Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa
File:                     00078764E06811EF8716401DC4F9AE02.roa (raw, json)
Hash identifier:          JAiUHomtiUqiqYTLwAToU1Zg3aNGAOGf/55bKHeBYC4=
Subject key identifier:   22:02:82:A3:1B:09:BD:FC:7A:AB:67:0E:0D:64:2D:AE:74:BC:59:F6
Certificate issuer:       /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
Certificate serial:       012F
Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa
Signing time:             Tue 25 Aug 2026 05:56:29 +0000
ROA not before:           Tue 25 Aug 2026 05:56:29 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132905
IP address blocks:        103.37.48.0/22 maxlen: 22
                          103.37.48.0/24 maxlen: 24
                          103.37.49.0/24 maxlen: 24
                          103.37.50.0/24 maxlen: 24
                          103.37.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl
                          rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
        Validity
            Not Before: Aug 25 05:56:29 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8d2e8d-7019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:8a:83:d4:53:dd:0c:aa:77:1c:a2:2b:d4:
                    44:bc:23:21:b1:aa:b3:46:af:b0:a4:9e:a9:e3:3c:
                    53:2b:cd:f4:7c:9a:a0:20:87:65:c6:b0:84:2a:b2:
                    f3:8e:78:5e:70:57:4c:a2:e6:9f:1b:e9:17:dd:df:
                    29:b1:f3:d7:78:2f:8d:a6:9a:14:2d:b2:28:54:18:
                    5f:90:7d:db:ef:ec:f5:fd:71:f8:ab:59:2b:32:c7:
                    e3:fd:5d:0e:18:de:b8:57:49:24:e8:ff:07:1d:0f:
                    58:e3:e2:4d:17:d4:28:e6:dc:0f:60:9f:23:79:e0:
                    b9:b9:05:c6:77:ae:e5:19:fb:7c:9e:8f:02:ee:67:
                    b7:18:46:33:0d:7b:db:fa:58:68:f0:86:d1:a0:22:
                    25:18:06:59:81:9f:e8:a2:81:75:06:f9:75:90:88:
                    1e:c4:90:7b:27:1b:2c:8e:bd:eb:31:02:51:27:77:
                    2e:7a:88:73:50:72:15:1c:bb:c1:12:85:cf:08:6b:
                    40:7d:de:2e:48:65:a0:92:ae:fa:3f:c8:9f:89:ef:
                    02:e4:b8:d0:31:88:1f:47:a9:93:bf:fe:b8:2a:a2:
                    e2:3a:e5:3d:ce:02:b0:cb:c8:a0:24:d8:f4:d4:8d:
                    bb:27:8b:8d:75:77:d1:f1:ec:ee:e5:36:53:49:b0:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:82:A3:1B:09:BD:FC:7A:AB:67:0E:0D:64:2D:AE:74:BC:59:F6
            X509v3 Authority Key Identifier:
                keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:89:c9:44:93:d3:29:f4:30:b4:d3:f7:b0:83:ec:5b:17:e6:
         33:6e:ea:2f:39:d1:e4:f0:0d:6b:83:98:c8:d9:ca:ea:5a:49:
         f5:fe:ff:bf:eb:86:f1:b4:70:f5:c5:1e:40:e4:1b:67:32:bc:
         0f:53:11:5e:28:f0:16:54:28:fb:e2:be:16:a0:75:0d:a1:36:
         14:7b:ec:03:9d:05:35:e7:9b:8e:0e:75:c9:04:d0:04:99:db:
         4e:a3:fc:f6:62:32:14:dd:e7:3f:5a:9e:67:6b:f4:8d:ed:6d:
         07:62:6c:28:a5:28:4e:5d:1b:3c:db:2d:ae:52:13:c5:5b:04:
         f5:ce:8a:a7:27:d4:93:a5:24:ec:28:a9:3b:88:ba:e9:49:bd:
         79:52:1e:1b:b8:00:ef:92:84:e1:19:b9:b9:5d:63:2a:a0:ad:
         dd:20:79:8d:3f:97:6d:1b:bc:a1:2e:ae:56:36:eb:de:7c:ea:
         8f:e3:5d:39:d2:50:b5:a4:13:d3:f4:38:ea:f7:4e:79:8e:4c:
         8e:df:da:cf:f0:9a:fa:7b:31:79:17:43:b7:6d:1e:22:98:f1:
         d6:4b:f1:0b:cd:e3:7d:26:e1:e8:8a:5a:4a:1c:f7:0e:2b:20:
         ee:e4:4b:f7:06:f1:70:b1:7a:63:64:ff:50:30:5f:54:31:dd:
         bc:e7:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:03:31 2026 by rpki-client