Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
File:                     E21DEF607B5E11ED98247D60C4F9AE02.roa (raw, json)
Hash identifier:          flivO9KZ3hNdVf6kTG0C2l09oeHTUSZTfnGjfG/rjIg=
Subject key identifier:   48:03:EC:EE:04:14:7C:2F:37:68:D6:B6:2D:1F:F8:E9:57:63:6D:31
Certificate issuer:       /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial:       02BE
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 01:51:54 +0000
ROA not before:           Sat 29 Aug 2026 01:51:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138915
IP address blocks:        103.206.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
        Validity
            Not Before: Aug 29 01:51:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a923b3a-6e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:a7:c3:0a:dc:f6:a8:54:70:27:07:0c:2a:
                    8e:8a:cf:b2:8e:5e:f4:89:2c:22:83:50:27:14:7e:
                    4b:2d:91:39:d7:7b:b3:1b:ea:e9:e5:ac:ac:b8:4a:
                    ea:4f:43:31:cb:f9:b9:b2:19:84:99:5d:c4:ac:09:
                    b4:69:c9:6f:23:ac:89:d8:25:cd:89:24:39:6f:62:
                    a1:a3:44:ee:e8:62:5f:f4:04:80:f7:5a:97:91:5c:
                    6c:75:25:a1:35:21:53:85:a8:db:c7:f9:a7:d5:64:
                    41:2d:31:3b:f7:92:22:93:0d:05:62:32:52:79:dd:
                    97:24:b4:7a:15:4a:e4:3a:8b:50:c0:a4:d1:c6:dd:
                    be:95:20:e3:76:10:7d:b2:6b:dd:60:5f:cf:29:f5:
                    1a:49:51:e3:46:ca:65:1f:d9:58:85:cb:3f:f0:1e:
                    b0:dc:7b:e8:d4:83:2a:da:74:3b:05:6a:68:b0:1f:
                    de:48:91:fd:cd:ea:f3:9a:8d:f7:ed:76:e3:24:42:
                    04:b4:3f:6e:0c:86:82:a2:55:a4:e5:7a:64:6a:49:
                    18:39:4c:3e:95:be:ee:d3:36:df:45:82:2e:fe:c8:
                    e7:ca:e5:dc:e2:0a:29:3c:9d:00:39:cb:af:77:14:
                    50:d6:2e:5c:c0:60:10:9c:9a:b2:78:ed:b7:91:f5:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:EC:EE:04:14:7C:2F:37:68:D6:B6:2D:1F:F8:E9:57:63:6D:31
            X509v3 Authority Key Identifier:
                keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f6:0d:7c:6f:05:ef:13:46:e0:1d:92:5a:66:d3:dd:13:80:
         57:70:94:63:aa:e6:ca:73:a7:e2:3a:c4:c8:11:4b:26:ca:69:
         72:b1:56:2b:a0:e6:53:54:df:97:85:6b:5b:75:c5:e8:59:81:
         ee:f6:9c:1a:3e:e9:40:e0:93:4b:d6:ca:a3:e2:cb:2c:7b:89:
         aa:6e:07:da:fb:5d:63:ad:2c:5a:f9:50:07:fb:4c:76:d3:18:
         a6:00:01:26:2a:3a:83:8f:88:5f:89:03:ca:48:79:0e:93:66:
         ea:04:b2:0c:1e:bc:6a:1f:1f:e0:24:40:08:de:7b:46:e5:07:
         c6:3a:17:59:3d:2a:46:d3:f6:d0:9d:04:67:90:97:7a:97:73:
         dd:13:a7:d9:bd:16:da:93:50:27:0c:99:91:65:88:40:97:87:
         d8:e3:64:f2:c7:fc:af:25:b1:6b:eb:78:08:7c:09:d3:b4:18:
         c2:90:e4:69:78:b3:08:33:60:df:c9:40:bd:b1:2c:7c:c0:7d:
         af:91:3e:97:c2:0e:d3:27:9a:e7:7f:b1:a6:06:2c:ee:c1:a1:
         9f:31:0f:ee:40:d6:c7:c8:52:b7:31:4f:28:48:8b:a2:92:75:
         db:1d:cd:fe:5d:eb:0c:42:a3:8f:e0:22:5b:f2:89:b6:01:07:
         49:47:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:12:36 2026 by rpki-client