Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EC61B8905FD911F1BCFAB64E7447A888.roa
File:                     EC61B8905FD911F1BCFAB64E7447A888.roa (raw, json)
Hash identifier:          14ChNOnaqeRoMs3wWE9pdDym9f8/BmS3Zf9ag/0ql1E=
Subject key identifier:   05:54:B8:58:F0:5D:40:0A:4B:5D:08:44:A9:72:D7:B5:DE:7E:F5:8C
Certificate issuer:       /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial:       37
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EC61B8905FD911F1BCFAB64E7447A888.roa
Signing time:             Thu 04 Jun 2026 05:55:00 +0000
ROA not before:           Thu 04 Jun 2026 05:55:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.110.230.0/24 maxlen: 24
                          103.110.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
        Validity
            Not Before: Jun  4 05:55:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a211334-4b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:7e:68:43:d3:2e:2c:2b:be:13:1c:2d:ba:
                    1b:14:ec:0b:b7:21:5d:28:3e:3b:56:ee:03:57:48:
                    29:68:68:aa:60:44:d3:c2:c3:e4:b6:07:b7:23:3f:
                    a8:ef:9c:d9:c1:1d:1c:ba:8b:03:5c:9d:fb:ea:7b:
                    12:18:79:dd:05:54:83:82:3e:52:d7:fb:06:89:bb:
                    82:b6:d9:38:ee:eb:07:ba:45:5d:5f:83:bc:6d:4b:
                    a3:0f:f4:cb:2f:7f:ab:0c:6e:53:48:60:58:7e:f9:
                    8b:6e:60:77:c2:be:12:5c:fc:1b:27:4a:70:0c:f3:
                    8f:a6:e7:56:d3:b7:47:91:7e:84:a2:b6:9d:e3:9a:
                    85:d9:ed:d1:75:f7:f2:41:79:5b:f8:88:4d:0e:6c:
                    dd:56:f2:e5:66:b1:2e:56:79:34:30:22:97:36:b8:
                    d7:55:74:37:9d:f3:6e:8e:f8:84:3a:75:29:30:c4:
                    64:22:43:36:d5:8f:02:d0:65:ad:53:de:57:87:0a:
                    43:d7:9f:4d:3e:25:87:13:5b:77:be:2b:04:b4:c3:
                    d0:3d:40:23:8d:db:aa:a8:2c:e6:43:c6:74:79:41:
                    56:2e:ee:b5:a7:35:ae:e6:2e:41:ef:7d:99:27:6b:
                    aa:b3:ae:4b:8d:e6:ab:e5:c0:92:22:09:75:4b:6f:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:54:B8:58:F0:5D:40:0A:4B:5D:08:44:A9:72:D7:B5:DE:7E:F5:8C
            X509v3 Authority Key Identifier:
                keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/EC61B8905FD911F1BCFAB64E7447A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:84:cb:c4:b8:ba:75:6b:52:9b:ae:26:4e:50:9f:f4:d3:71:
         df:5d:fa:66:9c:38:c4:81:d8:3a:dd:28:28:a2:05:c3:c9:1c:
         ee:e2:42:a3:fe:32:e1:8e:4d:5f:65:9f:b6:43:69:4c:78:64:
         47:e3:8f:7b:83:8d:83:be:f6:d5:45:13:61:64:74:2a:41:e2:
         2b:47:1b:1c:42:d4:92:38:24:ef:15:10:a7:68:cc:66:09:a1:
         45:75:a5:72:51:66:8a:a1:c5:09:56:ba:2a:0f:d8:60:19:65:
         72:b2:1a:a0:2d:7a:5f:0b:b3:24:9a:48:5a:95:9e:68:e6:d1:
         3f:ed:8d:0c:c7:6f:df:50:cd:72:56:e4:97:cc:6c:9b:f8:65:
         6e:95:68:bc:24:b8:cf:86:53:56:66:58:04:04:44:07:ff:e3:
         14:90:7b:6b:08:97:fc:dd:a0:ed:ab:37:13:bd:14:1e:72:76:
         7f:6a:2f:59:1a:92:5b:43:2e:6a:5a:9f:00:2d:b0:7c:9c:a9:
         6a:ab:1a:cc:50:d9:34:9c:97:47:37:50:6b:b9:c3:01:cb:e6:
         c5:15:40:cd:78:e4:99:81:90:9b:d6:11:eb:a7:ac:a5:af:6b:
         49:ba:40:9d:07:b1:f5:00:2d:23:50:1f:91:92:76:34:4d:e3:
         27:ea:a4:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:46 2026 by rpki-client