Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
File:                     6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (raw, json)
Hash identifier:          3dUCIeGW9ZSEXPUxbipGG/ek5tGQ+5C3cytMAnP5RWg=
Subject key identifier:   03:01:E7:AF:40:17:7C:33:9E:D5:43:FC:C9:B7:18:F5:15:FC:58:A8
Certificate issuer:       /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial:       0E34
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
Signing time:             Fri 24 Jul 2026 18:35:10 +0000
ROA not before:           Fri 24 Jul 2026 18:35:10 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137828
IP address blocks:        103.115.72.0/22 maxlen: 22
                          103.115.72.0/23 maxlen: 23
                          103.115.72.0/24 maxlen: 24
                          103.115.73.0/24 maxlen: 24
                          103.115.74.0/23 maxlen: 23
                          103.115.74.0/24 maxlen: 24
                          103.115.75.0/24 maxlen: 24
                          2402:e1c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3636 (0xe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
        Validity
            Not Before: Jul 24 18:35:10 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a63b05e-9a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:59:1a:91:34:27:c7:e5:83:23:f6:25:b0:
                    6f:02:42:16:b7:32:44:2e:fc:1f:fe:e7:07:bd:40:
                    39:af:80:ea:dd:e3:88:ce:a4:b7:1f:8b:5b:91:49:
                    09:a3:f7:72:6e:5a:6d:cc:dd:51:35:97:08:72:81:
                    8a:1c:af:a8:4f:2b:f7:e6:4e:2f:43:7e:66:53:8f:
                    a6:ad:7d:a5:65:0c:f4:59:81:3c:b3:38:b2:dd:7a:
                    7f:c1:e1:33:ef:cc:30:9d:b8:d1:35:63:04:a7:9f:
                    d2:54:13:8f:09:d7:8c:19:fd:62:a6:b3:7c:3e:bc:
                    d0:40:df:10:22:bf:15:9d:51:85:9d:43:b6:75:4d:
                    ee:3e:bf:25:1f:62:e2:1d:e4:3e:00:da:af:76:d3:
                    bd:b6:0f:d6:91:d5:b5:60:d9:06:49:68:49:8f:9b:
                    da:a9:38:74:3f:54:2a:bd:b0:0b:27:5d:ea:68:2d:
                    f0:05:f0:c0:26:8b:4e:0e:d0:dd:71:02:16:e2:ce:
                    9e:2f:51:ba:92:48:89:f7:34:ed:88:bb:07:c5:a1:
                    45:ca:19:f6:1b:a8:ec:71:a0:ee:46:1b:f0:f3:71:
                    ba:f6:79:ea:ee:da:bb:c0:0f:ed:cc:4f:10:20:72:
                    f4:0f:9d:ee:27:42:46:07:ab:78:7e:95:dd:1a:56:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:E7:AF:40:17:7C:33:9E:D5:43:FC:C9:B7:18:F5:15:FC:58:A8
            X509v3 Authority Key Identifier:
                keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.72.0/22
                IPv6:
                  2402:e1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:72:98:ef:29:20:eb:8e:7f:f1:c5:25:a3:7b:7b:cb:b1:
         f7:92:50:35:e0:5e:ee:9f:4b:5c:d3:34:ac:dd:51:44:e8:8a:
         72:24:3a:ee:18:5c:c7:b7:c5:c9:db:3c:08:76:c3:7b:fe:0c:
         a7:b5:8f:7f:44:de:77:61:8b:c7:e8:73:ba:f8:2e:3f:a3:0b:
         a0:98:d1:c5:f0:ce:c6:5c:3d:d8:15:15:5e:4e:a6:f8:2b:82:
         39:55:16:63:36:f2:54:db:0d:41:f7:60:33:27:9a:56:8e:05:
         51:01:4c:d5:51:f4:70:25:2b:f0:5f:47:69:aa:db:5c:1b:4e:
         71:0c:17:8a:c7:91:e2:3a:09:a4:e5:fe:e6:9c:0a:da:1a:9e:
         96:73:3a:a0:4d:2f:c7:3b:48:09:ed:0b:ff:b9:7b:f0:13:cc:
         eb:c7:e7:e9:e0:a1:c0:be:ea:34:25:9a:b5:0e:c0:7d:77:a5:
         56:a5:c9:cd:7c:f2:a8:d9:57:95:8d:26:44:56:65:4c:3f:9f:
         70:1c:95:b2:40:36:85:04:10:4d:23:c8:55:3c:8f:dd:84:8d:
         9b:ac:7f:5a:8b:47:20:70:31:5c:e1:2d:a9:20:e3:a0:60:4e:
         f4:1e:1a:69:07:1f:29:cf:d0:3a:98:75:72:59:d9:7b:90:22:
         b7:26:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:14 2026 by rpki-client