Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/24365CBCF51411EFB44F001BC4F9AE02.roa
File:                     24365CBCF51411EFB44F001BC4F9AE02.roa (raw, json)
Hash identifier:          BuYCp5uJAq3ma1eGzfGZr2VdMD7Rp79TRr3Jrfv3b+A=
Subject key identifier:   D0:A8:84:CA:01:D3:9A:9F:CE:E6:76:F4:0A:B7:82:25:83:72:6B:F7
Certificate issuer:       /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial:       06DB
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/24365CBCF51411EFB44F001BC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 22:29:27 +0000
ROA not before:           Thu 30 Apr 2026 22:29:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136380
IP address blocks:        103.165.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
                          rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
        Validity
            Not Before: Apr 30 22:29:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3d7c7-a21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:48:84:b5:3d:71:b0:eb:a7:6e:62:01:b0:
                    ec:5b:f1:75:ec:01:f9:4f:9b:74:ca:d0:f2:ef:6f:
                    a4:92:80:8b:41:3b:6c:f6:43:ec:88:ff:e8:bf:4b:
                    58:87:84:b1:e5:73:b5:16:39:b2:63:25:7a:4a:ec:
                    1a:4b:1f:39:e6:fe:e1:90:be:85:cd:a1:a0:0c:dc:
                    17:ec:0a:ab:dc:43:74:b6:b4:33:8c:72:66:a4:77:
                    75:29:1c:ff:f0:00:32:44:8d:50:54:d5:e6:67:06:
                    93:e1:a5:a3:cf:4b:35:69:8d:0f:c6:78:14:d3:c1:
                    e7:48:ee:25:14:74:76:2d:e8:a5:c7:95:dc:73:af:
                    31:20:f7:f2:40:ec:18:9c:dd:19:14:ce:12:60:99:
                    aa:17:ce:ad:5d:b1:b0:25:c4:d1:3c:ea:6e:c3:98:
                    01:48:9e:36:79:ae:c6:c6:54:5c:66:da:82:0e:47:
                    38:20:e2:e3:f5:34:1b:67:68:a7:5c:9e:44:f1:e4:
                    01:89:1a:f4:34:95:98:85:0c:52:c6:7f:c6:6b:c1:
                    b3:cb:2b:54:a7:d4:c7:95:d5:4b:ca:20:41:6d:de:
                    3e:a5:5b:f2:48:6d:42:a3:11:28:92:67:d0:12:d1:
                    a7:c9:52:0c:f3:9b:ca:ef:29:e6:dc:25:9a:aa:a1:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A8:84:CA:01:D3:9A:9F:CE:E6:76:F4:0A:B7:82:25:83:72:6B:F7
            X509v3 Authority Key Identifier:
                keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/24365CBCF51411EFB44F001BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:27:55:de:3d:6c:cd:f9:9b:1c:6b:d7:28:05:27:c3:91:
         31:67:bf:be:84:66:ad:e1:42:82:c7:4a:aa:0c:20:0f:71:80:
         80:3a:86:bd:dd:fe:c7:65:da:73:cb:a6:7e:3d:1e:77:8a:e3:
         ac:54:54:8e:b7:18:30:99:54:5c:40:e0:2a:84:66:3e:16:6f:
         40:2c:49:3a:c5:f2:08:81:11:3a:6a:10:bb:eb:84:c2:0a:69:
         25:ed:ff:44:38:59:a4:21:29:de:59:9b:aa:fc:cb:b0:b4:17:
         86:0b:52:f7:34:c4:d2:4c:a1:b3:39:5a:19:f4:8f:4b:2f:84:
         4a:d4:2c:a6:6c:2a:77:a5:44:b7:8f:67:1e:26:3a:79:e6:e8:
         54:21:eb:e2:ae:8e:36:9e:ae:9f:21:56:6e:53:9b:da:ba:cb:
         bb:64:40:bb:b9:e1:04:c6:b4:26:f8:1f:99:4a:d0:bf:fc:0d:
         0e:03:14:fb:10:32:4d:ee:06:17:9e:52:62:43:ad:e7:61:b8:
         6e:61:5a:51:e0:b3:fa:12:f6:b8:89:c5:f8:e6:de:f8:df:fb:
         3b:9c:b5:c3:c7:7b:2b:7b:56:5c:86:09:d5:95:f4:ea:8b:84:
         41:69:76:64:94:b5:1a:e0:b1:9c:5f:6e:81:ff:9e:31:1f:82:
         54:3a:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:42 2026 by rpki-client