Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa
File:                     5728551C6E9611EF8FEC9C1BC4F9AE02.roa (raw, json)
Hash identifier:          cVxr4IIPhDNkyo4KWXqFgpodx3w2GpS0AheV1jrJkc0=
Subject key identifier:   77:11:A9:C2:63:EB:36:00:EC:95:38:98:CC:CB:0E:5C:A3:AB:7F:8E
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2E2B
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa
Signing time:             Tue 22 Sep 2026 16:22:32 +0000
ROA not before:           Tue 22 Sep 2026 16:22:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138650
IP address blocks:        103.102.43.0/24 maxlen: 24
                          2405:1500:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11819 (0x2e2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Sep 22 16:22:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab2ab47-76f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:19:eb:2b:59:9a:31:5e:08:ec:e4:c8:3f:
                    e7:55:6b:28:1e:2e:56:52:cf:85:11:62:5f:31:35:
                    4a:14:5e:40:46:be:e3:5e:2e:5b:36:6c:84:02:22:
                    bf:ad:2d:9a:ef:19:1f:aa:9a:d0:72:20:07:4a:78:
                    8d:97:c5:44:55:e3:5a:f1:12:32:71:9a:23:e1:f5:
                    28:a4:04:31:8a:af:1d:a3:86:d6:73:a8:f8:30:3b:
                    4f:02:b3:01:85:3b:98:10:db:75:0b:69:18:ca:54:
                    38:63:b5:75:9b:e0:21:0c:71:bd:4f:35:5e:af:9c:
                    53:10:c1:ef:76:d2:d2:6d:f1:76:c6:1c:7c:78:3b:
                    5b:29:ba:9f:dd:3e:a6:e0:3e:0e:9e:af:a9:50:86:
                    5a:8d:84:25:9b:bf:68:90:80:04:a1:5a:19:84:4a:
                    c3:f0:9f:2f:90:3a:7e:8d:94:c4:09:49:38:ce:8b:
                    f5:98:24:95:72:15:c9:47:69:76:8e:06:d6:fc:fe:
                    9e:9a:c6:c0:f1:c2:37:e9:a8:98:3f:e2:1e:6d:69:
                    3d:1d:2b:18:ff:36:59:73:f7:86:7e:27:c3:c9:24:
                    56:31:ac:5d:23:62:b2:bc:76:a9:59:b8:81:48:38:
                    90:8f:e9:30:16:25:ec:8e:d4:b5:b1:43:6d:05:20:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:A9:C2:63:EB:36:00:EC:95:38:98:CC:CB:0E:5C:A3:AB:7F:8E
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.43.0/24
                IPv6:
                  2405:1500:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:69:05:5b:4a:1c:e0:57:c3:5a:e0:60:0c:d8:0d:51:f3:87:
         7f:cf:f4:83:7e:3e:43:d7:32:20:af:bf:35:e0:1e:b1:46:03:
         31:60:2d:f0:67:8f:c5:27:b0:4c:ba:14:e3:ca:78:2b:94:81:
         c8:67:92:0d:69:be:55:56:13:57:69:35:34:8d:5b:6b:19:59:
         9a:ad:e8:ab:df:1d:71:ef:22:21:bb:7a:45:fa:6f:e5:73:bf:
         e4:4a:85:49:20:42:bd:06:44:45:75:d3:50:25:87:c7:36:92:
         4a:79:f6:43:c5:45:09:1a:98:0d:70:f9:da:7c:ed:21:dd:10:
         60:5a:c7:bd:07:9e:55:8b:00:22:6c:50:f7:65:73:e2:6a:f3:
         e0:f3:8d:db:c1:4e:e6:97:b9:06:84:c3:d8:e3:77:05:c9:61:
         78:b0:60:ef:57:7c:54:9f:49:8c:c2:ba:3c:f0:c0:60:bc:41:
         a5:0b:71:66:50:08:46:92:07:09:a0:0e:2b:37:a8:58:d4:d0:
         bb:ff:1c:de:bc:92:ae:f9:ab:28:89:a4:d8:90:9a:bb:05:e6:
         45:60:75:1f:9b:88:d0:a4:e9:16:a1:90:60:b7:41:e0:f2:e0:
         5c:b1:3d:3c:5d:07:c4:35:39:8f:3a:45:6d:42:62:78:dd:95:
         81:7e:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:12:12 2026 by rpki-client