Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
File:                     0153CD24917111F1B35E84E13111F970.roa (raw, json)
Hash identifier:          QNI1/+FwX+x7J+2lhUxyR3o7NDToHEAEYia85ddZBYM=
Subject key identifier:   6C:1C:3E:1C:12:44:63:F5:58:85:E2:FC:4A:46:59:2D:9C:28:6C:FD
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       01A4
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
Signing time:             Thu 03 Sep 2026 05:55:15 +0000
ROA not before:           Thu 03 Sep 2026 05:55:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     7607
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Sep  3 05:55:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a990bc3-f092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:ff:8d:ad:8e:53:40:0c:17:16:93:9c:3d:
                    9a:b5:57:e9:97:64:9b:28:c4:54:1a:7b:2f:51:60:
                    54:42:ed:bb:2f:08:37:aa:2b:5d:f5:ab:45:4c:c8:
                    79:a3:47:75:2d:d1:56:65:e7:8d:38:ee:47:9c:75:
                    7a:57:b4:c4:b8:db:80:47:ec:d5:b0:08:ae:a6:f2:
                    63:d6:59:19:c4:e0:3a:84:38:9b:90:ca:f6:41:fa:
                    e9:cf:00:4a:b5:aa:ba:0f:bc:29:25:30:9c:62:0e:
                    26:70:2c:32:05:fb:64:67:34:33:3c:db:89:ec:52:
                    8e:b1:ef:65:5e:79:b7:7d:8b:24:24:7e:21:bb:42:
                    3f:97:d7:bf:0a:8c:6c:ea:4c:9d:16:5e:3c:de:c3:
                    2b:84:e3:cb:20:a8:40:62:b6:12:2a:ce:91:23:34:
                    53:d8:f4:29:42:ac:70:f9:b3:0d:59:e0:4a:ab:07:
                    4e:f1:ea:45:8b:e8:66:5b:3d:a3:10:33:39:03:bc:
                    80:1e:15:34:49:f8:cb:d0:8e:36:a3:af:b7:8f:56:
                    f2:ae:ac:08:d2:0c:e3:54:8e:c0:ac:be:28:32:cc:
                    2e:98:87:a9:18:35:1a:7e:1c:8c:1c:87:3f:57:92:
                    56:48:ce:94:dd:b2:d4:41:b1:12:94:01:4d:d1:ec:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1C:3E:1C:12:44:63:F5:58:85:E2:FC:4A:46:59:2D:9C:28:6C:FD
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:d4:c4:8a:a1:8d:30:cf:39:fb:4b:9a:be:2b:e7:f9:9d:
         bb:74:5b:13:c6:e1:e4:d7:a2:3c:48:6d:c9:31:17:b4:ab:74:
         b2:67:48:d6:74:01:e7:3d:da:0c:43:e4:62:28:7e:78:2c:0d:
         19:19:e3:da:47:7f:e2:65:c9:e6:45:b5:b2:d4:b3:b2:2a:f3:
         74:3d:98:52:3c:89:f5:ff:28:41:17:e4:e5:4c:b6:bf:1b:f9:
         51:0a:8a:3e:af:ce:97:d6:5b:b9:fd:d9:6e:a9:8d:5b:78:4c:
         19:b1:8e:d5:fb:b5:55:44:d7:05:9f:c4:b4:05:3e:fa:f4:e1:
         30:d2:a3:ab:9a:f0:01:cd:fc:33:fc:a4:33:0b:bb:cb:44:67:
         f6:69:60:c2:4d:d3:f8:7c:e9:f1:bc:0c:6d:92:2f:17:7d:cd:
         5b:06:47:72:99:5b:3d:bf:8b:e2:1d:4b:6f:df:d2:df:93:2d:
         f2:49:b7:93:57:3e:12:05:81:64:7a:86:c4:b0:86:82:b9:d7:
         9e:93:94:3c:cf:26:21:e5:b2:ba:71:e0:1e:ab:ee:c3:81:c1:
         de:24:11:da:15:a4:d8:e3:9e:4e:ac:84:50:49:5f:d3:22:c4:
         02:a2:07:bb:25:a4:2a:88:cf:1e:6a:f7:7c:19:1e:54:80:e2:
         ed:2e:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:28:35 2026 by rpki-client