Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa
File:                     0F15CD3AAF4011F1A81565FF6911F970.roa (raw, json)
Hash identifier:          Xz7eZ1SV8R4oYvn9Xlw6Pv4LszQ2ezhKLHykoR+8jxw=
Subject key identifier:   05:71:98:9F:17:F6:3F:7B:60:D5:35:CD:B5:0D:B1:ED:78:FE:DD:9B
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       256E
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa
Signing time:             Sun 13 Sep 2026 06:55:09 +0000
ROA not before:           Sun 13 Sep 2026 06:55:09 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135095
IP address blocks:        103.120.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9582 (0x256e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: Sep 13 06:55:09 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aa648cd-650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:0e:a0:94:a3:b2:13:66:56:32:45:53:dc:
                    37:a1:53:2a:0c:c3:96:26:e2:47:26:74:69:be:e4:
                    5f:03:95:44:d2:59:ac:e0:5b:c6:ea:f8:5d:a4:b8:
                    49:87:0b:b5:f6:1d:93:6c:cd:9b:0b:51:77:33:17:
                    c3:3e:3e:11:b1:6e:2f:b1:c2:d8:79:65:ed:a6:ba:
                    c5:40:b7:58:67:9a:f7:88:16:f9:f6:73:94:87:03:
                    00:23:0b:f7:4e:b2:30:10:52:76:3c:50:e3:98:a0:
                    d8:d3:b7:2a:b4:54:69:fe:d6:8a:a4:fc:59:99:33:
                    ca:c0:d8:df:7b:6f:16:32:ba:30:7a:aa:10:97:8d:
                    30:a1:4d:36:d1:1e:dc:99:8d:46:6f:bd:64:68:af:
                    c3:18:e7:c9:ba:36:0e:91:ab:80:35:4c:0f:a9:ee:
                    9d:d6:ac:fa:9b:ce:00:70:f2:31:b5:15:41:de:30:
                    5c:ee:75:85:97:ba:91:38:76:07:52:30:21:e2:2c:
                    35:41:89:05:99:59:d3:fd:be:e0:75:20:ee:cc:85:
                    a1:84:6c:c4:89:ec:82:e6:1d:9d:3b:42:21:b3:93:
                    8a:c4:88:32:4a:36:3d:a7:bc:a7:84:fb:d5:6b:df:
                    d2:cd:90:36:e0:16:a0:9c:dd:f7:2e:d4:7d:25:85:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:71:98:9F:17:F6:3F:7B:60:D5:35:CD:B5:0D:B1:ED:78:FE:DD:9B
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:a5:0f:6f:61:b3:7f:0d:d8:5b:6b:ce:0e:14:c8:03:df:9b:
         94:78:18:2e:90:82:e4:e0:31:27:f7:57:bc:ec:bb:a0:5c:5d:
         21:f7:45:ef:ba:0b:a5:84:cb:b2:fe:20:19:8c:cd:a6:d3:f4:
         26:06:44:56:1f:bb:36:cd:ea:b5:d2:1e:67:0c:ea:2e:27:c5:
         10:01:c1:e6:38:51:63:b7:3c:5e:fc:3b:a1:24:60:bf:69:90:
         42:af:51:56:44:66:68:5a:13:03:56:22:24:ab:37:22:9b:c2:
         ef:1c:6e:3c:84:c8:59:7d:e4:a6:9a:9f:5e:f6:d7:1b:21:aa:
         1e:ad:83:b6:e0:dd:12:c3:2b:54:bc:dd:92:f8:77:fd:2b:b7:
         98:17:4b:7a:61:ed:65:d5:9c:71:92:b6:1f:1d:5b:d1:57:4d:
         4b:f3:95:95:02:07:ed:89:1f:1e:ca:4f:99:e1:3d:80:96:d7:
         d8:ff:71:5a:7c:d6:06:8f:bd:80:2d:46:e3:25:e0:3f:ce:fe:
         50:ee:e3:ba:96:32:fb:ba:2d:46:a7:04:20:ac:25:00:b8:18:
         38:b2:2e:f4:2d:22:f5:ad:65:d7:a5:bf:89:41:4f:61:98:9b:
         ce:40:51:ef:2b:62:42:7a:b2:1c:ae:dd:f2:dc:c9:51:83:33:
         35:00:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:15 2026 by rpki-client