Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
File:                     F0F97030612C11EF85AF817EC4F9AE02.roa (raw, json)
Hash identifier:          8jkk8vIcqgs4b+fbqR26qb3DamcqYaKzuzKBi1BGmm4=
Subject key identifier:   12:3E:92:58:46:A0:10:47:11:AD:9C:79:EF:B5:1F:A1:83:DF:FE:1D
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1F37
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 16:29:07 +0000
ROA not before:           Wed 02 Sep 2026 16:29:07 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138212
IP address blocks:        103.12.237.0/24 maxlen: 24
                          103.12.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7991 (0x1f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Sep  2 16:29:07 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a984ed2-e243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:94:66:aa:73:02:6a:e8:1c:96:f3:74:9b:
                    ca:54:8f:21:02:c1:a4:95:73:fb:80:78:12:c4:45:
                    b0:b0:c4:c8:3f:6c:8a:3f:dd:ea:e4:c3:e6:f6:9e:
                    a7:6a:2e:4b:5d:83:71:82:dd:15:2d:8d:82:34:42:
                    69:ab:6c:aa:cb:24:fe:33:4d:f1:6c:65:1d:9d:26:
                    75:27:2e:62:77:b3:b6:45:e4:7d:9e:ab:7b:1d:bb:
                    07:46:8b:5b:f8:ba:60:82:0b:5d:99:c7:90:84:a5:
                    5f:f3:ac:82:4f:e0:79:1c:f4:00:50:e8:22:60:4f:
                    c8:56:12:e2:7f:1a:0a:70:f5:a9:e8:e1:4d:35:f3:
                    71:4f:8a:cf:85:86:94:c3:fd:c8:45:78:64:1f:13:
                    e7:33:2c:3a:96:b3:12:6c:53:f4:f8:c1:14:c7:52:
                    f3:a8:48:a2:f0:58:5d:39:57:7f:c5:89:7e:9e:43:
                    8e:e0:34:f0:c1:13:6b:d6:d0:d2:89:40:65:f1:7a:
                    22:8b:8a:0a:4b:21:a2:37:64:d1:7d:a5:ec:8f:60:
                    ec:50:80:3d:5c:41:fb:67:53:63:37:1f:72:7d:69:
                    f6:cb:94:90:e1:b8:49:ff:33:a9:95:56:17:17:5a:
                    eb:28:b2:e9:c8:5f:df:d9:48:83:d2:85:82:94:87:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3E:92:58:46:A0:10:47:11:AD:9C:79:EF:B5:1F:A1:83:DF:FE:1D
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.237.0-103.12.238.255

    Signature Algorithm: sha256WithRSAEncryption
         28:89:38:03:27:14:92:07:57:06:f7:cb:96:f3:ae:68:04:0b:
         97:94:a0:da:96:94:e9:09:60:eb:c6:45:86:58:82:f2:ce:bd:
         1b:0b:78:9a:34:3c:b4:61:f5:b2:49:bd:20:f6:24:4e:4e:c1:
         0e:54:6d:9a:2c:07:cf:26:e3:17:f2:b6:60:16:5b:80:d7:32:
         f3:47:8f:cf:e0:f0:a3:5d:57:d8:69:f2:70:fa:b4:e6:21:5b:
         08:e6:65:eb:a0:7e:04:49:39:42:b1:e5:ae:90:07:b5:a1:84:
         d8:4d:44:6d:e4:13:f1:22:3b:55:6d:07:33:a9:24:a6:d6:ab:
         f8:8d:f1:52:19:c7:a2:47:bc:f2:75:0a:77:2c:19:e7:02:24:
         a9:76:48:ce:b0:8e:a0:1b:9b:b5:5b:df:6d:9a:0b:ea:6f:a7:
         c1:66:18:57:e5:bd:36:c1:c6:bc:3d:94:6b:75:00:72:2b:90:
         6c:bd:b2:e0:18:d4:19:3f:ff:c8:1b:c1:6e:0b:a8:f6:0c:6f:
         af:2e:c5:6b:cc:96:70:e6:4a:18:0a:6b:5c:45:a7:a7:04:40:
         7c:ee:7f:fe:46:06:5e:24:a8:0d:50:2c:1e:22:33:ee:b6:96:
         87:b7:ab:87:3a:b6:26:84:33:a2:82:1f:0a:cd:c9:b2:eb:1a:
         6e:eb:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:04 2026 by rpki-client