Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/0A918056D24C11EFB8B5C95EC4F9AE02.roa
File:                     0A918056D24C11EFB8B5C95EC4F9AE02.roa (raw, json)
Hash identifier:          SnuQXNa3DdoURN3qs0HHZ04guQFROzpT/ChTJh+Aa7A=
Subject key identifier:   F2:0A:60:EA:8C:2D:DA:85:65:8A:07:84:0E:B3:A0:61:2E:C0:A7:EB
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       0154
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/0A918056D24C11EFB8B5C95EC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 06:36:48 +0000
ROA not before:           Fri 05 Jun 2026 06:36:48 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.239.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Jun  5 06:36:48 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a226e80-ae96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:3a:58:37:66:62:a5:d9:96:97:46:c2:1b:
                    d2:fe:29:29:13:99:9c:05:21:ea:ef:2b:84:fe:6f:
                    95:8f:26:ff:8d:38:c3:0d:82:f5:e5:43:e7:82:7b:
                    60:48:d4:89:06:ac:3f:cd:ec:60:04:c1:78:d0:b5:
                    17:b7:e0:b8:cc:81:58:ac:f9:a6:e6:0f:df:c8:ea:
                    eb:90:8d:85:17:37:e2:dd:7e:f1:62:b3:83:42:21:
                    91:cf:0c:d2:b1:8d:14:74:f4:b2:0f:f5:60:12:34:
                    34:c1:86:d2:90:d9:bd:c1:49:f6:64:e4:97:b8:19:
                    77:8b:ea:44:64:9c:99:13:df:3d:6d:1d:c9:be:3d:
                    99:3a:27:ae:ec:84:3e:af:81:f5:03:bb:8b:95:1d:
                    d4:85:1d:58:60:60:33:ea:43:21:30:7a:ab:13:35:
                    db:df:ae:6b:d9:ff:b3:2b:c5:b2:f2:2b:c5:64:29:
                    7b:1c:06:52:61:0f:d8:89:f7:75:23:b9:44:27:f3:
                    9a:11:07:58:0d:eb:d5:b4:47:53:1e:1a:c7:9b:22:
                    a8:3d:b2:b2:67:cc:38:c8:e2:31:95:44:8a:aa:18:
                    60:ce:53:88:76:1e:bb:9c:fc:c4:5d:f9:b1:68:66:
                    1c:be:43:26:8e:97:22:92:10:41:b3:ef:58:6a:9b:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:60:EA:8C:2D:DA:85:65:8A:07:84:0E:B3:A0:61:2E:C0:A7:EB
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/0A918056D24C11EFB8B5C95EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:fa:17:ff:d0:ba:ac:a4:90:d3:17:3e:4a:ad:ee:6b:9b:
         a7:3a:e6:18:ee:e9:7b:bb:73:1e:be:9d:96:e2:38:5b:66:3f:
         8a:44:a7:ce:11:43:60:4c:3d:a6:84:5e:31:53:40:46:07:03:
         3c:06:af:b0:29:88:8a:7f:de:77:50:f3:3e:48:2d:bc:bd:3e:
         ab:7c:20:49:6b:44:b5:27:23:ba:58:22:43:80:44:0d:b9:28:
         ba:49:0a:e8:88:a8:34:1c:95:45:7e:7b:4b:c7:ea:57:95:8c:
         ab:54:0c:5f:41:7b:e0:3f:84:20:b1:10:a6:2a:a2:96:8b:80:
         32:dc:f5:26:b7:66:16:f5:af:54:a9:76:0a:53:47:9d:89:a2:
         00:6f:42:27:98:57:b8:dd:77:de:d5:2d:3e:9f:49:41:a6:b6:
         38:f5:43:bc:0b:fa:0a:eb:0a:b7:ad:b0:07:60:b5:4f:81:98:
         6c:d8:58:04:3a:44:6f:fb:c9:65:16:7f:64:a4:cd:e8:23:e4:
         9d:ca:f1:35:30:2b:cc:e1:e9:91:4f:f8:94:12:fb:18:4b:55:
         1f:6e:4d:d5:e9:16:95:ff:24:14:25:f1:15:08:5a:63:97:0b:
         f6:4e:70:05:e1:0e:3d:82:03:71:f1:91:bc:2c:b6:32:df:5b:
         62:93:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:54 2026 by rpki-client