Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/005417D285BC11F18BCEC21B61A30FBC.roa
File:                     005417D285BC11F18BCEC21B61A30FBC.roa (raw, json)
Hash identifier:          FdR8EfX2jyJlYaepKSYMj9Kz67EaJGe2jtFZcU+7oXo=
Subject key identifier:   52:9E:F3:B6:89:F8:E9:77:E4:F7:75:76:10:C8:E7:7C:73:FF:11:9B
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       0298
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/005417D285BC11F18BCEC21B61A30FBC.roa
Signing time:             Wed 22 Jul 2026 10:56:33 +0000
ROA not before:           Wed 22 Jul 2026 10:56:33 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138346
IP address blocks:        103.179.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Jul 22 10:56:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a60a1e1-87d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:1c:56:a7:b3:95:8c:ed:67:7b:82:63:74:
                    16:ce:13:22:1d:d6:73:eb:f8:03:b7:b3:66:c7:94:
                    ea:4b:43:42:d6:3c:68:76:96:dc:8c:b8:2d:f3:c9:
                    2f:5d:f8:96:90:4e:f0:57:f1:02:84:4e:27:06:3c:
                    1a:5a:70:eb:5e:25:aa:80:a0:bb:40:04:57:26:73:
                    e7:e9:09:d1:0b:ef:d1:c6:3f:52:b1:02:63:3a:11:
                    68:6a:74:2e:6b:8c:35:6c:55:c2:37:f4:50:58:70:
                    cd:0e:36:fd:2b:23:6d:c6:5d:7f:18:2a:ae:17:93:
                    94:54:64:5c:f3:67:0f:1b:41:cd:67:ee:07:90:13:
                    64:2c:3e:15:26:e8:e4:34:81:d7:20:c7:f4:0b:c4:
                    15:21:01:02:ab:3d:e6:05:d8:cb:c0:b3:3b:6f:83:
                    94:b9:5b:de:2b:df:8d:28:c2:4d:99:63:a8:fa:c0:
                    ed:de:69:43:46:fa:a3:c5:b7:e0:a1:4f:8d:65:53:
                    ba:d7:6d:e5:f2:c6:3d:a6:3a:d6:e4:1b:99:7c:9a:
                    4f:67:f0:24:4d:04:ee:35:c7:ac:86:5c:fd:6e:ff:
                    cf:b7:8f:54:43:3d:d4:ea:1e:62:5b:8d:22:b6:10:
                    2f:ad:02:38:7d:63:27:6f:b4:fc:78:bb:92:36:d8:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:F3:B6:89:F8:E9:77:E4:F7:75:76:10:C8:E7:7C:73:FF:11:9B
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/005417D285BC11F18BCEC21B61A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:4e:c2:b0:2f:3d:da:d8:1d:4b:8f:20:3e:53:32:3d:a3:48:
         e7:c5:9e:26:41:2e:1a:c5:9a:b7:d8:95:59:e6:d3:f8:4d:b8:
         aa:db:6c:9f:16:d0:67:a7:b5:74:c7:c9:39:db:cb:ce:5d:53:
         ce:af:33:72:d3:fe:c9:79:85:62:71:76:8d:43:0e:58:26:28:
         35:ed:87:44:79:f1:42:4e:5b:73:a2:b3:ed:13:05:50:2b:4c:
         8e:ac:bd:e9:bc:b1:c2:9f:6b:15:b5:d1:39:fa:22:3f:d6:59:
         07:8f:52:9d:89:2a:4c:08:4e:84:1d:e5:bc:11:42:61:0e:6c:
         28:ad:0e:00:70:55:2e:dc:7b:92:ee:ea:31:bb:62:a5:4d:c0:
         93:01:8d:51:18:36:68:73:ee:c7:40:44:84:12:71:ce:5f:b9:
         01:b9:8c:f6:b2:fb:d0:ff:b5:57:34:7e:81:42:64:53:a7:df:
         e9:6f:30:b6:fd:51:e4:43:25:1b:91:b2:62:4e:33:2c:5a:aa:
         5e:ef:c4:4d:81:10:42:ab:df:b3:34:5b:7d:d2:70:9d:17:e6:
         b1:47:6a:a8:32:b1:2e:c3:a0:8c:cf:c1:cf:09:c0:d6:18:71:
         af:f3:0e:15:94:43:51:32:22:50:9d:db:a0:ac:1d:e7:d9:49:
         6b:e0:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:43 2026 by rpki-client