Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
File:                     A6789038400211ED808CCF0DC4F9AE02.roa (raw, json)
Hash identifier:          /OmusQFGUMLnSfPvaQeL+Y1Ye83OM/m03GrlGqmFNO4=
Subject key identifier:   57:6D:E8:6F:4A:16:FD:EC:19:35:7E:47:89:3A:69:3D:C1:4B:50:D2
Certificate issuer:       /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial:       028E
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:52:39 +0000
ROA not before:           Tue 15 Jul 2025 02:38:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136592
IP address blocks:        103.93.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
        Validity
            Not Before: Jul 15 02:38:13 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47ce7-ba46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:e7:06:88:74:d8:11:75:1e:a2:17:9a:70:
                    d3:71:23:66:e3:fa:90:e3:c6:67:c1:6f:99:65:12:
                    b2:df:90:da:12:42:c3:7a:d3:d7:3a:61:5c:ba:20:
                    d1:08:c0:ef:ea:67:76:97:ce:55:1a:9d:d4:e9:38:
                    76:84:4b:94:ab:62:bf:8f:73:e7:b0:58:44:cb:c5:
                    13:9f:63:b5:7c:9a:49:a8:4f:e9:5e:b9:18:1d:1f:
                    79:86:90:0a:62:d0:61:00:3c:40:33:4f:e0:99:ff:
                    a8:2a:a2:8c:45:4c:f0:06:ee:c4:99:7d:a6:0a:44:
                    e7:a1:dc:3c:0f:cb:a5:87:f6:25:89:0c:b9:5c:42:
                    b0:75:cf:17:76:b8:dd:7f:d0:b1:c1:1c:00:6a:cd:
                    89:27:8a:04:41:41:b7:ed:df:b7:e7:53:72:9a:55:
                    ab:f1:e6:41:21:11:02:b6:82:75:a5:21:a5:2a:f6:
                    c6:d5:68:f8:38:08:a7:d8:1d:ea:4b:d5:ee:1d:f3:
                    22:47:b7:05:f9:b9:22:97:5d:d3:0d:d0:3d:7c:6d:
                    e0:f9:b2:60:e6:76:45:0b:a0:48:db:53:11:c5:b7:
                    fc:34:b8:05:40:43:75:c8:21:f2:f8:8e:76:5b:36:
                    28:59:da:e0:b4:2f:7b:3c:c0:86:9b:46:40:f4:33:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:E8:6F:4A:16:FD:EC:19:35:7E:47:89:3A:69:3D:C1:4B:50:D2
            X509v3 Authority Key Identifier:
                keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:08:2e:b4:27:37:47:49:03:ce:ed:55:a1:35:74:59:85:ca:
         b2:7e:3f:ab:bc:e5:db:49:e1:c1:21:6f:b5:1f:56:4d:40:31:
         4f:00:f8:43:d0:b9:89:e8:a7:69:66:d9:8d:79:73:c2:12:2d:
         d5:06:39:00:28:b9:c7:16:fa:92:2c:24:e2:93:12:5b:fb:c9:
         96:a8:0a:d0:54:8f:3e:83:9b:83:e6:a3:b4:c5:5b:fa:29:85:
         7e:47:a5:30:f6:fe:3d:83:7b:35:ea:ab:cd:6d:4f:55:89:09:
         d4:eb:8d:f4:f2:7c:c7:d4:04:e9:55:98:c3:38:aa:62:fe:31:
         25:67:97:14:77:a8:2d:8c:40:c3:ca:91:39:3a:31:e5:33:cb:
         97:48:c9:74:56:af:7c:8e:47:30:6c:8f:19:56:11:5a:79:68:
         f8:d7:29:a9:d6:8a:84:f8:1b:e4:e4:ba:ef:a0:a4:88:34:ef:
         48:db:07:72:ef:49:85:15:92:df:2d:f5:fc:23:61:d1:34:35:
         9e:f4:d5:ed:d2:3c:8b:c9:c6:42:b0:c9:0e:b1:30:e8:37:2b:
         bc:ad:55:6c:c1:de:46:b3:b1:69:d4:9a:c7:92:b1:7b:82:e4:
         ac:e2:08:fb:ab:d7:fa:2a:40:00:91:12:36:50:56:40:ce:b5:
         43:6e:b1:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC
OUI1RkRCRjgwHhcNMjUwNzE1MDIzODEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2NlNy1iYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskXnBoh02BF1HqIXmnDTcSNm4/qQ48ZnwW+ZZRKy35DaEkLDetPXOmFcuiDR
CMDv6md2l85VGp3U6Th2hEuUq2K/j3PnsFhEy8UTn2O1fJpJqE/pXrkYHR95hpAK
YtBhADxAM0/gmf+oKqKMRUzwBu7EmX2mCkTnodw8D8ulh/YliQy5XEKwdc8Xdrjd
f9CxwRwAas2JJ4oEQUG37d+351NymlWr8eZBIRECtoJ1pSGlKvbG1Wj4OAin2B3q
S9XuHfMiR7cF+bkil13TDdA9fG3g+bJg5nZFC6BI21MRxbf8NLgFQEN1yCHy+I52
WzYoWdrgtC97PMCGm0ZA9DO2NQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFdt6G9K
Fv3sGTV+R4k6aT3BS1DSMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG
RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjhFMzgvNTFGMERCM0MzRkZFMTFFRDlBODdBMzE1QzRGOUFFMDIvQTY3ODkwMzg0
MDAyMTFFRDgwOENDRjBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ114MA0GCSqGSIb3DQEBCwUAA4IBAQAECC60JzdHSQPO7VWhNXRZ
hcqyfj+rvOXbSeHBIW+1H1ZNQDFPAPhD0LmJ6KdpZtmNeXPCEi3VBjkAKLnHFvqS
LCTikxJb+8mWqArQVI8+g5uD5qO0xVv6KYV+R6Uw9v49g3s16qvNbU9ViQnU6430
8nzH1ATpVZjDOKpi/jElZ5cUd6gtjEDDypE5OjHlM8uXSMl0Vq98jkcwbI8ZVhFa
eWj41ymp1oqE+Bvk5LrvoKSINO9I2wdy70mFFZLfLfX8I2HRNDWe9NXt0jyLycZC
sMkOsTDoNyu8rVVswd5Gs7Fp1JrHkrF7guSs4gj7q9f6KkAAkRI2UFZAzrVDbrEq
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:36 2026 by rpki-client