Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
File:                     55D7D802475A11F0B3C02112C4F9AE02.roa (raw, json)
Hash identifier:          UYsgqox2fzflsFIBDLVHp1rByaNLlDesY1QVLH7+qnA=
Subject key identifier:   C6:06:C5:44:63:BF:E2:25:B7:DA:A5:51:F9:13:14:F0:65:E9:05:7D
Certificate issuer:       /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Certificate serial:       0B3B
Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
Signing time:             Sat 14 Nov 2026 19:37:31 +0000
ROA not before:           Sat 14 Nov 2026 19:37:31 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     149175
IP address blocks:        103.144.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
        Validity
            Not Before: Nov 14 19:37:31 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6af8b87b-05c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:68:58:33:a8:67:12:15:e9:10:41:c0:20:
                    06:8e:71:f5:76:a8:21:7d:82:ca:6a:82:d2:b3:c1:
                    b0:d2:92:f0:16:bb:6f:ee:f5:be:7a:ba:a4:1d:55:
                    3e:7e:db:90:76:ef:60:1e:27:0a:b7:9e:e3:6d:b8:
                    ac:e0:6a:48:37:2c:d7:44:3c:39:02:36:a3:e0:4d:
                    dd:12:d3:85:42:e0:e7:43:2a:f0:b5:50:17:bd:b4:
                    3a:d3:9b:a4:41:e9:8e:fd:a2:31:87:e9:86:5d:f2:
                    8f:f6:a7:d0:87:ff:ce:5c:ac:7a:b9:3c:b7:dc:ab:
                    80:d8:16:f6:1c:35:09:34:b6:ae:c5:bc:39:46:d7:
                    6b:2e:c5:04:06:fc:ee:98:47:7c:ff:45:5d:40:4d:
                    4a:1e:a9:bd:0f:de:c3:1e:2a:f9:de:3b:97:db:52:
                    9a:05:9d:86:8a:6a:2e:b2:34:b1:1a:97:50:db:44:
                    bd:cc:31:e3:be:42:78:12:29:28:87:2e:71:15:15:
                    0d:4b:6b:3b:14:e2:33:c7:c4:86:3f:89:43:d1:4e:
                    f4:5c:2f:95:31:08:46:5e:26:05:54:20:83:15:fe:
                    25:42:de:58:84:55:ea:f7:5f:ff:44:f3:31:f4:d5:
                    06:ac:5c:c5:aa:5b:72:36:24:bb:62:eb:19:9b:d1:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:C5:44:63:BF:E2:25:B7:DA:A5:51:F9:13:14:F0:65:E9:05:7D
            X509v3 Authority Key Identifier:
                keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:6c:12:28:83:22:eb:98:30:ef:02:f5:33:98:e2:ec:c7:e3:
         67:b7:9f:e4:a4:45:38:a8:c4:67:23:37:59:ce:c0:81:a6:4c:
         43:02:91:25:30:ae:8a:09:48:ce:dd:02:85:2a:43:49:d5:65:
         89:1e:e3:d4:58:88:0a:2e:4b:58:25:0c:fd:94:76:66:48:4b:
         1c:da:58:63:e7:56:d3:8a:9e:b9:4b:bc:57:02:44:7e:5c:6e:
         62:e9:76:a3:f7:5a:1a:63:bf:95:19:69:8a:8b:2a:0b:82:88:
         c6:96:a6:6e:fe:10:97:56:b6:05:99:72:98:6f:5d:54:94:e1:
         d7:3d:a5:7a:83:7a:a0:f3:d5:29:dc:d8:74:07:90:32:67:62:
         7c:88:32:45:e6:b5:f2:e0:9e:dd:2d:81:b4:69:41:fc:3d:cf:
         3c:f6:6c:67:91:e3:92:e8:94:30:8a:8b:f0:5f:5f:a2:f5:4f:
         54:22:5c:f1:35:8f:5c:49:5e:4a:ad:38:f1:0f:db:56:13:33:
         c3:86:76:d6:9b:1b:9e:d3:0d:d6:af:a1:e8:29:0a:4d:56:76:
         75:6a:2b:a3:72:a3:b3:32:bf:1f:c9:43:f9:ef:23:71:00:5a:
         ec:31:9b:c7:5e:11:c3:56:95:0b:5b:78:ec:a0:e0:ef:2f:af:
         99:80:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:12:42 2026 by rpki-client