Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa
File:                     0A195CD4EDCE11ED994B437AC4F9AE02.roa (raw, json)
Hash identifier:          evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=
Subject key identifier:   17:12:7C:32:6E:FC:19:B1:D2:60:AF:3B:B5:61:3E:78:98:D4:A8:6A
Certificate issuer:       /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial:       0240
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa
Signing time:             Wed 27 May 2026 03:33:52 +0000
ROA not before:           Wed 27 May 2026 03:33:52 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151214
IP address blocks:        103.133.246.0/23 maxlen: 23
                          103.133.246.0/24 maxlen: 24
                          103.133.247.0/24 maxlen: 24
                          2001:df2:62c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
        Validity
            Not Before: May 27 03:33:52 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a166620-17f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:28:24:8b:39:68:fa:0f:c7:f8:58:20:eb:
                    fb:63:f8:46:15:81:cf:5f:41:75:64:aa:5c:bb:b8:
                    2c:93:04:69:40:ff:33:11:82:82:c3:6c:e5:67:db:
                    97:aa:1c:9b:41:b7:54:b0:ff:e7:26:0c:60:fb:bb:
                    82:ab:95:30:ef:f6:a0:9c:81:d8:48:b8:70:41:8f:
                    42:dd:1b:45:b3:cf:58:44:86:a8:77:81:eb:3e:02:
                    1c:84:1d:c8:c3:c4:de:de:2b:a3:c9:45:73:3c:0d:
                    f7:3e:89:b0:b4:fa:35:e5:94:b0:ee:f9:e9:1b:57:
                    57:fa:ba:d2:bb:65:15:dc:ef:a2:5e:cf:51:41:c3:
                    ac:6f:69:10:b6:07:5a:5f:5b:ee:96:ef:5d:50:b3:
                    18:f5:ae:a9:77:b6:57:b1:4b:12:5c:b2:6c:93:9d:
                    c1:94:27:03:81:37:8d:29:1d:3b:24:9c:f8:10:03:
                    f0:96:86:f6:d9:2c:3b:c4:e0:b7:fa:e7:ac:02:9c:
                    e9:96:52:d5:a3:10:ec:a1:85:ef:fb:7a:06:ed:98:
                    15:c4:af:f9:5a:ad:ae:d4:da:ea:90:82:b6:04:5f:
                    03:9c:52:16:13:4e:4c:fe:55:e0:84:43:ea:b3:d4:
                    6f:8b:38:62:06:67:5a:4e:01:e4:32:f5:59:b4:f8:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:7C:32:6E:FC:19:B1:D2:60:AF:3B:B5:61:3E:78:98:D4:A8:6A
            X509v3 Authority Key Identifier:
                keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.246.0/23
                IPv6:
                  2001:df2:62c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:de:56:7e:ae:23:ad:00:48:1f:7d:66:45:1a:cc:ad:b4:7d:
         18:03:3f:d4:7e:c1:9e:5c:ef:05:89:75:96:ab:6a:e5:dd:db:
         13:8d:5e:64:3d:de:db:0d:35:e4:4b:34:86:29:2b:0d:f1:f8:
         1e:06:fa:5c:0d:cd:6b:98:8d:b7:42:b7:69:a0:c9:cc:59:4e:
         f3:b3:8f:aa:3e:d5:f4:64:d8:8e:8b:3f:4d:49:71:e4:2c:fd:
         d3:65:16:94:35:e8:35:9e:e4:f8:69:62:a3:42:4e:e7:67:f9:
         17:54:62:88:31:76:d4:87:8f:8e:be:23:e8:32:72:7e:c7:15:
         5c:36:1e:51:96:ea:71:6a:51:f1:a5:31:4a:d9:09:01:d2:ff:
         2f:3f:bb:19:89:ed:1e:66:df:44:5f:e7:17:46:b0:7b:4c:a4:
         8e:b7:37:47:e6:b8:74:50:bb:f3:81:34:02:52:6e:3c:c1:17:
         bd:2e:ce:d2:e2:c3:d8:32:81:75:da:4f:c3:79:18:ba:d1:ef:
         f5:c0:cc:4b:c7:e6:8e:b4:1c:7d:74:ea:03:ec:b0:56:41:19:
         d1:93:c2:d9:60:f7:a6:29:fb:ff:0d:cc:3a:3e:9d:e8:06:6c:
         54:61:1e:0f:45:0b:8a:22:93:7d:2a:b7:a9:bc:9e:55:23:0b:
         e0:e9:75:ea
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1
MTE0RDAzNjAwHhcNMjYwNTI3MDMzMzUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2NjYyMC0xN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAny8oJIs5aPoPx/hYIOv7Y/hGFYHPX0F1ZKpcu7gskwRpQP8zEYKCw2zlZ9uX
qhybQbdUsP/nJgxg+7uCq5Uw7/agnIHYSLhwQY9C3RtFs89YRIaod4HrPgIchB3I
w8Te3iujyUVzPA33PomwtPo15ZSw7vnpG1dX+rrSu2UV3O+iXs9RQcOsb2kQtgda
X1vulu9dULMY9a6pd7ZXsUsSXLJsk53BlCcDgTeNKR07JJz4EAPwlob22Sw7xOC3
+uesApzpllLVoxDsoYXv+3oG7ZgVxK/5Wq2u1NrqkIK2BF8DnFIWE05M/lXghEPq
s9RvizhiBmdaTgHkMvVZtPg1xwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBcSfDJu
/Bmx0mCvO7VhPniY1KhqMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE
QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjkxMDEvNzcyODg4MjJFREM5MTFFREE3MzAxRjdGQzRGOUFFMDIvMEExOTVDRDRF
RENFMTFFRDk5NEI0MzdBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ4X2MA8EAgACMAkDBwAgAQ3yYsAwDQYJKoZIhvcNAQELBQADggEB
AMHeVn6uI60ASB99ZkUazK20fRgDP9R+wZ5c7wWJdZarauXd2xONXmQ93tsNNeRL
NIYpKw3x+B4G+lwNzWuYjbdCt2mgycxZTvOzj6o+1fRk2I6LP01JceQs/dNlFpQ1
6DWe5PhpYqNCTudn+RdUYogxdtSHj46+I+gycn7HFVw2HlGW6nFqUfGlMUrZCQHS
/y8/uxmJ7R5m30Rf5xdGsHtMpI63N0fmuHRQu/OBNAJSbjzBF70uztLiw9gygXXa
T8N5GLrR7/XAzEvH5o60HH106gPssFZBGdGTwtlg96Yp+/8NzDo+negGbFRhHg9F
C4oik30qt6m8nlUjC+Dpdeo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:17 2026 by rpki-client