Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
File:                     DC072950DCB911EC8AAB8710C4F9AE02.roa (raw, json)
Hash identifier:          yIT11F5bzvl0TOgsMOdhBplU4mPhfLVfO6p3F7q06xs=
Subject key identifier:   FE:A4:22:FC:0C:A4:37:0E:4D:A0:74:1D:23:1D:24:92:A6:6D:40:67
Certificate issuer:       /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial:       03DB
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 00:50:03 +0000
ROA not before:           Fri 07 Aug 2026 00:50:03 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137424
IP address blocks:        103.186.122.0/23 maxlen: 23
                          103.186.122.0/24 maxlen: 24
                          103.186.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
                          rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
        Validity
            Not Before: Aug  7 00:50:03 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a752bbb-5a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:53:f8:b9:55:40:9c:ac:79:8c:84:60:30:
                    34:9c:f0:28:da:a0:42:53:ba:5f:f8:dd:2a:b9:39:
                    7e:e9:a1:6f:5e:73:fb:8e:4e:f0:71:6c:28:c7:60:
                    5f:bf:0b:eb:e1:e3:9d:d8:64:1f:d8:6e:82:78:02:
                    3d:b6:ca:67:46:21:02:97:9e:7b:18:85:93:1f:3c:
                    bf:63:68:2a:06:d8:a9:f9:47:73:f2:9b:81:47:78:
                    23:dd:87:8a:55:8e:c6:b7:41:3b:f2:8c:56:7c:4d:
                    7e:ec:a5:30:3d:95:6a:d0:1c:26:1d:36:ab:28:2e:
                    be:cf:94:0e:2e:15:48:2e:2b:56:9c:11:3d:1e:da:
                    83:f8:50:3b:be:7e:60:3f:88:b7:6d:0a:f4:b5:1b:
                    7b:e6:36:09:ae:d9:52:0f:9d:88:df:7b:4e:42:5e:
                    d4:04:64:64:4d:34:6f:2c:36:d0:e5:3e:b9:0d:45:
                    3b:29:7e:54:5c:65:47:85:35:57:e1:3e:ab:cc:2d:
                    e5:f8:b1:50:8e:7e:26:36:6d:71:29:e7:2a:ac:00:
                    1a:8b:8a:8e:43:36:fa:da:09:1e:1a:3e:20:2d:5a:
                    00:9e:1d:22:00:12:e2:a0:93:07:98:d1:c8:bb:e8:
                    29:ae:68:cc:e5:29:8a:a2:5a:2b:53:4b:66:5b:34:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A4:22:FC:0C:A4:37:0E:4D:A0:74:1D:23:1D:24:92:A6:6D:40:67
            X509v3 Authority Key Identifier:
                keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:f1:08:5d:d7:ec:4f:f8:32:a5:ee:d1:b6:ca:4e:2b:cd:
         2d:cc:b5:d7:b1:39:81:7e:97:66:aa:f3:f5:8d:52:e7:31:da:
         f8:e9:c3:e3:c8:00:5b:02:7a:e4:6e:e8:d7:8c:23:24:34:5d:
         23:44:5b:41:0e:2e:41:b9:80:67:38:a7:8d:4b:2b:c0:10:05:
         26:a8:b0:f3:8e:a2:44:71:d9:51:9b:67:c4:7b:af:a1:6f:47:
         65:ce:0e:8f:9b:f3:6e:c7:5c:12:dd:7e:8c:14:27:63:10:15:
         5b:d1:83:fa:23:dc:08:d5:da:c6:b3:d0:aa:6f:80:5b:c9:a5:
         99:1a:a5:ab:f6:f7:ec:6d:f1:82:9f:ac:76:06:c9:35:6b:6f:
         6d:11:04:c5:13:14:a5:a7:94:bd:79:b9:ec:94:91:4f:56:93:
         34:5b:ae:41:f5:0c:21:0e:c9:33:71:96:df:c6:0d:25:63:48:
         7b:2f:57:a9:de:ac:ee:45:45:d2:d3:a4:13:1a:87:2d:e5:bf:
         3b:8c:d7:92:3b:66:b8:64:c2:c7:75:f7:44:e0:19:25:a8:0c:
         61:8a:61:4a:a7:30:37:08:bc:b1:3c:ae:a2:53:74:38:95:74:
         75:93:de:10:e1:63:f1:d8:08:81:24:a3:64:20:72:6c:65:6a:
         ec:93:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:37 2026 by rpki-client