Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/1343D93C63CE11F199F398E58147A888.roa
File:                     1343D93C63CE11F199F398E58147A888.roa (raw, json)
Hash identifier:          TlGiJrulTWEFZNBIN9LHGDpZV9r9vltEki0HqBQhiv8=
Subject key identifier:   F9:CA:FB:DC:19:7B:AC:A4:A4:74:7D:16:7E:26:A5:D4:1A:D1:06:DB
Certificate issuer:       /CN=A91B01B9/serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
Certificate serial:       35
Authority key identifier: 8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/1343D93C63CE11F199F398E58147A888.roa
Signing time:             Tue 09 Jun 2026 06:40:17 +0000
ROA not before:           Tue 09 Jun 2026 06:40:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45382
IP address blocks:        103.131.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl
                          rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01B9, serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
        Validity
            Not Before: Jun  9 06:40:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a27b551-4d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:58:bb:06:65:a6:7d:83:fa:9c:24:39:a2:
                    97:f6:77:7e:bc:77:3a:0f:86:73:fe:56:c0:69:a4:
                    de:83:22:8c:b4:72:ba:d3:c2:c7:32:2a:f4:a6:03:
                    e3:8c:c9:65:c7:99:f4:c3:26:63:81:0a:b4:00:29:
                    03:87:67:bc:93:04:fe:eb:3d:ee:83:b9:12:57:cd:
                    c5:be:15:e3:d4:65:fb:5d:06:a3:ff:28:59:b0:7b:
                    d9:17:23:5a:87:81:ee:1b:4e:a7:d0:f1:2e:10:86:
                    4c:49:ce:20:e4:bb:bf:57:5c:ab:c7:e2:5c:8f:95:
                    c0:86:84:ee:64:a5:8d:3a:c7:69:aa:41:2a:54:00:
                    38:11:d4:10:0f:86:9a:f6:08:7a:50:db:7b:90:f0:
                    6a:c8:32:37:a7:d5:f0:a6:81:aa:6b:ab:e6:3b:bd:
                    d6:f9:94:2d:f3:c6:07:37:5d:ca:64:c0:b7:fc:14:
                    cb:d0:c5:9a:1e:44:04:69:2b:8f:19:8d:f5:aa:75:
                    82:36:11:ab:44:28:f0:11:24:a7:70:10:9c:57:74:
                    8c:12:dc:f3:77:9f:40:6d:98:d4:74:1d:06:72:2d:
                    52:87:73:52:ed:96:9f:82:b3:31:5a:a1:a2:66:1e:
                    35:9d:b8:9f:60:ad:11:33:4c:c8:f0:a9:d1:b4:b9:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CA:FB:DC:19:7B:AC:A4:A4:74:7D:16:7E:26:A5:D4:1A:D1:06:DB
            X509v3 Authority Key Identifier:
                keyid:8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/1343D93C63CE11F199F398E58147A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e1:21:ec:bd:1d:08:0e:4d:ee:49:e3:7b:b8:c5:84:34:05:
         77:d4:41:81:29:c2:0d:93:f8:e6:51:2f:0d:3a:08:52:f9:cf:
         f0:72:2c:f7:a9:9a:cb:bd:4e:7a:32:3f:c4:4a:bb:03:4a:85:
         be:6d:38:e8:99:65:2d:a8:90:fa:7e:86:06:27:74:0a:37:c2:
         00:bd:42:a9:03:5e:2a:c9:93:22:8c:38:f5:a3:de:59:19:41:
         27:66:8b:1f:0c:89:5d:09:29:f1:a9:42:06:35:eb:cf:ac:f6:
         50:8e:32:af:f4:2e:de:d1:cc:5e:c8:e1:b7:7f:25:58:e7:52:
         9a:2e:a6:9b:5e:de:ab:f6:b6:19:a2:18:c0:07:1d:e5:f7:76:
         f8:10:fe:d1:52:f5:34:e3:27:db:3d:b1:dd:5c:8c:71:e3:34:
         66:f6:5b:6e:bd:d9:ea:90:f0:59:02:7a:f7:08:ad:1e:f0:07:
         d5:a8:76:d2:74:c0:3e:d0:34:ff:a9:f3:2d:4d:c1:c0:f0:56:
         d2:2d:05:d0:e5:ee:03:8a:80:e3:54:83:a6:a9:e7:21:4b:7b:
         e9:40:91:80:94:b9:d9:31:d2:de:57:73:9f:b2:17:03:cd:3f:
         d5:38:2a:53:b7:54:41:6a:8e:03:76:49:11:4f:98:5d:9e:5f:
         cb:bc:c9:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:18 2026 by rpki-client