Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/D9E82474B32111F18A2BA5146811F970.roa
File:                     D9E82474B32111F18A2BA5146811F970.roa (raw, json)
Hash identifier:          gONAkEpnsXwjiMV5h2HkLh1ORJpAppYvDN9jNqumzrk=
Subject key identifier:   B4:8A:D0:0C:7A:5F:0D:88:A2:72:6E:FA:32:08:D8:92:49:F5:4C:C3
Certificate issuer:       /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
Certificate serial:       CF
Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/D9E82474B32111F18A2BA5146811F970.roa
Signing time:             Fri 18 Sep 2026 05:29:00 +0000
ROA not before:           Fri 18 Sep 2026 05:29:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139022
IP address blocks:        103.138.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl
                          rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
        Validity
            Not Before: Sep 18 05:29:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aaccc1c-b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:b6:49:37:04:e7:8b:95:cf:df:4b:0d:1f:
                    e7:ee:18:45:39:63:eb:08:7b:ca:73:6e:95:e7:d5:
                    74:cf:42:1d:90:01:f4:cf:df:be:09:0c:95:f1:24:
                    65:6f:39:32:10:9d:94:d3:ea:63:e6:07:e7:a3:ff:
                    b9:80:89:54:36:1d:e0:e9:26:1c:bf:6b:ef:07:bd:
                    de:0c:63:7f:91:d1:b0:43:93:c1:9a:68:e9:9c:61:
                    70:31:0f:c9:2a:46:ae:e3:81:a1:a2:34:b6:17:09:
                    0f:a9:be:66:92:9a:e9:6e:5b:26:6c:71:fc:05:ef:
                    63:b9:5d:59:66:91:1c:c1:6c:1c:57:b2:77:69:c6:
                    7e:c6:38:cf:79:bb:34:d6:65:fb:72:23:df:bf:b3:
                    d9:5d:d6:cc:0b:e2:52:d4:7d:a6:a6:0c:c3:6c:89:
                    43:2d:b1:4d:e4:eb:44:e4:1e:26:8e:08:b0:36:c1:
                    46:13:e8:68:89:31:96:d1:3a:38:bf:87:3b:76:e8:
                    e2:2e:d3:ff:dc:02:55:e2:30:ef:26:e5:e8:45:eb:
                    10:df:cb:c1:78:6f:1a:58:ea:de:d4:fa:49:41:64:
                    2f:dd:25:43:f7:fe:e6:49:d6:73:aa:b6:83:a4:1e:
                    25:5b:ec:01:5e:ff:79:af:ff:de:57:f9:c7:26:ab:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:D0:0C:7A:5F:0D:88:A2:72:6E:FA:32:08:D8:92:49:F5:4C:C3
            X509v3 Authority Key Identifier:
                keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/D9E82474B32111F18A2BA5146811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:65:1c:7a:06:52:ec:1f:a4:de:9b:6f:7b:b0:31:91:fd:46:
         cd:2d:ea:34:9e:5a:2d:05:c0:c3:78:16:6d:b0:72:a3:3d:e8:
         8f:53:c0:47:12:62:fc:12:0f:c3:85:73:65:98:0f:2e:10:39:
         e8:2e:56:bd:57:8a:4b:2a:bd:a1:3a:07:a6:0b:e5:dc:c9:b3:
         2e:11:8d:dd:06:f3:c0:7b:fd:64:d3:8b:9b:ea:03:28:c7:fb:
         17:87:a2:ac:f5:03:6b:56:2c:c8:2d:3b:71:67:d2:a9:57:22:
         4d:b9:7e:be:0a:c1:af:39:77:70:78:1a:a9:b0:de:d8:16:33:
         32:9c:ae:9e:74:e6:98:26:2b:aa:29:df:d0:41:67:eb:e5:c4:
         3b:dc:61:13:7d:79:24:b0:ef:1a:9a:48:1d:49:41:a2:ba:5f:
         67:d7:27:59:6c:8a:71:d4:aa:0f:46:60:c6:15:50:02:e4:d4:
         18:17:dc:be:c1:ce:b3:f5:5f:be:6e:6f:54:67:97:85:3c:b4:
         1b:d6:ca:45:1d:5c:d7:01:f3:3a:b9:28:3b:4d:88:d7:aa:6e:
         d6:31:80:5c:6c:3f:71:2f:a5:7f:48:45:8c:5b:1d:e6:81:39:
         c9:f0:83:df:1d:b5:ef:4d:4e:f9:a7:89:3c:3c:16:f3:d7:f2:
         97:39:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:51:53 2026 by rpki-client