Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/39FF8508738211F1B422FE586CA30FBC.roa
File:                     39FF8508738211F1B422FE586CA30FBC.roa (raw, json)
Hash identifier:          RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=
Subject key identifier:   8A:AD:E5:C6:FE:31:FC:CA:B2:2A:D0:F8:7C:B9:3A:E3:55:BA:4A:E0
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       8A
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/39FF8508738211F1B422FE586CA30FBC.roa
Signing time:             Mon 29 Jun 2026 06:17:38 +0000
ROA not before:           Mon 29 Jun 2026 06:17:38 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     205548
IP address blocks:        103.19.50.0/24 maxlen: 24
                          103.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Jun 29 06:17:38 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a420e02-e269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:cc:47:8e:21:63:6c:30:16:41:df:93:78:
                    8f:63:97:e7:b9:5e:20:6c:ab:eb:ba:22:18:20:64:
                    b6:fd:aa:6f:24:c5:04:51:51:8e:c7:6d:07:32:20:
                    36:4e:e5:44:ba:33:09:ae:00:f1:07:5a:a6:61:ab:
                    bf:f9:37:05:e7:a7:a2:eb:17:6d:62:2b:b0:9f:69:
                    7a:d4:8d:7b:2b:98:b3:d6:7f:6b:cb:cf:1f:05:2a:
                    fa:c6:f9:80:05:5e:05:27:d6:0d:53:28:cd:d8:9f:
                    b3:c0:04:e1:38:4f:7c:38:66:95:4d:57:c3:ad:e8:
                    9e:af:d8:80:ae:0b:03:6f:58:16:dc:f0:5e:86:0d:
                    0f:7f:c5:92:91:c2:3c:ca:89:d3:b9:27:f3:79:bd:
                    44:c0:d5:d2:3c:76:b1:8d:0b:37:f9:13:41:de:62:
                    f7:3d:a0:a3:a4:fe:7c:4f:78:1f:d9:7b:29:ca:73:
                    f8:86:6b:e8:1d:3c:8d:f7:db:27:fc:a4:c3:10:e8:
                    68:c4:68:08:d2:32:a0:15:22:f6:f6:70:fd:89:60:
                    4e:bf:5d:c3:ef:79:9d:f2:52:93:4b:c2:a3:bf:1c:
                    38:1e:52:0a:20:4d:a2:37:4e:e2:db:ea:93:4f:71:
                    bd:d9:0e:cd:ed:1f:b2:f8:ee:d7:35:02:19:b9:a1:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:E5:C6:FE:31:FC:CA:B2:2A:D0:F8:7C:B9:3A:E3:55:BA:4A:E0
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/39FF8508738211F1B422FE586CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:87:53:15:c9:a0:a7:98:5b:2f:d3:31:f6:06:dd:71:a2:ca:
         d3:2a:70:11:c3:3a:22:f1:4a:b6:17:54:0e:01:06:f4:2e:b4:
         b6:fe:1d:ad:97:b4:55:07:72:1a:47:56:16:18:d5:b1:c0:1d:
         0f:52:b2:9c:95:5e:6d:7a:5b:18:a6:90:d0:c8:74:f4:0b:9c:
         d3:f4:69:31:19:ed:92:f5:c4:80:b4:98:ca:70:5e:79:63:22:
         ad:31:ce:b2:01:90:6a:c0:55:1b:45:4c:ea:2a:bf:cf:0b:9c:
         2c:f2:91:8f:cb:27:4d:9e:11:2d:b3:ef:de:55:9c:8d:dd:a7:
         70:35:54:cf:6e:58:7a:3b:b7:ea:f5:e0:89:63:20:e9:1f:9d:
         fd:87:de:e0:f0:10:06:2d:38:47:66:b0:bd:81:03:e5:73:6c:
         de:8d:5f:c9:95:f5:5b:90:61:4b:15:f0:28:b4:a5:5c:64:89:
         01:7a:40:79:6b:69:d1:20:7b:3b:95:fe:a4:2d:ec:bd:7a:f6:
         83:64:57:f0:ae:ed:f4:1f:53:71:e9:bb:0f:83:97:d7:85:29:
         74:d0:dd:7c:47:72:44:31:55:3d:06:31:63:be:24:8f:92:4d:
         ac:fb:49:6f:46:60:7d:2d:6f:99:ab:11:a7:cd:c1:50:fe:80:
         95:f1:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:12 2026 by rpki-client