Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
File:                     FB782FD2721311EE8754E20FC4F9AE02.roa (raw, json)
Hash identifier:          7lSvL0auK2Nev70CH+bKOPJcsLN5/9u9Btf7bzHv6dQ=
Subject key identifier:   90:7D:99:E4:42:9F:DC:0C:E1:B4:93:43:50:76:66:56:D3:36:29:AE
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       0567
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
Signing time:             Tue 09 Jun 2026 00:27:53 +0000
ROA not before:           Tue 09 Jun 2026 00:27:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        103.248.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Jun  9 00:27:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a275e09-5b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:00:39:2c:f5:c0:79:99:c1:7e:7d:a4:69:
                    18:cc:8f:83:30:7f:13:96:3a:cf:4d:b8:f9:8a:88:
                    b0:78:cb:1a:59:c5:45:b1:d1:0e:09:d4:64:9d:54:
                    3d:e0:a5:c7:11:10:2a:a3:62:0d:79:7c:a6:5a:ff:
                    8c:1d:cd:e8:5f:ab:34:3f:1a:6c:3d:aa:72:c6:d5:
                    60:78:ac:34:ef:7e:e4:57:1d:99:11:4b:aa:8b:02:
                    a6:75:bd:e1:5d:a7:f2:bd:62:98:45:b5:bf:6f:da:
                    a4:79:49:21:d3:4c:be:73:be:d6:7f:2b:53:aa:96:
                    9c:b9:94:a8:e0:f5:76:df:89:17:8a:3b:7a:89:26:
                    1a:9e:b3:c1:06:c9:a6:aa:d7:9f:d0:da:d9:b3:15:
                    d6:90:67:fd:ea:2c:f0:9b:01:60:54:18:51:06:47:
                    aa:36:8f:51:c3:f7:6f:a9:21:10:4b:01:2f:78:a9:
                    46:72:da:bc:62:6f:d0:8f:27:eb:d8:2b:34:53:56:
                    a3:02:33:16:e0:15:c0:48:2a:04:77:72:2b:c1:14:
                    d7:89:75:a2:ac:d8:08:a8:6a:e6:ec:a0:01:15:20:
                    8f:88:2c:f6:b7:f6:d5:75:c4:30:d2:22:2c:de:8c:
                    a0:12:24:e2:5c:80:21:f2:18:30:eb:b3:ab:c4:b9:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7D:99:E4:42:9F:DC:0C:E1:B4:93:43:50:76:66:56:D3:36:29:AE
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e2:26:eb:84:17:aa:80:ad:c5:52:ad:10:d1:6d:87:a0:d7:
         9f:ec:19:52:f8:47:0c:5a:21:dc:e9:b4:a8:9e:83:a9:7e:2e:
         01:1c:b3:49:56:0c:62:0f:f1:aa:7b:1f:55:ec:5d:01:1e:9d:
         b8:36:d7:11:eb:cc:f9:6c:f4:5b:79:2e:2c:ab:31:e8:29:34:
         d4:f0:b7:da:b6:ab:d5:4d:11:d2:c0:d4:57:b5:56:cc:10:08:
         dc:fa:bf:8a:05:10:2b:43:ce:13:03:c6:13:01:59:b2:01:0c:
         be:6c:e3:4e:6a:e4:5c:92:7d:2c:46:09:5e:79:bf:2d:62:85:
         3d:84:16:bf:3e:40:6c:25:f3:14:97:6e:ba:7f:2c:b1:31:33:
         3d:31:9f:df:05:c9:02:da:7f:6e:c9:04:b8:19:0d:06:27:f3:
         41:74:d8:24:5a:c2:ab:60:e8:9d:0d:15:6d:02:34:de:42:0c:
         f3:a5:2d:e9:10:0c:b6:c8:3a:5b:af:33:a2:9a:14:7b:d5:30:
         98:ac:e1:e3:d7:a5:e4:65:27:b6:70:f5:7a:f3:75:90:80:1b:
         89:ea:60:00:27:bd:ae:e2:6c:66:71:d8:a4:1e:5a:03:28:84:
         0c:55:65:1c:df:4c:95:fe:01:9e:a0:ea:31:1f:09:9b:37:d7:
         f4:86:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:37 2026 by rpki-client