Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa
File:                     33A8447E3D0111EA9B37B256C4F9AE02.roa (raw, json)
Hash identifier:          q8QuxKCu+Tl86Cj3Vj1ldGjUQE7swx89/AzPTvU40h4=
Subject key identifier:   7D:32:9B:F9:EA:12:F2:47:D6:39:E3:8F:CC:6A:5E:25:25:AA:3E:97
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0BF0
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 19:22:35 +0000
ROA not before:           Mon 08 Jun 2026 19:22:35 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139227
IP address blocks:        103.140.24.0/23 maxlen: 24
                          2404:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3056 (0xbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: Jun  8 19:22:35 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a27167b-e9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:0e:1c:9b:45:cf:60:52:2a:5a:d9:b7:0c:
                    1a:b9:fe:7a:58:56:e8:d7:cb:87:75:ab:30:e1:56:
                    ba:93:7e:c1:df:71:a4:fd:1c:f6:70:23:d7:37:06:
                    6a:5a:9b:62:9e:12:da:1f:96:dd:62:2d:07:f5:85:
                    a2:59:5d:55:91:4a:bc:1a:23:4c:6b:6e:6c:36:b2:
                    6b:bc:d7:83:6d:a0:ab:05:ed:38:50:b0:4b:10:15:
                    cd:d5:34:e2:19:10:3c:c7:32:8f:80:43:6e:46:2a:
                    12:7c:a8:7f:8a:8b:1f:05:ab:31:3a:79:54:50:a3:
                    d7:fc:0c:d8:2b:fd:20:07:01:b7:01:a5:e9:22:40:
                    67:37:ac:5c:11:75:22:06:de:0e:b2:e6:b4:77:09:
                    5a:53:42:7e:4f:1d:4d:d6:7c:ca:62:2a:d9:10:a8:
                    5d:8a:5d:db:37:0b:86:15:f2:e9:ac:a5:29:16:17:
                    c2:02:59:f6:8a:37:08:07:b4:ed:da:dc:5e:e5:ba:
                    8d:9b:a7:b2:fa:9f:ec:8f:5f:6d:f4:fe:27:77:a6:
                    32:b0:2d:62:c0:72:eb:04:bd:2c:0e:63:8f:5c:fb:
                    ce:fe:2e:77:d0:bf:a2:30:be:f3:56:74:11:c0:9e:
                    d6:25:00:04:73:93:bd:b4:47:e7:95:c7:ef:db:eb:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:32:9B:F9:EA:12:F2:47:D6:39:E3:8F:CC:6A:5E:25:25:AA:3E:97
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.24.0/23
                IPv6:
                  2404:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:1c:4d:bd:42:03:54:cc:c1:19:f3:e4:e7:fe:4c:d8:76:
         2e:25:af:38:fe:af:9f:92:b5:f2:ce:dc:03:e1:0b:e0:5f:a0:
         a5:0f:aa:ee:1e:ba:08:42:4f:a9:50:3c:fc:8d:64:f4:ab:03:
         14:ac:61:8b:23:b8:38:5d:bf:b8:55:28:d2:4f:16:fc:91:8f:
         47:55:ea:a8:21:fa:1e:c9:44:e3:d3:ed:29:16:7d:3e:eb:9e:
         04:d8:91:72:29:c1:56:18:64:67:6f:df:f6:e9:89:56:e2:85:
         39:ab:ff:fd:70:25:09:75:c3:f8:37:76:ba:0d:f9:31:49:18:
         ab:0b:34:5e:46:e1:14:24:c8:16:fc:40:f3:b6:0a:39:7b:fd:
         ad:60:d0:ad:de:ba:6c:30:72:87:17:e0:dc:c5:59:3d:8c:8f:
         97:bc:72:dc:9f:2c:74:6c:00:b3:4a:56:91:dc:dc:e5:22:4c:
         d3:68:b0:d6:47:61:94:5a:28:75:69:7b:5f:a8:6b:38:27:29:
         53:45:dc:3a:d5:58:47:87:e9:23:81:fd:7e:06:cd:d6:68:de:
         d0:5b:a1:d6:85:97:91:49:a7:de:c0:ca:f4:b2:5c:28:05:92:
         96:96:4c:d3:93:3c:e2:a3:73:02:68:e6:d6:9e:c7:e1:f0:33:
         b5:ac:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:10 2026 by rpki-client