Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa
File:                     C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (raw, json)
Hash identifier:          6akD+UwDKfueaYXdEXgrZmwXHWiP1QAnkJC9vykKrWQ=
Subject key identifier:   CC:47:2A:F0:D6:E2:FD:9A:3A:77:00:F7:43:34:A8:4A:A3:0C:A6:12
Certificate issuer:       /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Certificate serial:       015E
Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa
Signing time:             Mon 13 Jul 2026 05:32:32 +0000
ROA not before:           Mon 13 Jul 2026 05:32:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132049
IP address blocks:        103.187.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
                          rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
        Validity
            Not Before: Jul 13 05:32:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a547870-73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:66:9d:52:ec:80:a7:69:c1:7d:7c:0e:c7:
                    11:07:4e:72:07:47:0f:81:89:cf:ab:6f:22:02:14:
                    4c:60:7d:ef:d7:3c:d1:bc:15:46:68:e1:59:1b:17:
                    d8:02:2d:a4:06:14:5f:f4:0d:a6:63:30:87:ed:74:
                    a9:95:5c:4f:3e:b7:e4:13:66:3f:73:f7:68:84:bf:
                    7a:a6:91:8a:0f:68:9c:5c:44:fa:94:8e:44:56:ea:
                    94:dd:3a:96:9a:f6:a5:d1:40:9b:d9:e0:b0:6e:b0:
                    0f:ed:5c:33:b0:45:c4:08:0a:ef:bd:e7:9a:b8:2e:
                    94:ed:6d:49:60:cc:59:e8:68:a9:b6:f8:58:40:15:
                    f6:de:6b:25:9c:2f:7d:c7:84:aa:d3:35:77:58:4f:
                    79:66:c9:49:34:42:ac:e8:33:b3:a5:0c:1b:07:1e:
                    c6:fc:14:b7:0d:c9:61:d4:74:c4:5d:ef:7f:95:74:
                    e8:d1:3a:7a:88:69:70:c1:24:c1:0c:dc:79:fe:31:
                    8c:08:fe:82:e3:90:08:f3:c7:53:3a:a1:0d:a8:2f:
                    d8:e1:a1:da:71:dd:31:b6:3d:64:48:a2:aa:bb:86:
                    9b:11:60:36:ab:be:2c:33:34:f3:96:84:dd:f1:f3:
                    20:30:9a:06:08:46:c6:1a:36:5c:a9:00:f6:ce:7f:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:47:2A:F0:D6:E2:FD:9A:3A:77:00:F7:43:34:A8:4A:A3:0C:A6:12
            X509v3 Authority Key Identifier:
                keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:34:7b:07:a4:74:2b:38:f2:58:aa:6b:34:82:4a:de:97:
         5d:9c:f9:a0:60:21:5a:6f:40:30:a5:dc:91:5b:82:85:94:69:
         a0:79:07:23:e5:c8:ad:d6:a8:5d:7d:b8:39:6a:5e:86:9d:2c:
         ca:aa:d6:30:0b:c2:63:f9:83:f7:19:a0:43:82:fc:28:fd:0b:
         c1:ac:61:72:a0:7a:56:49:8b:24:5c:db:bd:c1:8f:76:79:f7:
         f3:5e:3e:59:f5:05:99:49:64:3c:92:49:90:4a:bb:d3:b4:4b:
         15:92:a3:57:0f:8d:b8:ee:69:a3:02:ac:40:9f:40:6c:c4:e0:
         d5:e7:04:40:a0:f1:bf:06:c8:28:af:ec:34:d1:f9:7f:2e:d5:
         8a:d3:59:7b:0f:67:8d:57:75:02:f5:ad:3f:8c:6c:12:e7:83:
         ba:97:e3:ca:68:7d:91:f7:bc:f5:cc:93:a0:e0:54:a2:57:15:
         47:83:35:43:e6:bc:af:7f:9c:ff:ac:79:20:35:ba:7b:c1:f2:
         4d:64:84:eb:ff:92:4e:c5:c1:37:60:b2:02:69:58:bd:68:94:
         01:4f:20:e8:8d:04:32:f0:ab:27:de:e2:57:4c:9d:c3:ae:d2:
         3c:58:73:e2:22:d2:42:a7:dd:7f:57:05:ac:d6:bb:35:4c:bd:
         c5:bc:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:30 2026 by rpki-client