Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/0F812C446F9211F1BD55685D6CA30FBC.roa
File:                     0F812C446F9211F1BD55685D6CA30FBC.roa (raw, json)
Hash identifier:          bHHRKzCejdw2U0vQu39U0T3o7ItJZ6r4kG6fcSW5tNo=
Subject key identifier:   42:7A:20:AD:EA:3E:C2:3D:67:04:C7:A4:33:89:DD:CD:19:52:CB:39
Certificate issuer:       /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
Certificate serial:       25
Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/0F812C446F9211F1BD55685D6CA30FBC.roa
Signing time:             Fri 21 Aug 2026 08:59:56 +0000
ROA not before:           Fri 21 Aug 2026 08:59:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23907
IP address blocks:        103.151.224.0/23 maxlen: 23
                          103.247.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl
                          rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
        Validity
            Not Before: Aug 21 08:59:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a88138c-36f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:80:9b:84:2d:1b:d4:de:0b:f4:97:6a:0a:
                    51:84:b9:a5:04:17:e9:e1:00:ab:c7:cf:bd:f5:4b:
                    44:9a:1e:57:4b:11:af:bb:68:af:52:c9:82:3d:2d:
                    7f:8b:3b:dc:6d:38:05:86:7e:98:ba:91:ae:7e:14:
                    bd:71:5c:48:94:b3:5a:05:26:5d:d8:ef:c8:3a:53:
                    1f:c1:23:b5:c9:e0:07:04:67:cf:8f:45:a8:71:19:
                    56:31:3e:f3:3a:8c:96:41:61:3e:26:18:72:29:17:
                    e7:2f:60:0d:ab:db:02:23:8e:3a:98:f8:b0:ea:25:
                    87:0e:66:04:5a:64:14:b2:1d:f3:34:bb:ff:6a:87:
                    e9:91:9f:40:61:dd:df:ff:53:b3:27:1e:da:b6:46:
                    d6:0d:13:b2:78:cd:a9:7e:69:03:9a:50:e8:c6:63:
                    09:44:82:26:dd:f8:3f:99:59:ba:3f:28:6f:03:6e:
                    6a:99:47:31:17:c0:f2:1b:33:79:61:7b:27:70:53:
                    6a:f9:19:d1:49:cd:75:fc:71:fd:6f:40:b9:e6:0f:
                    63:65:e8:97:90:5b:bb:fe:5b:dc:4c:ad:09:75:a7:
                    19:58:75:b6:a5:93:56:97:9c:ef:d4:d1:ef:06:54:
                    90:a7:19:a5:ec:8e:88:d3:8f:ae:b6:ba:be:9b:ee:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:20:AD:EA:3E:C2:3D:67:04:C7:A4:33:89:DD:CD:19:52:CB:39
            X509v3 Authority Key Identifier:
                keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/0F812C446F9211F1BD55685D6CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.224.0/23
                  103.247.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:20:3f:db:54:97:25:bc:f2:47:93:8d:9d:20:98:62:a8:db:
         95:09:5c:f9:6b:e2:84:07:bf:76:6a:02:f7:b6:74:00:76:41:
         0d:93:5f:e0:0d:1e:ef:65:da:0c:68:ec:92:7d:be:53:cd:90:
         5f:0a:c8:a1:76:f4:02:8f:62:67:a9:19:0d:5e:da:19:c8:4c:
         2a:b9:4f:ae:dd:34:f8:d7:1b:62:13:98:a5:3f:d2:5c:2c:7d:
         dc:4a:d9:72:49:6b:85:47:38:8a:bc:61:2d:05:0d:c3:ac:11:
         24:8b:0b:9a:a4:be:89:09:4b:b6:82:4c:13:ef:2e:c9:cc:94:
         7f:48:0a:be:b8:64:18:2d:07:97:6c:8c:91:43:a9:2f:45:c8:
         34:a9:4a:eb:26:90:63:ae:b2:c6:2b:2a:75:3b:f7:bd:aa:6b:
         ca:18:0b:b9:55:8f:d8:24:77:5e:c1:c4:53:19:9c:cb:fb:17:
         c2:66:35:b6:c9:bc:61:6c:b7:41:c1:57:e3:7c:1a:87:c4:2e:
         df:42:f7:af:3d:03:45:dc:7f:ee:b0:85:55:ed:75:ab:90:77:
         80:85:81:f7:b1:23:fe:88:be:b7:db:66:b1:53:2f:06:cf:dc:
         d2:6a:a4:27:70:68:a6:9b:81:ad:92:1b:ee:cc:40:21:04:c9:
         d8:11:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:34:11 2026 by rpki-client