Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa
File:                     04B0D250076211EFB14D3B12C4F9AE02.roa (raw, json)
Hash identifier:          SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=
Subject key identifier:   1E:14:ED:EA:29:AE:E8:B3:08:21:FD:9A:25:C5:A4:03:6C:8B:B9:87
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       01B5
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa
Signing time:             Thu 25 Jun 2026 05:35:05 +0000
ROA not before:           Thu 25 Jun 2026 05:35:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     917
IP address blocks:        103.23.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Jun 25 05:35:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3cbe09-ca27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:3b:32:e6:e7:10:90:de:25:51:74:18:42:
                    9f:eb:e9:58:9f:00:2f:8f:0e:4a:b5:69:67:b4:6c:
                    df:3c:db:29:79:05:2f:49:1a:aa:01:58:48:17:81:
                    f0:e3:f5:f2:bb:bd:8d:47:1a:1c:34:ad:20:f2:24:
                    fa:5e:20:71:f1:eb:58:54:d7:18:a4:28:e6:cd:09:
                    26:a3:73:80:5d:e2:4f:83:94:63:09:70:8d:83:85:
                    fd:cc:91:ac:41:f4:2f:a7:f1:36:d5:71:5f:3f:52:
                    73:5a:8b:72:06:20:2c:96:16:38:7c:04:e6:a9:73:
                    93:ac:8d:df:74:d9:80:1b:ec:ce:a8:c4:a0:5f:7e:
                    7a:2e:d3:04:07:07:aa:93:cd:bd:f0:59:80:db:26:
                    de:d2:b0:e7:35:5b:d3:59:3c:59:20:85:ed:c6:2e:
                    07:54:7d:af:c7:19:5f:5f:4d:42:dd:72:42:dc:fe:
                    9c:09:68:3b:dc:6e:a8:b7:c9:91:65:aa:72:a8:7a:
                    e8:5a:5e:f2:25:46:2b:22:e2:d0:5b:ec:ab:2a:c9:
                    4e:c4:3f:af:42:e8:b2:77:1e:f5:6f:3e:39:97:e3:
                    a3:dc:fa:20:a1:cf:7c:f3:21:ac:09:b1:58:a2:8b:
                    34:1e:56:15:bf:7b:47:da:45:c4:32:7a:b2:34:9a:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:14:ED:EA:29:AE:E8:B3:08:21:FD:9A:25:C5:A4:03:6C:8B:B9:87
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/04B0D250076211EFB14D3B12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:b0:1f:b4:7d:bb:a4:90:75:b7:b0:d8:d7:e6:78:86:d2:
         31:b8:f6:dc:24:42:5d:7d:58:71:51:61:19:63:77:4e:58:26:
         d6:99:7c:a9:4e:9f:09:42:95:c3:cc:e6:67:47:ba:72:bb:14:
         8d:90:44:64:09:fd:a1:ad:9b:b7:49:ec:df:8d:21:a9:a9:06:
         11:f2:b5:74:62:3c:2a:31:27:ec:8f:b8:28:28:9d:ee:14:51:
         6e:a9:8b:44:96:58:89:96:4c:ad:d6:5d:5a:8c:da:4d:8c:3a:
         1f:48:c0:90:1e:f8:af:b3:03:44:b7:8d:35:d8:19:28:a2:6b:
         2b:f8:4d:d4:05:fd:d8:17:b6:88:83:4a:8e:92:6b:56:19:41:
         8c:66:dc:09:c4:01:92:65:c4:fb:ce:fb:36:46:93:83:e3:22:
         88:a0:ef:d8:03:e4:f4:2f:58:5d:7a:f2:e4:98:4d:41:7c:d9:
         40:6b:56:03:78:7d:b2:36:cd:02:f8:7a:12:70:e6:64:c2:ff:
         d2:73:91:5a:fd:44:07:7e:0c:69:b9:f1:d6:1e:8a:ef:c2:6a:
         d9:9f:10:ca:b3:9c:ab:85:58:08:b2:10:af:32:2f:13:c3:16:
         52:9b:00:14:77:df:e9:62:4c:07:83:62:10:89:c6:0c:5f:79:
         09:f9:86:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD
NjAwNTg5MDIwHhcNMjYwNjI1MDUzNTA1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNjYmUwOS1jYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvM7MubnEJDeJVF0GEKf6+lYnwAvjw5KtWlntGzfPNspeQUvSRqqAVhIF4Hw
4/Xyu72NRxocNK0g8iT6XiBx8etYVNcYpCjmzQkmo3OAXeJPg5RjCXCNg4X9zJGs
QfQvp/E21XFfP1JzWotyBiAslhY4fATmqXOTrI3fdNmAG+zOqMSgX356LtMEBweq
k8298FmA2ybe0rDnNVvTWTxZIIXtxi4HVH2vxxlfX01C3XJC3P6cCWg73G6ot8mR
ZapyqHroWl7yJUYrIuLQW+yrKslOxD+vQuiydx71bz45l+Oj3Pogoc988yGsCbFY
oos0HlYVv3tH2kXEMnqyNJqfIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB4U7eop
ruizCCH9miXFpANsi7mHMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2
QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNGNUQvMTBGOTRFRjAwNkFCMTFFRjg3QkZBNzI1QzRGOUFFMDIvMDRCMEQyNTAw
NzYyMTFFRkIxNEQzQjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxesMA0GCSqGSIb3DQEBCwUAA4IBAQAGp7AftH27pJB1t7DY1+Z4
htIxuPbcJEJdfVhxUWEZY3dOWCbWmXypTp8JQpXDzOZnR7pyuxSNkERkCf2hrZu3
SezfjSGpqQYR8rV0YjwqMSfsj7goKJ3uFFFuqYtElliJlkyt1l1ajNpNjDofSMCQ
HvivswNEt4012Bkoomsr+E3UBf3YF7aIg0qOkmtWGUGMZtwJxAGSZcT7zvs2RpOD
4yKIoO/YA+T0L1hdevLkmE1BfNlAa1YDeH2yNs0C+HoScOZkwv/Sc5Fa/UQHfgxp
ufHWHorvwmrZnxDKs5yrhVgIshCvMi8TwxZSmwAUd9/pYkwHg2IQicYMX3kJ+Ybs
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:58 2026 by rpki-client