:d0:70:6f:92:73:a6:c4:e8:ce:c7:64:46:ea:
         bd:51:3c:c8:87:e5:3d:d0:f4:69:e5:52:9b:20:f0:3d:73:dd:
         4f:40:cb:d9:8a:f3:58:68:3f:82:37:52:ec:0d:75:dd:09:55:
         da:75:7d:ed:99:76:5f:55:2d:9f:e6:81:fe:c5:86:da:4f:ce:
         4e:28:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:01 2026 by rpki-client