Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/680147B486F311F1B8F66003A7EE528E.roa
File:                     680147B486F311F1B8F66003A7EE528E.roa (raw, json)
Hash identifier:          vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=
Subject key identifier:   75:8E:D4:83:D8:CC:7F:1F:0A:FD:59:BA:8E:FF:6F:61:66:AB:65:91
Certificate issuer:       /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial:       02C6
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/680147B486F311F1B8F66003A7EE528E.roa
Signing time:             Fri 24 Jul 2026 00:05:41 +0000
ROA not before:           Fri 24 Jul 2026 00:05:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137449
IP address blocks:        103.42.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
        Validity
            Not Before: Jul 24 00:05:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a62ac54-9ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:9d:33:82:df:c6:71:29:24:f6:78:1d:0e:
                    18:3d:88:03:41:82:27:81:bb:be:69:cf:52:ae:15:
                    c9:00:f2:aa:87:f7:30:9b:64:81:80:d4:74:78:06:
                    ee:11:37:99:92:bc:da:62:65:50:83:f6:d9:70:35:
                    f2:e2:e8:6e:f4:2d:ec:18:49:e6:7c:94:aa:52:31:
                    0a:d9:25:07:37:48:a8:f4:7a:90:4b:b0:f0:c2:04:
                    79:d2:70:32:59:00:d3:7d:dd:26:46:5f:3c:99:eb:
                    4c:3d:d8:3a:bb:e3:14:13:bb:4b:3c:90:80:03:3c:
                    5e:11:09:c2:03:30:5f:30:c2:e2:5b:bd:c7:0f:24:
                    af:77:d9:fd:51:ac:54:c3:fc:e9:e3:78:dd:f8:72:
                    fd:d7:aa:0f:e5:0b:1a:85:fb:6b:7b:68:2b:e0:82:
                    3e:88:b5:7f:45:42:32:88:3b:aa:6c:f3:5f:a7:5c:
                    ab:ed:3a:a9:bd:2f:b5:81:a1:14:8f:79:ba:90:f2:
                    2b:ca:78:3b:8c:03:f1:21:36:e5:b9:1e:c0:fd:fe:
                    37:40:52:42:dd:0c:8a:5a:49:5e:13:36:f6:b5:8b:
                    21:bf:9e:91:8a:d5:87:bb:ed:18:75:58:2c:2f:2d:
                    2b:da:4d:01:38:2d:c4:c0:5b:5f:a1:e7:65:b4:b1:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:D4:83:D8:CC:7F:1F:0A:FD:59:BA:8E:FF:6F:61:66:AB:65:91
            X509v3 Authority Key Identifier:
                keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/680147B486F311F1B8F66003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:56:53:75:b0:21:76:88:8c:83:10:e5:43:e4:1d:06:a1:
         94:7d:b6:75:b9:76:47:54:a7:46:a5:c0:59:f9:6c:51:57:81:
         09:cc:aa:f9:58:66:2b:de:72:ed:7e:6d:41:99:4a:b3:19:cd:
         b1:bb:eb:af:b7:ab:03:16:e9:80:d5:d5:77:8f:3c:be:66:c7:
         0a:a0:71:9e:fc:86:5d:80:30:46:4e:53:35:2f:fe:ad:db:f8:
         be:c8:ef:49:24:24:4d:45:6b:7a:33:70:52:c2:20:d7:df:a1:
         e3:81:cf:e6:0a:92:3e:d8:95:41:a2:7b:b1:fe:a1:b6:0c:d8:
         96:68:47:78:91:d1:78:55:21:03:cd:56:f0:a8:e2:3c:57:2d:
         1e:2e:48:3e:8e:62:c3:92:47:06:88:f2:e6:73:7a:43:c0:7f:
         7f:ee:ac:11:aa:4e:d4:e0:f8:cd:21:0c:f9:67:61:29:5d:d4:
         77:b0:a5:29:3a:60:ed:81:7a:9c:20:a1:4e:09:c8:41:31:b2:
         4a:d5:19:a6:cf:da:c6:eb:80:1c:fa:ab:11:e2:c1:85:d9:09:
         18:a8:2e:77:d5:ec:5c:94:b3:95:22:af:aa:17:57:a2:2b:fa:
         9e:a8:36:6a:2a:5c:62:c7:1a:1d:eb:53:28:ca:7e:e8:d8:5f:
         1a:98:6c:bf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB
REJGMUY1NDAwHhcNMjYwNzI0MDAwNTQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYWM1NC05YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcqdM4LfxnEpJPZ4HQ4YPYgDQYIngbu+ac9SrhXJAPKqh/cwm2SBgNR0eAbu
ETeZkrzaYmVQg/bZcDXy4uhu9C3sGEnmfJSqUjEK2SUHN0io9HqQS7DwwgR50nAy
WQDTfd0mRl88metMPdg6u+MUE7tLPJCAAzxeEQnCAzBfMMLiW73HDySvd9n9UaxU
w/zp43jd+HL916oP5Qsahftre2gr4II+iLV/RUIyiDuqbPNfp1yr7TqpvS+1gaEU
j3m6kPIryng7jAPxITbluR7A/f43QFJC3QyKWkleEzb2tYshv56RitWHu+0YdVgs
Ly0r2k0BOC3EwFtfoedltLECdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHWO1IPY
zH8fCv1Zuo7/b2Fmq2WRMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw
QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvNjgwMTQ3QjQ4
NkYzMTFGMUI4RjY2MDAzQTdFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZyrkMA0GCSqGSIb3DQEBCwUAA4IBAQBOCFZTdbAhdoiMgxDlQ+Qd
BqGUfbZ1uXZHVKdGpcBZ+WxRV4EJzKr5WGYr3nLtfm1BmUqzGc2xu+uvt6sDFumA
1dV3jzy+ZscKoHGe/IZdgDBGTlM1L/6t2/i+yO9JJCRNRWt6M3BSwiDX36Hjgc/m
CpI+2JVBonux/qG2DNiWaEd4kdF4VSEDzVbwqOI8Vy0eLkg+jmLDkkcGiPLmc3pD
wH9/7qwRqk7U4PjNIQz5Z2EpXdR3sKUpOmDtgXqcIKFOCchBMbJK1Rmmz9rG64Ac
+qsR4sGF2QkYqC531exclLOVIq+qF1eiK/qeqDZqKlxixxod61Moyn7o2F8amGy/
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:19 2026 by rpki-client