Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/176210F23FF611F182DAE6C398833773.roa
File:                     176210F23FF611F182DAE6C398833773.roa (raw, json)
Hash identifier:          w9aUmyYLLIpCKQS6vxeVDWsnqw2NjIzSp/vkd/WGYr8=
Subject key identifier:   46:1F:B0:23:85:28:6E:09:0B:A9:82:F9:1B:34:82:A6:3B:57:C6:60
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       04B1
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/176210F23FF611F182DAE6C398833773.roa
Signing time:             Sat 25 Apr 2026 00:33:10 +0000
ROA not before:           Sat 25 Apr 2026 00:33:10 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138983
IP address blocks:        103.180.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Apr 25 00:33:10 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ec0bc6-4059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:50:d5:27:aa:fb:d3:b4:39:7a:2a:2e:6e:
                    e3:ff:aa:fa:3f:34:f6:6a:71:84:7a:75:a1:13:2b:
                    ef:f7:0d:5b:96:fc:16:b3:f3:7d:58:4a:24:b0:ac:
                    45:70:d1:1f:71:8d:f6:18:21:63:17:20:7a:04:b5:
                    73:8d:2c:1d:31:a1:ac:91:08:d8:0b:af:6e:3d:17:
                    00:79:b4:13:6c:16:14:c5:b5:a7:1e:c9:ee:54:17:
                    06:f3:96:95:f0:1e:0e:74:ed:c0:52:e5:a4:5e:68:
                    50:8f:0b:25:c4:3d:88:56:19:b5:f8:c2:60:17:1f:
                    e5:41:1d:24:4c:3c:11:f7:65:14:1f:c4:76:69:ab:
                    1f:8b:cd:61:3a:8e:0c:f5:11:15:bc:6b:c2:58:64:
                    b8:a3:53:f3:8b:66:d5:cb:29:40:ac:07:7c:25:06:
                    c0:66:77:81:fd:50:e1:7c:cf:f9:ba:b1:04:7a:78:
                    0a:0e:11:9a:5c:b3:e1:b6:9d:a0:f2:bc:79:ea:e8:
                    a3:85:47:df:38:d0:80:c0:54:c2:5d:a3:d1:5f:1d:
                    df:1a:89:ab:6e:83:72:a0:d3:b6:56:c4:87:4b:2d:
                    00:27:8d:c5:15:a8:93:ec:8f:26:c3:b3:5a:d4:15:
                    74:9a:48:66:b2:13:b8:8d:86:39:ca:a8:62:38:d3:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:B0:23:85:28:6E:09:0B:A9:82:F9:1B:34:82:A6:3B:57:C6:60
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/176210F23FF611F182DAE6C398833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:eb:e5:de:d9:49:6d:4d:5d:4c:fa:aa:34:32:b5:16:a1:
         4e:e5:3f:68:39:f4:34:66:59:da:fa:37:0d:76:49:14:7c:d7:
         54:f9:91:e9:8a:cb:e4:51:9c:c1:dd:45:26:95:21:46:fd:28:
         e1:bb:e4:d9:5e:cc:9c:68:49:66:fb:64:cc:00:d9:a7:f1:82:
         1c:34:b5:31:d5:e7:2d:4c:8c:f4:35:42:24:83:26:6b:58:92:
         b5:1c:fc:54:f9:40:b1:d3:44:75:0b:d4:34:4b:48:2b:ea:8c:
         15:99:db:af:eb:75:b7:4e:44:26:46:2e:4f:4e:44:fe:88:7f:
         a7:db:ad:d2:e9:63:7b:80:59:bd:76:4b:b5:5b:c2:a1:2d:b1:
         1d:94:10:16:a6:72:66:01:7a:4b:23:90:0c:92:7c:82:8b:6a:
         a7:ec:1a:0b:fa:20:42:bf:d9:ab:85:8e:83:03:c8:7e:4c:b2:
         c0:87:de:d2:df:fc:56:78:7a:7a:3c:cd:41:3d:62:a8:9f:e8:
         01:0d:e1:55:61:94:9a:12:ea:47:5f:c3:f5:99:9f:a7:10:8f:
         4e:82:47:1b:ca:be:81:ae:91:f4:3b:47:dd:8b:dd:73:0e:6f:
         1d:9e:3f:f7:1c:29:bb:13:a2:8e:5a:ea:d4:1c:35:bd:f0:b6:
         1a:fc:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:01 2026 by rpki-client