Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/BC72661A972911ED8CBCA476C4F9AE02.roa
File:                     BC72661A972911ED8CBCA476C4F9AE02.roa (raw, json)
Hash identifier:          ijHVWHANYsNS9d5u+2L0OG/TAcPXhYDdTjzMH7Olj0g=
Subject key identifier:   A3:86:AD:A4:1A:DC:0E:1C:E8:28:DC:42:41:18:65:51:6D:60:A1:B2
Certificate issuer:       /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial:       0287
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/BC72661A972911ED8CBCA476C4F9AE02.roa
Signing time:             Sat 09 May 2026 02:33:17 +0000
ROA not before:           Sat 09 May 2026 02:33:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137406
IP address blocks:        103.57.227.0/24 maxlen: 24
                          103.117.118.0/24 maxlen: 24
                          103.117.119.0/24 maxlen: 24
                          103.117.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
        Validity
            Not Before: May  9 02:33:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fe9cec-cc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:b5:95:1d:cf:55:69:d5:59:8f:4f:b9:f1:
                    8f:9c:b8:9c:5d:a3:0b:93:77:79:20:70:aa:6c:af:
                    81:36:95:ee:e3:6b:c4:02:8b:06:02:b5:a4:ac:fd:
                    12:b3:13:39:2c:6d:cf:6c:d8:8b:f1:e5:76:cf:3d:
                    15:0e:39:e7:e5:94:24:57:d3:38:25:50:ef:cc:90:
                    e6:7e:63:80:d4:c7:4b:e9:8a:0b:c5:05:b2:57:5f:
                    70:60:52:d2:7a:02:d1:c9:ec:af:3e:24:e2:15:98:
                    dc:a2:3b:75:de:32:46:e9:32:1f:bf:0f:7f:1f:21:
                    b2:7a:1c:c4:8d:74:c7:4d:35:30:bd:e8:2f:73:5f:
                    8b:da:ff:4d:20:28:e3:dd:ab:bc:9d:d3:31:93:c0:
                    58:f2:94:01:bc:d6:a8:c0:25:ce:2b:a2:a7:75:3b:
                    32:b5:90:57:9a:98:32:5e:01:ab:75:e6:bc:a0:2d:
                    75:1f:73:5e:15:d5:54:7f:fe:0a:2f:d3:e8:fa:92:
                    4a:04:e6:4c:cc:af:42:91:00:23:46:e1:23:f6:12:
                    dc:7f:96:7a:53:a4:31:fc:72:9c:61:d4:89:db:d2:
                    0c:51:12:37:b2:44:93:db:8d:07:01:06:50:83:97:
                    e8:fa:06:fb:4f:54:fb:29:40:c8:28:70:68:6f:92:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:86:AD:A4:1A:DC:0E:1C:E8:28:DC:42:41:18:65:51:6D:60:A1:B2
            X509v3 Authority Key Identifier:
                keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/BC72661A972911ED8CBCA476C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.227.0/24
                  103.117.118.0/23
                  103.117.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:f2:92:bc:99:dc:c9:de:8f:4f:52:a4:fa:c0:62:67:f6:
         f3:22:0e:97:96:91:21:1e:14:46:57:55:c2:34:28:bb:9b:ce:
         ef:79:6e:6d:71:0e:25:6e:3b:fa:34:ec:b4:db:55:69:d1:02:
         3f:6f:31:39:72:03:bb:c3:d3:fc:c6:1e:29:be:16:d0:5c:8f:
         60:f1:33:c7:ae:7d:b7:92:cb:25:cc:78:03:e8:81:0f:17:8c:
         bc:b3:c3:75:0a:e5:4d:f2:73:b5:ef:22:59:be:3f:22:0d:33:
         c1:f4:f3:8b:8f:5e:32:5d:78:a9:c2:d4:42:2b:e9:8e:43:85:
         96:20:91:ce:66:cc:96:7d:11:1e:4a:b4:1f:cd:83:a1:c7:40:
         f9:47:10:2f:01:dd:95:38:cc:36:9d:28:33:23:d9:5e:6e:4a:
         39:42:c9:3c:6f:07:a7:79:b2:b1:2f:45:ee:bc:7b:ba:1b:d6:
         2d:ad:ea:8b:86:4e:5f:b2:c9:d3:b3:e2:84:31:e1:88:77:42:
         93:94:ff:a3:27:e0:25:b2:39:5b:77:e4:d7:50:aa:86:d6:8e:
         e0:d0:a5:51:5c:cd:1a:3c:b0:40:ff:ea:34:00:74:79:18:0d:
         09:94:f1:3a:42:c0:dd:69:e6:34:9f:bb:0d:74:50:bd:f6:61:
         aa:1a:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:31 2026 by rpki-client