Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa
File:                     4D9099E66F9411F18CD406106EA30FBC.roa (raw, json)
Hash identifier:          KhV4pO08T7ByOxUr4S8oxiImOdoh9Kqbs9FBQHAW+9Y=
Subject key identifier:   CB:9B:DA:B6:5B:CF:65:0F:48:2E:74:6E:13:33:8B:B4:F5:F3:C1:6E
Certificate issuer:       /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
Certificate serial:       24
Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa
Signing time:             Fri 21 Aug 2026 08:59:53 +0000
ROA not before:           Fri 21 Aug 2026 08:59:53 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140325
IP address blocks:        103.151.224.0/23 maxlen: 24
                          103.247.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl
                          rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
        Validity
            Not Before: Aug 21 08:59:53 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a881389-5ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:6a:e7:1f:22:3e:ce:b7:84:f9:0b:c7:95:
                    d1:38:6c:01:9d:24:f9:97:95:fd:b7:05:03:1a:bf:
                    cd:ee:1a:8e:b8:e1:e4:ca:fc:2e:5d:c7:ae:57:69:
                    cb:85:4e:18:41:8b:18:48:76:7a:88:01:09:c0:c4:
                    dc:81:dc:fb:fa:63:a5:ed:d3:7f:e6:18:a3:a8:17:
                    69:7d:25:71:46:81:ab:bc:0d:85:d2:35:e4:d7:19:
                    7d:9d:c5:b3:00:53:51:b5:ba:5d:83:95:ac:0a:b6:
                    bd:a7:6d:db:76:4e:49:3f:b3:d9:47:75:1a:b7:32:
                    f8:3b:83:fd:6d:74:a7:3d:a9:53:ea:e5:cf:71:46:
                    6a:c6:0b:64:ca:9c:8f:be:8e:1a:6c:ee:9b:75:f4:
                    1a:89:5c:65:1b:bb:e9:4a:89:d3:ea:a4:59:d2:c5:
                    a7:c7:38:4d:cc:b3:76:aa:97:b4:f6:0e:15:18:43:
                    7d:25:a3:18:26:73:ce:e7:b6:3b:21:73:ae:06:ec:
                    1d:a2:05:35:f3:19:8c:b5:22:a4:64:4c:29:33:50:
                    56:71:2f:93:d2:25:b6:42:c9:64:f1:f5:10:3d:99:
                    17:47:a3:a8:3c:99:21:98:eb:a2:54:fc:73:e0:77:
                    70:b9:6f:db:ba:9d:98:51:f3:1e:79:17:7a:bf:df:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:DA:B6:5B:CF:65:0F:48:2E:74:6E:13:33:8B:B4:F5:F3:C1:6E
            X509v3 Authority Key Identifier:
                keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.224.0/23
                  103.247.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:52:7b:49:30:85:ea:6a:79:1a:a0:fd:3a:e5:a3:d0:c4:
         9c:d7:52:9d:45:b9:8b:5f:a6:7f:62:51:52:a0:9b:23:41:db:
         5d:d7:d5:ee:48:5b:f6:5a:3a:14:b2:f4:a8:4b:43:b6:48:37:
         92:34:13:62:51:e0:d3:f5:db:99:ef:ee:e4:05:59:46:a5:7a:
         bf:1b:76:a0:2a:be:de:b0:92:e4:ef:39:50:61:08:1c:85:b6:
         1e:8e:c9:3e:2a:1d:d3:c7:16:67:1a:20:c0:f1:b8:c3:d5:f5:
         82:bc:11:a9:b1:f3:39:fb:67:20:88:d0:10:3b:72:90:34:54:
         b6:87:d0:3d:27:41:bd:7c:7c:ee:bc:b6:2a:ce:ae:22:3f:c3:
         c1:b5:fd:f5:54:f6:48:95:e7:db:f2:d1:82:37:77:e7:00:d4:
         aa:08:7c:5d:b5:af:90:87:89:82:25:bb:9a:44:a5:98:d9:b5:
         f0:2f:5e:e4:af:10:db:f0:87:d2:a5:bd:2b:34:9a:5b:30:e6:
         a9:84:b0:21:e0:13:6a:3c:0f:d2:8f:46:e0:5a:f8:30:42:8c:
         1e:ef:09:17:0c:fd:42:01:e4:03:27:fc:0b:86:c3:6f:b8:c1:
         7c:d4:18:b5:cf:fb:12:ab:4c:a6:d7:c0:e3:dc:c5:c5:46:3f:
         ec:b3:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:51 2026 by rpki-client