Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
File:                     1794902224E111EF97BA8F42C4F9AE02.roa (raw, json)
Hash identifier:          Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=
Subject key identifier:   D3:8F:9C:8A:38:A0:35:D0:46:B8:CC:9C:29:3A:B2:5B:57:9D:2C:2E
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0CF3
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
Signing time:             Sun 24 May 2026 08:04:24 +0000
ROA not before:           Sun 24 May 2026 08:04:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        103.137.160.0/24 maxlen: 24
                          103.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: May 24 08:04:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a12b108-0f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:bf:25:1f:f3:37:e5:8e:fe:af:11:88:0f:
                    4a:93:60:fc:d7:e2:cc:8f:8f:a0:d2:50:00:e3:1f:
                    c0:7f:8d:03:8d:5c:04:a7:07:49:99:d2:4e:23:de:
                    d3:1a:69:68:88:7a:fb:f0:25:d9:9e:5f:81:df:9f:
                    f4:e1:25:c7:7e:f6:db:93:8a:79:9d:bd:31:a9:15:
                    e1:27:a2:c5:02:1a:ab:c2:3f:95:99:14:22:da:b5:
                    aa:d5:af:b5:af:19:cc:bd:db:b4:b4:61:c5:b0:22:
                    1e:da:04:b0:b6:c9:91:db:4a:bf:cb:fc:f8:49:cd:
                    cc:14:02:50:a6:a3:e9:a3:f8:99:1c:09:fd:51:98:
                    d2:c9:c6:44:a2:7a:c8:40:60:4b:5b:a9:c8:0c:45:
                    2b:97:b6:c5:1d:ae:41:8a:37:ce:74:86:29:18:3f:
                    47:63:64:63:d8:aa:f8:4b:8b:c0:7b:40:fb:a2:91:
                    82:33:91:51:ce:c4:e5:32:c7:c5:00:69:40:47:4f:
                    37:35:80:0b:8a:e2:2d:8c:2b:7f:d2:fc:82:6a:7f:
                    14:5e:5a:e4:1b:d2:51:c1:47:86:16:a7:1f:91:5d:
                    6d:b6:1b:78:0a:3a:16:7c:a5:88:38:d4:97:76:11:
                    78:6b:59:45:34:40:90:d0:cd:51:b6:a7:07:07:89:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8F:9C:8A:38:A0:35:D0:46:B8:CC:9C:29:3A:B2:5B:57:9D:2C:2E
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:29:9a:63:e3:c9:1a:92:36:33:63:ec:53:5e:5c:ea:15:
         02:a7:8f:82:4e:c5:8d:03:a9:18:df:31:0c:de:a2:55:1d:e2:
         ad:6e:84:f1:45:ed:c7:7b:1c:2f:a8:9a:4f:c0:1e:52:54:c6:
         0f:b2:d4:87:90:4c:dd:24:8f:15:9f:27:23:2a:59:9f:3f:e2:
         e4:f7:f3:af:6f:d3:09:b3:e5:e3:00:6f:03:40:6a:78:3a:b9:
         ae:f8:7f:32:b9:49:7d:72:d1:a3:d7:a6:2c:f0:6e:b6:28:8b:
         08:12:4f:ab:20:09:9d:2d:69:35:3b:aa:ff:27:db:09:d7:30:
         d1:14:66:69:d9:01:56:99:ff:7b:08:f5:76:b2:34:92:f2:62:
         7d:2e:9b:24:ac:2a:c0:c2:66:4d:bf:ae:fe:ba:0c:c0:b9:88:
         69:da:95:58:1c:c8:17:ea:6d:87:3f:09:b2:c1:f3:90:19:bd:
         20:de:07:07:c3:a5:dd:fd:3a:05:5b:47:27:61:8e:77:81:cb:
         2a:df:e8:42:c6:78:86:02:df:71:1a:c7:73:ae:e6:95:df:cd:
         16:7a:98:f1:f2:7d:53:f8:b2:07:c8:4a:96:0c:75:26:b0:6f:
         36:47:4f:21:2a:3f:37:9f:b9:d9:bc:e1:50:53:62:10:e0:18:
         47:82:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:12 2026 by rpki-client