Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/815A09C645F311F19D4C8BBB9A833773.roa
File:                     815A09C645F311F19D4C8BBB9A833773.roa (raw, json)
Hash identifier:          gXEe/7OkKqUCUDk1lxEeptn1iCrY7lDmXDjXXtgnbdk=
Subject key identifier:   7C:F0:67:06:C1:AC:62:19:9A:8D:7A:5A:64:C9:F5:E8:A5:02:E5:BF
Certificate issuer:       /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial:       03E1
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/815A09C645F311F19D4C8BBB9A833773.roa
Signing time:             Sat 02 May 2026 06:52:38 +0000
ROA not before:           Sat 02 May 2026 06:52:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149809
IP address blocks:        103.186.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
                          rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
        Validity
            Not Before: May  2 06:52:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f59f35-62de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:ff:9d:7c:53:27:a5:4e:87:fc:65:f2:63:
                    5c:70:72:61:b6:27:49:76:8a:13:0c:a0:40:f1:a3:
                    fb:ea:be:e8:64:0c:4e:f8:76:4b:5d:02:ad:2e:34:
                    4b:53:82:d6:4b:9e:af:d1:b7:cf:31:24:24:83:64:
                    6b:7a:55:17:34:f9:71:a1:8e:af:89:bc:b0:b5:fa:
                    2d:6a:e3:3c:e8:6a:eb:b3:4e:e7:71:ac:e6:c5:44:
                    ca:24:89:46:e7:40:fa:47:94:42:de:91:91:cf:18:
                    3c:c8:ba:0f:df:b1:c9:3e:2c:ef:9b:8c:c7:94:2a:
                    d1:c8:7a:27:99:29:18:c5:43:25:1a:95:cc:5e:0a:
                    46:4b:98:3c:60:55:c7:bc:ac:ce:5f:e0:64:79:27:
                    17:62:4e:17:1f:9c:9f:74:27:5f:06:6f:4a:d1:a2:
                    99:77:00:6f:d5:92:5f:60:85:e1:10:b6:62:46:45:
                    ae:a7:a3:ed:2f:05:75:5b:7d:22:96:a1:0a:a5:cd:
                    bc:cc:c4:6a:31:4e:8f:9a:d2:8b:e6:20:d9:4d:09:
                    88:28:26:6b:f0:8e:aa:6d:f9:50:ac:85:65:0b:07:
                    fb:f9:06:28:93:b2:ae:3f:87:d6:b3:17:8b:1c:8b:
                    89:2b:08:2b:40:71:12:33:b9:5e:79:16:de:2b:d8:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:67:06:C1:AC:62:19:9A:8D:7A:5A:64:C9:F5:E8:A5:02:E5:BF
            X509v3 Authority Key Identifier:
                keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/815A09C645F311F19D4C8BBB9A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:50:60:d5:07:bc:67:16:24:65:a0:cb:8d:a8:b4:dd:9c:ee:
         dd:1a:39:84:13:5b:13:68:e5:4a:9b:60:59:b8:f1:47:d6:71:
         b6:bd:8d:37:2e:86:a8:1f:8a:a8:8c:72:ec:a0:bc:1c:da:1a:
         2d:a2:37:5a:ba:89:f0:86:37:98:c3:f1:6e:bf:0d:b2:27:d7:
         57:92:7a:8b:60:83:6e:17:91:ab:8f:bb:c3:b9:d2:0a:c2:00:
         bf:e8:5d:24:75:be:b3:fa:a2:82:04:c4:ef:95:10:26:9e:ec:
         7b:3c:c8:a8:1d:e0:60:c5:4a:61:36:51:d3:14:dd:18:4c:5a:
         cd:77:ce:e0:af:45:4c:ed:27:ef:de:bb:60:11:4e:6b:2f:01:
         c2:6d:67:b9:73:ac:1a:c4:56:fe:59:6f:87:2c:ce:42:2a:1c:
         e5:e8:5b:5e:a3:6d:35:cc:3f:33:8e:7f:dd:4a:2f:77:4f:19:
         55:7c:3e:2f:d1:59:d4:9e:8b:61:07:7b:41:0d:ec:8c:86:7c:
         be:36:5a:4d:7e:b0:75:d6:bf:af:d0:88:3c:d0:9f:07:70:00:
         37:0a:7d:65:87:bc:3c:0d:8a:5d:52:8a:75:6d:89:95:14:aa:
         6b:6d:45:2e:36:e8:b4:33:67:c9:15:cd:12:fe:d3:f9:5b:20:
         87:88:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:46 2026 by rpki-client