Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/382882524E0711F198AFA3EAC9833773.roa
File:                     382882524E0711F198AFA3EAC9833773.roa (raw, json)
Hash identifier:          pF3fLJaxX9LR6axGzMSfH6zOoAKpk94tzG0J9e249T0=
Subject key identifier:   AD:4D:13:61:79:D3:CB:B8:85:A9:91:F2:72:01:A3:88:F9:6F:35:2F
Certificate issuer:       /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial:       0679
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/382882524E0711F198AFA3EAC9833773.roa
Signing time:             Tue 12 May 2026 13:33:54 +0000
ROA not before:           Tue 12 May 2026 13:33:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142037
IP address blocks:        103.165.92.0/24 maxlen: 24
                          2001:df6:6480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
        Validity
            Not Before: May 12 13:33:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a032c42-704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:09:4f:b3:7b:f2:d3:54:72:e8:92:89:41:
                    ef:f7:21:a8:db:9a:84:e2:58:9b:58:72:14:4d:2b:
                    6c:5a:f6:0a:c9:0f:01:36:14:69:16:95:03:94:76:
                    09:5d:ef:2b:b6:df:c9:18:54:e6:34:83:4b:cd:67:
                    0d:6f:11:73:86:36:5b:4a:b6:2d:9e:58:12:1d:18:
                    93:5b:2f:3a:79:04:58:36:3e:64:dc:a5:d6:41:db:
                    81:83:24:0a:98:9b:60:75:49:bb:99:27:ed:a6:9b:
                    44:dc:e4:c3:ea:c6:82:13:8b:6d:18:71:1f:20:81:
                    17:92:e8:df:06:25:bd:6a:52:55:40:53:43:96:10:
                    23:cd:26:4d:8d:28:60:d4:5e:0c:d1:04:33:43:7f:
                    94:5c:dd:31:1b:d1:33:eb:b5:1d:76:45:d2:04:38:
                    5f:a6:d7:81:f5:4e:fb:0a:86:1e:5a:58:a5:30:21:
                    00:e8:05:c4:85:3e:54:08:b5:a4:9e:b7:d5:c5:42:
                    30:f1:0f:c2:97:3b:40:1a:ab:cc:03:4e:d3:22:b9:
                    98:df:7c:56:e6:97:20:eb:33:07:eb:f4:eb:bc:34:
                    90:44:c4:1d:0b:90:c3:0b:6d:21:70:46:c8:db:07:
                    82:cd:16:e7:b1:47:ed:18:1c:ab:12:c8:82:cd:f7:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:13:61:79:D3:CB:B8:85:A9:91:F2:72:01:A3:88:F9:6F:35:2F
            X509v3 Authority Key Identifier:
                keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/382882524E0711F198AFA3EAC9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.92.0/24
                IPv6:
                  2001:df6:6480::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:42:7b:9f:07:f5:4b:91:02:63:04:d2:8e:ac:d5:fd:44:
         7f:8c:54:36:c5:ed:47:ad:9b:1d:3a:e8:5c:63:4e:83:ac:81:
         d6:6e:a2:42:2d:8a:a1:66:82:8b:de:4a:db:5e:2a:c4:20:19:
         e1:a6:93:c7:9c:81:d1:f3:d5:ea:11:32:52:72:04:f3:09:5c:
         9e:07:cc:3c:50:56:bb:65:63:69:13:2d:ac:58:1f:14:9f:fc:
         0a:f7:4e:21:0f:fe:0a:c5:be:f2:8f:f7:e8:91:32:e4:bb:7e:
         d6:15:7b:32:87:0a:a4:73:e1:23:47:c1:de:57:33:b3:51:06:
         ec:50:9c:77:80:7b:c1:84:7f:93:85:e0:61:62:4e:98:dd:9d:
         0e:96:6e:24:d7:06:53:80:50:26:d2:b3:86:8b:2e:bf:96:c8:
         f5:6e:8b:c3:a9:55:69:9d:3b:83:17:a2:8f:d8:de:59:50:53:
         2e:63:7e:6b:84:b8:33:50:57:16:d2:08:a3:f6:59:a1:7c:20:
         31:1d:7c:b6:db:37:3d:af:74:d3:9c:f3:88:4f:40:7b:b7:71:
         24:8d:67:b9:d3:8c:39:80:f6:4d:87:9e:6f:3c:ac:c1:7c:50:
         9a:c8:ce:e9:b4:b3:6e:7e:c4:3c:94:10:b8:55:f3:c4:82:78:
         5e:92:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:57 2026 by rpki-client