Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/B00A7E6A5BDC11F098C0ED78C4F9AE02.roa
File:                     B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (raw, json)
Hash identifier:          PEO9/Rkt8m+pyyJkGCdzr2+Y/5Xmpnc2phX14eh3ivU=
Subject key identifier:   E2:36:9A:B8:3A:B0:B2:B0:06:04:60:3B:EB:B0:60:FA:AD:5A:D3:97
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       0681
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/B00A7E6A5BDC11F098C0ED78C4F9AE02.roa
Signing time:             Thu 14 May 2026 23:32:28 +0000
ROA not before:           Thu 14 May 2026 23:32:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151786
IP address blocks:        103.168.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: May 14 23:32:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a065b8c-5565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:9f:3e:63:1c:4b:9b:1f:1b:d5:c3:5a:a9:
                    66:76:d0:03:ee:86:3f:79:ab:58:fa:83:f1:31:67:
                    e7:29:45:c0:ac:6e:3e:b7:77:3e:fe:f7:2c:6a:88:
                    64:82:a8:4a:70:ee:7e:8a:46:86:99:76:a8:71:df:
                    4e:d7:bb:c0:d2:08:4d:b0:37:04:65:73:cc:a6:ca:
                    c8:cc:49:ad:32:42:76:67:d8:52:90:95:20:81:01:
                    f1:2f:d7:30:e3:a9:d9:ac:96:23:26:90:44:9c:46:
                    b6:e0:80:7f:93:6d:51:d0:c6:fe:70:03:1d:fd:0a:
                    77:86:d5:68:9c:c0:1d:fa:da:72:27:20:a4:e6:36:
                    d0:b9:0f:a9:29:6a:c0:d0:6a:4e:99:aa:78:37:c4:
                    c1:fd:08:bc:b2:35:ca:80:fb:b6:03:77:5e:a9:57:
                    9e:da:6b:ae:8f:54:fa:87:12:81:ab:bc:7a:bc:4d:
                    36:c7:7c:84:cb:a1:9a:2a:54:64:0a:f1:16:66:b0:
                    e4:2b:1e:c9:53:74:b1:d9:cb:f6:a6:3d:d3:36:f5:
                    db:a8:6c:65:22:76:06:3c:9a:a5:5a:09:3e:54:61:
                    c9:8b:60:1b:dd:89:ab:6a:2f:ff:05:52:b6:2e:5d:
                    f9:b5:b0:a9:44:96:3f:a8:0f:c2:21:56:6e:14:90:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:36:9A:B8:3A:B0:B2:B0:06:04:60:3B:EB:B0:60:FA:AD:5A:D3:97
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/B00A7E6A5BDC11F098C0ED78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:6d:fa:b9:06:19:db:ec:1a:51:d3:f3:b1:94:c6:d6:30:
         a0:a6:d0:fa:f4:c6:21:d3:48:4d:0e:c9:11:eb:2b:47:87:11:
         f6:16:0d:c1:e0:6d:12:6c:70:5c:d6:cb:0a:6f:50:28:0e:2e:
         68:4a:df:a6:31:ac:77:a7:5a:d0:9e:aa:99:9b:7e:f3:3b:12:
         09:fe:cf:e8:8f:2e:1c:c1:46:a6:5c:9e:53:8a:45:f5:12:09:
         d7:bd:be:21:fb:9b:08:02:c0:6c:d1:19:86:8c:0c:ad:98:08:
         ae:eb:2a:06:1d:24:3f:5e:5e:2c:c7:8e:04:30:1a:c7:bd:b0:
         89:d4:23:e8:6c:6f:72:b7:e0:8d:47:81:77:51:6d:42:f7:8c:
         71:36:0e:d2:79:4d:70:a8:ef:9d:62:cc:33:59:4e:b8:f1:c7:
         f0:15:d3:cc:1c:5f:10:3e:47:d2:a8:f3:03:04:9b:9d:fe:2a:
         90:14:94:ea:21:b9:3b:4a:ea:fe:2d:5e:11:3d:b1:7e:6e:be:
         54:99:93:51:37:c1:62:fc:c4:3a:e4:dc:5b:64:f1:35:1e:e9:
         7c:ff:a5:47:b4:2b:a3:20:c3:db:b7:6f:91:7b:19:87:2a:16:
         48:e4:c0:3b:16:75:7a:f4:ab:49:ba:d3:39:02:81:76:ee:67:
         f3:5d:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:53:02 2026 by rpki-client