Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
File:                     A1B8D10EF5C511EF83B21246C4F9AE02.roa (raw, json)
Hash identifier:          mXAMy97Aa670ZhM2hALSQp3avmcppB/5FPkm9qaohYc=
Subject key identifier:   82:09:B3:3B:2B:1C:A6:BC:61:35:1B:30:05:C9:77:DB:8A:FD:60:76
Certificate issuer:       /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
Certificate serial:       0515
Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 20:41:11 +0000
ROA not before:           Thu 10 Sep 2026 20:41:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136141
IP address blocks:        103.153.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
        Validity
            Not Before: Sep 10 20:41:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa315e7-75c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:df:16:b2:e6:ec:01:37:11:e6:09:97:24:fe:
                    b0:c7:29:92:5f:9b:2d:1e:f6:d3:e0:7f:4c:e9:bb:
                    f1:b2:99:bf:c8:08:3a:d8:f6:01:f0:9f:2a:f2:02:
                    9f:49:af:74:af:8a:78:6b:a3:49:ae:24:e7:1a:35:
                    13:64:02:0a:d8:5e:93:25:eb:b2:00:79:fa:cd:94:
                    52:ba:90:71:7b:e9:2e:79:31:75:64:b1:ce:3a:91:
                    dd:af:d4:c6:8d:e4:82:cc:8d:65:da:8a:a7:a0:66:
                    20:62:b4:1f:2d:9c:79:8f:33:3c:02:fa:8b:a5:34:
                    a4:84:05:90:4b:46:4e:1e:4d:27:83:95:a3:67:7b:
                    23:2e:de:bb:89:cd:9d:6c:b5:44:3b:19:5f:7a:d6:
                    f6:65:f5:9f:08:21:6c:52:30:f7:c1:c0:e0:f8:53:
                    5a:9e:38:df:92:e9:4e:ca:d2:96:5c:dc:b8:ae:61:
                    7b:52:49:60:bb:1f:3d:45:f3:44:2a:21:ec:20:d7:
                    c7:3a:7d:5e:b3:02:f0:dd:fd:10:eb:a2:8d:57:f8:
                    84:61:b7:87:99:f4:0c:be:5d:ee:19:d5:0d:a8:60:
                    88:32:99:61:aa:6d:41:36:99:f2:4d:cd:0e:df:b2:
                    12:1d:9c:36:eb:91:88:97:12:75:a8:e7:ab:77:dc:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:B3:3B:2B:1C:A6:BC:61:35:1B:30:05:C9:77:DB:8A:FD:60:76
            X509v3 Authority Key Identifier:
                keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:93:34:65:54:3a:85:45:55:3e:3a:b1:65:f7:bc:e3:ec:df:
         82:d1:0c:72:09:ac:47:26:ef:0d:1b:1f:a4:b4:a9:69:25:f1:
         8f:81:7b:38:0e:1f:4a:ff:91:f4:93:85:ac:20:d4:6f:8e:97:
         2d:71:e7:b5:b8:e7:0f:0a:3a:63:03:2a:98:3f:36:db:ce:5b:
         a6:35:8e:6a:05:85:4e:48:8a:de:bb:80:e7:18:5b:08:62:bd:
         a8:7e:5c:09:f5:d4:d7:e7:74:a0:ab:b4:5a:40:ce:21:b6:e5:
         0e:ea:f2:cd:50:0c:fd:c8:5b:ed:52:7e:88:bc:27:17:9e:51:
         be:1b:71:45:9a:b7:57:3f:33:21:10:49:e9:a6:9a:23:9d:83:
         f4:d7:9e:29:ab:4b:cd:06:66:96:09:c9:e3:a3:66:c9:78:aa:
         5c:c6:bd:30:d7:89:8f:58:8e:cd:09:79:75:be:dd:1c:33:d0:
         bd:4c:d2:69:06:9a:46:ef:f1:14:07:9d:b5:6f:25:ec:4a:35:
         6c:eb:fc:4f:f3:f4:1b:50:93:ce:74:3f:42:93:d9:14:d8:76:
         8f:ef:ec:71:57:4f:f9:83:3d:0d:b8:b4:1a:20:a3:d4:07:c4:
         68:48:c6:83:db:3f:66:b7:57:dd:bc:89:f3:37:d1:ec:ea:29:
         15:87:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:12 2026 by rpki-client