Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
File:                     5DCF3814CA0E11ED9251861DC4F9AE02.roa (raw, json)
Hash identifier:          4SvZhtnQRaMclxVMRPekHetkaBiZHBA089g6qLYw1BE=
Subject key identifier:   74:B3:02:A5:68:0C:D4:75:F8:D3:32:5F:5A:35:50:B5:8E:4B:A7:A6
Certificate issuer:       /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial:       028F
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 02:51:04 +0000
ROA not before:           Thu 03 Sep 2026 02:51:04 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     139692
IP address blocks:        103.110.182.0/23 maxlen: 24
                          2001:df2:1a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
        Validity
            Not Before: Sep  3 02:51:04 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a98e098-4f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:cc:6c:4a:78:cf:ce:fb:6c:18:e5:1a:28:
                    88:1a:9a:33:8e:fc:f4:6b:49:1a:86:ba:fd:65:95:
                    81:63:d6:25:7a:99:e1:6c:61:06:5e:0a:34:63:59:
                    c1:27:21:6c:b5:f4:b4:e9:5d:5b:97:ee:e9:4d:9a:
                    55:6a:75:26:a2:60:93:a2:78:f0:63:bb:a5:96:8f:
                    38:4e:d7:0a:11:03:c8:92:c0:b5:35:e7:44:30:c8:
                    30:6a:e6:7b:d2:ed:0b:fd:bd:29:2e:cc:cd:4b:82:
                    06:3c:67:82:e3:1e:46:a4:49:cf:b3:95:0c:4c:64:
                    88:bb:c7:4a:b6:06:4d:12:61:ed:69:29:ba:c1:dd:
                    83:a4:15:24:ef:c6:cc:67:7b:4f:9c:0c:79:1d:91:
                    54:14:da:84:84:f1:4a:1e:dc:0e:08:bd:fd:c1:4d:
                    2d:a3:a3:29:1c:16:76:38:68:80:b0:9f:6c:34:04:
                    19:87:3d:ac:40:d5:75:36:43:d1:36:ee:db:cc:d2:
                    cd:14:20:60:da:0b:8e:95:5d:bb:41:21:51:28:63:
                    fa:a3:30:e4:a3:4f:34:62:19:9e:3d:63:3f:bc:ec:
                    f2:4f:e3:54:40:59:07:75:56:f8:dc:c7:8e:eb:34:
                    4a:ca:49:33:9b:f4:0f:10:5e:28:66:25:3a:87:26:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:02:A5:68:0C:D4:75:F8:D3:32:5F:5A:35:50:B5:8E:4B:A7:A6
            X509v3 Authority Key Identifier:
                keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.182.0/23
                IPv6:
                  2001:df2:1a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:2d:02:b8:9f:fa:52:08:ef:e9:cc:28:5b:37:b3:b8:3b:
         be:16:49:58:2b:e4:0c:07:4e:12:30:9f:bd:89:d0:9e:60:a5:
         13:bf:68:04:5e:7d:1a:98:cd:3a:db:79:6d:1c:93:1c:0d:c2:
         10:da:0a:94:4d:a4:75:83:30:c6:c0:26:85:ca:4f:e1:98:35:
         39:54:95:4c:e9:cf:aa:ce:d0:a3:c6:86:ae:7e:d9:eb:b9:e1:
         c8:89:1a:a2:23:2e:6c:bd:ea:1c:13:22:a5:43:15:27:c0:be:
         3c:c5:9d:75:a3:82:fe:88:84:ec:82:75:4c:51:63:b7:ae:2a:
         ca:ed:33:53:39:87:f0:69:d0:d8:75:c1:6d:3b:f4:f8:c7:f6:
         f4:1f:d3:cb:bd:ad:d3:8f:7f:a9:91:26:8f:38:6d:92:e2:b7:
         db:fa:eb:30:0b:c6:39:bb:97:6c:93:52:8e:7e:d9:9c:fc:b5:
         46:82:80:2a:df:68:af:fc:a8:43:21:87:3b:a7:8d:a4:bc:f6:
         08:37:be:9b:bb:83:fb:f7:28:f7:c6:e2:53:eb:eb:83:25:c8:
         3c:91:44:25:88:d2:6b:f7:34:83:b6:0b:41:d3:a3:e9:7d:56:
         41:ae:4a:56:fe:90:00:b6:29:08:75:ed:b2:a7:5f:41:ba:a4:
         62:5f:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:24:46 2026 by rpki-client