Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa
File:                     08DCBB24DC8011F0AB4C816E3A6F56BC.roa (raw, json)
Hash identifier:          qPTI/BGOaPiA+Ijb2fpDa3jM09PINNTUUy/wyXi8Tlc=
Subject key identifier:   CD:85:5C:18:26:70:F5:BB:02:74:9C:38:C9:DE:D6:C3:4E:A1:48:F8
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       1357
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa
Signing time:             Tue 26 May 2026 17:25:49 +0000
ROA not before:           Tue 26 May 2026 17:25:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63930
IP address blocks:        45.119.203.0/24 maxlen: 24
                          103.60.10.0/24 maxlen: 24
                          119.161.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4951 (0x1357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: May 26 17:25:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a15d79d-9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:f5:6f:8c:71:a3:a5:cf:03:09:15:5e:b1:
                    db:fa:b9:be:a0:91:2e:d7:53:61:20:5f:e1:c0:2c:
                    43:ad:0a:9a:34:66:2c:81:2a:39:f3:b9:a8:05:ef:
                    3b:af:8d:4e:d4:4e:5a:65:74:f4:40:84:f9:01:8a:
                    49:8a:e0:d9:f8:44:e1:5d:dd:44:db:b2:02:bf:16:
                    9d:eb:0a:96:32:95:d7:e4:b4:50:d7:0b:d4:f3:5f:
                    03:b0:85:db:58:af:b1:c4:0f:35:d4:59:bd:c2:3d:
                    31:d1:65:09:4b:c8:8f:be:6f:0d:68:d2:2c:96:22:
                    74:33:d5:fa:8e:12:70:e5:2f:bf:3f:52:5b:4e:db:
                    8c:63:31:21:0b:fc:a7:45:2f:e4:dd:39:20:9f:6e:
                    a7:17:3b:35:6f:54:5c:f7:94:4a:81:6b:cc:1a:82:
                    54:dc:ba:a2:25:00:56:51:98:36:80:68:24:19:2a:
                    e4:10:d4:69:e1:a4:f4:6e:09:68:70:3f:9f:e1:3e:
                    91:75:46:f5:93:b1:e7:15:3f:75:cd:25:fa:61:cd:
                    5d:a5:ce:cf:a1:81:25:1b:73:44:e6:57:01:a0:26:
                    74:1b:ea:af:9b:ec:fe:a9:c1:21:72:4f:3d:56:4d:
                    68:4e:99:28:1d:a8:1a:5e:74:4b:11:81:70:a5:52:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:5C:18:26:70:F5:BB:02:74:9C:38:C9:DE:D6:C3:4E:A1:48:F8
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.203.0/24
                  103.60.10.0/24
                  119.161.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:5d:2c:b3:49:4c:3f:d8:21:b9:f6:43:d7:75:f0:52:33:
         39:42:18:52:47:9e:9d:14:73:09:2a:c3:59:f9:91:58:d8:81:
         28:7d:1a:d9:3d:4e:67:92:c6:1e:7c:dc:e1:36:d6:b8:f2:f1:
         ae:62:37:91:93:bf:9d:2c:11:1f:e4:c0:69:68:03:45:29:8e:
         55:4a:cc:79:42:9c:20:1e:0e:19:40:38:71:25:84:8e:36:be:
         bb:8a:3f:79:b3:d4:46:a6:e2:d1:49:ae:86:ad:55:af:89:48:
         9e:98:0e:b4:8b:bc:04:07:d8:de:2f:06:1b:02:8f:68:7f:17:
         fd:22:52:6e:b0:ac:6b:3d:3e:3e:88:41:81:c5:13:6b:f2:a5:
         2d:fa:ff:0a:eb:0d:ff:fd:2b:9e:5c:bd:ab:02:8f:2c:00:8e:
         bd:8a:c3:21:10:76:1b:33:58:ce:a0:c1:54:8e:02:19:05:22:
         3f:85:d9:13:aa:42:da:d4:88:a7:a2:8e:b4:4a:bd:37:8f:42:
         9b:70:51:b8:6f:d4:36:70:7d:48:79:b6:b7:00:ef:45:ca:05:
         ec:0e:d0:a6:81:7f:5c:4e:be:b8:dd:b1:6f:b5:89:d8:bf:2e:
         05:d2:b8:b0:71:39:b1:5b:27:3d:a5:08:75:49:c5:66:a0:10:
         a2:dd:f4:ba
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB
RkNDNTI4NTkwHhcNMjYwNTI2MTcyNTQ5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1ZDc5ZC05Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArh71b4xxo6XPAwkVXrHb+rm+oJEu11NhIF/hwCxDrQqaNGYsgSo587moBe87
r41O1E5aZXT0QIT5AYpJiuDZ+EThXd1E27ICvxad6wqWMpXX5LRQ1wvU818DsIXb
WK+xxA811Fm9wj0x0WUJS8iPvm8NaNIsliJ0M9X6jhJw5S+/P1JbTtuMYzEhC/yn
RS/k3Tkgn26nFzs1b1Rc95RKgWvMGoJU3LqiJQBWUZg2gGgkGSrkENRp4aT0bglo
cD+f4T6RdUb1k7HnFT91zSX6Yc1dpc7PoYElG3NE5lcBoCZ0G+qvm+z+qcEhck89
Vk1oTpkoHagaXnRLEYFwpVLN6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM2FXBgm
cPW7AnScOMne1sNOoUj4MB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz
ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvMDhEQ0JCMjRE
QzgwMTFGMEFCNEM4MTZFM0E2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQALXfLAwQAZzwKAwQAd6FkMA0GCSqGSIb3DQEBCwUAA4IBAQAUHl0s
s0lMP9ghufZD13XwUjM5QhhSR56dFHMJKsNZ+ZFY2IEofRrZPU5nksYefNzhNta4
8vGuYjeRk7+dLBEf5MBpaANFKY5VSsx5QpwgHg4ZQDhxJYSONr67ij95s9RGpuLR
Sa6GrVWviUiemA60i7wEB9jeLwYbAo9ofxf9IlJusKxrPT4+iEGBxRNr8qUt+v8K
6w3//SueXL2rAo8sAI69isMhEHYbM1jOoMFUjgIZBSI/hdkTqkLa1Iinoo60Sr03
j0KbcFG4b9Q2cH1Ieba3AO9FygXsDtCmgX9cTr643bFvtYnYvy4F0riwcTmxWyc9
pQh1ScVmoBCi3fS6
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:08 2026 by rpki-client