Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
File:                     3983EA66217E11F18ECE80E5073D8C67.roa (raw, json)
Hash identifier:          hxEYoEMqj4BpXAJVc6GCqQHmmq9QFwmOlIQ9koH/Ilc=
Subject key identifier:   E0:E6:46:94:52:D4:37:F6:C8:5D:9F:11:DC:40:A2:75:03:31:A3:4C
Certificate issuer:       /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial:       08E3
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
Signing time:             Mon 31 Aug 2026 20:40:57 +0000
ROA not before:           Mon 31 Aug 2026 20:40:57 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     141233
IP address blocks:        103.156.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
        Validity
            Not Before: Aug 31 20:40:57 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a95e6d9-a9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:5b:39:d9:1e:1b:ba:46:5f:9d:b9:2b:80:
                    b8:2f:e6:65:28:00:1f:0e:ee:14:24:87:8d:7b:19:
                    4c:10:70:c3:d4:5e:43:74:5e:07:ba:bb:3d:17:2d:
                    87:4e:bb:49:0e:9b:d1:61:88:39:34:0b:2c:f0:fe:
                    44:09:3a:00:59:1f:62:60:12:b5:b8:33:bd:c3:f1:
                    bf:e1:53:4d:e9:22:40:09:6e:d6:66:e8:2f:e1:85:
                    01:00:18:16:eb:48:93:01:de:73:dc:7d:33:3f:5a:
                    07:3e:9a:7c:1e:c0:e1:08:e1:d1:15:c4:dc:66:20:
                    47:79:70:ac:04:ae:df:98:f4:8d:3e:39:83:02:1b:
                    8d:c8:e1:b2:77:61:d0:c5:a5:64:e5:20:c4:8d:a8:
                    48:d2:ec:13:49:81:93:c6:e2:1e:42:b8:47:c5:27:
                    1c:5a:a7:2c:fa:8b:8c:a0:03:4a:e5:f9:16:04:6e:
                    d8:6c:76:36:18:83:0a:ee:0a:26:ff:6a:5f:ac:95:
                    4f:1d:1c:c0:e6:19:af:7f:cf:ba:ee:1c:d4:86:d9:
                    15:c3:44:17:3e:a2:8f:33:0b:0d:84:23:bd:ec:c3:
                    ee:60:dd:49:b8:25:e0:28:ae:8f:6d:19:2e:a8:ae:
                    93:9d:84:a2:0c:41:e9:b2:da:c4:e7:79:ab:e2:8b:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:46:94:52:D4:37:F6:C8:5D:9F:11:DC:40:A2:75:03:31:A3:4C
            X509v3 Authority Key Identifier:
                keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:84:85:fa:68:b5:0a:be:63:d7:95:f4:0a:90:50:20:43:8f:
         b3:76:10:1d:31:70:6c:e3:eb:ea:1e:71:41:04:fc:46:d0:21:
         86:f1:5f:93:94:ea:a8:42:69:8b:e7:ca:d7:d7:88:49:7f:2e:
         05:08:5f:6e:4a:83:37:27:17:f7:62:ed:0c:7c:d5:02:3b:0d:
         dc:c1:56:20:a4:e9:aa:84:8d:7b:3e:f6:6e:94:fe:f6:81:e1:
         29:4d:9d:e8:ed:94:fe:e4:4e:dc:eb:e6:ab:e7:58:42:59:89:
         a0:06:54:24:b2:f8:cd:0a:31:91:da:7d:91:19:9a:b5:d8:f9:
         97:25:4b:80:a7:d8:e5:40:05:69:3c:c1:0a:53:d9:d5:2c:0c:
         c4:78:78:ab:8c:5b:bb:9b:e3:01:dd:f6:32:3d:ae:ee:eb:00:
         72:d0:d3:cb:cf:f3:7b:b8:5b:c1:9b:9d:e3:fb:57:87:66:3e:
         05:59:b7:ee:ca:d4:52:b4:bf:3d:e0:86:24:6a:a5:99:cb:6a:
         df:50:23:93:ae:74:f8:66:2f:2f:0e:e6:10:f7:7e:03:7d:26:
         96:30:67:5b:c3:25:03:9d:36:bc:12:42:0a:c7:12:1c:36:ee:
         76:9f:28:59:ed:1a:42:a7:32:c3:c4:b5:b0:81:31:ec:51:f0:
         f9:7f:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:13 2026 by rpki-client