Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa
File:                     78A6163A03A111EF8B02B62AC4F9AE02.roa (raw, json)
Hash identifier:          47l1ln9Nx13HUurVSbC4jY0jHYfX9Vb/9u1t5wwZQzk=
Subject key identifier:   A9:00:34:00:2F:EA:2C:CE:00:98:90:3C:DD:88:12:DC:BA:23:AD:97
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       0194
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa
Signing time:             Fri 29 May 2026 04:36:33 +0000
ROA not before:           Fri 29 May 2026 04:36:33 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        103.41.8.0/24 maxlen: 24
                          103.41.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 04:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: May 29 04:36:33 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1917d1-9458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:c6:53:2c:66:0e:44:cc:7b:ef:a5:bf:5f:
                    24:bb:5f:15:d4:54:f7:6d:8b:3c:98:f2:b9:46:5c:
                    b3:83:c0:7a:eb:c3:9b:e0:fe:03:cf:01:c9:85:85:
                    2b:ce:79:ca:3d:86:bc:94:cf:54:8a:3d:e1:5b:4f:
                    5c:29:a6:e8:9c:ec:fe:33:5a:98:f0:79:46:92:a3:
                    82:6f:24:11:a0:72:a8:03:2f:5b:f4:54:0f:9f:50:
                    e7:af:a4:16:fd:88:57:a0:56:29:3c:52:07:9f:0c:
                    e8:e9:a6:f7:5d:c3:88:46:f6:de:f2:c0:b4:e0:ff:
                    56:27:d6:91:62:3f:ce:47:3d:60:c1:62:d4:8d:3c:
                    b8:d8:43:a0:8b:70:af:e2:6a:a4:0e:8f:7e:f8:0c:
                    2c:3b:0e:95:cf:6d:2b:8c:61:23:bf:9f:35:7e:1a:
                    44:9f:ab:82:f8:74:9c:4b:ed:76:54:e6:62:94:a0:
                    50:b1:df:4b:0d:aa:65:2a:b4:85:20:b4:5b:67:f4:
                    a9:4c:58:96:44:46:fa:00:80:1d:e6:59:f7:e2:fd:
                    31:9e:c9:ff:ac:35:30:37:eb:8a:ca:b6:ab:45:9a:
                    a4:85:5b:cd:7f:ff:cb:93:9a:e8:7c:d6:11:d8:d2:
                    62:08:e7:7f:54:5a:4e:ae:12:09:19:83:13:12:5c:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:34:00:2F:EA:2C:CE:00:98:90:3C:DD:88:12:DC:BA:23:AD:97
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/78A6163A03A111EF8B02B62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:54:fb:8b:f2:eb:99:52:39:0a:60:2f:a9:6c:4c:3f:43:a7:
         65:5b:46:9f:d0:62:72:af:d8:ef:a1:3f:45:3f:7a:6e:85:48:
         50:f9:77:43:9d:b4:31:42:40:40:a3:69:e2:c3:0e:9f:b5:ce:
         d2:e5:65:18:36:1f:67:34:8d:9a:14:df:7f:4a:f7:f2:2c:c0:
         6d:53:74:be:9c:a2:ca:5e:6b:b8:ad:3a:f4:10:96:97:5d:60:
         19:53:73:9c:9e:37:98:f7:c1:13:c4:76:e9:2c:82:e2:40:73:
         f9:d2:63:6b:ad:7c:ab:ea:5a:f9:12:ae:be:0d:2d:b0:3d:c8:
         d5:40:85:6f:be:6e:fe:a1:18:d4:9e:99:67:9c:e5:67:75:40:
         bf:32:1d:da:8f:da:69:da:04:9e:2a:52:69:bc:46:f6:e1:3e:
         d9:c9:c9:1c:68:c8:15:35:84:96:b6:3a:d6:ff:73:85:5d:89:
         70:fc:b0:5b:c0:88:d4:52:28:72:b9:5a:22:3f:25:6b:fa:69:
         c2:2f:0a:b1:5b:a0:1b:1e:bf:0b:eb:c4:7d:3f:0c:60:c4:6b:
         68:c3:69:86:54:77:c7:15:17:7f:96:ca:0e:73:be:31:48:ad:
         33:a9:bd:77:60:b0:2e:b9:fc:eb:d0:56:4d:fb:aa:c6:75:21:
         d2:90:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:24:36 2026 by rpki-client