Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/39CAB0884C7411F1AE12CE95C4833773.roa
File:                     39CAB0884C7411F1AE12CE95C4833773.roa (raw, json)
Hash identifier:          eo+kqTFakh01xeW7e72U4FIAXwks4DcaVTESVYep3Kk=
Subject key identifier:   35:7A:BB:4F:5E:DA:83:2C:33:50:BD:4C:BF:B2:08:4B:55:61:3B:8C
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       0662
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/39CAB0884C7411F1AE12CE95C4833773.roa
Signing time:             Sun 10 May 2026 13:29:10 +0000
ROA not before:           Sun 10 May 2026 13:29:09 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149283
IP address blocks:        103.169.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: May 10 13:29:09 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a008825-e75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:9d:7c:64:72:a5:2a:e6:4e:56:5e:5a:07:
                    f5:5a:c4:83:8b:dd:a2:fc:7f:5f:23:9e:b0:ff:06:
                    a5:b8:5c:dc:c3:51:91:1b:e0:26:0e:cd:8e:00:6b:
                    51:e4:01:57:c3:37:fe:34:b3:fd:e0:4d:9c:21:c0:
                    9a:0a:b2:82:e4:cb:a5:a3:38:c2:32:17:20:ab:2b:
                    b0:e1:dc:fa:af:79:17:82:69:3d:34:76:2e:86:42:
                    ed:fd:32:08:e5:f9:11:d2:74:08:1c:4d:19:68:af:
                    d4:3b:db:9d:80:5a:b7:65:1b:f3:37:1a:67:da:49:
                    89:41:ea:f7:38:a4:e8:1f:0b:f2:a5:22:72:82:47:
                    62:64:8e:ab:59:f7:7a:9f:39:f8:0e:76:c5:60:42:
                    d2:1e:67:ac:62:2e:99:0e:2f:bb:44:4b:9f:e3:6e:
                    4c:f0:90:4e:86:2c:e9:35:2e:98:be:12:01:f2:f0:
                    d0:03:e0:0c:86:6e:ae:8f:d3:f7:db:c6:45:b7:ae:
                    62:c5:1d:f0:e8:36:8e:ab:d7:e0:63:4a:66:42:88:
                    f7:18:2d:36:13:74:37:05:4c:b1:e9:03:cb:ef:28:
                    00:00:a0:b8:dd:ca:a8:c1:e3:c9:cf:8e:ce:b2:e2:
                    f0:8c:f0:52:52:a2:02:e8:a5:ed:2c:87:b1:46:8c:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7A:BB:4F:5E:DA:83:2C:33:50:BD:4C:BF:B2:08:4B:55:61:3B:8C
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/39CAB0884C7411F1AE12CE95C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:79:60:3f:70:43:bc:cf:50:83:48:74:3c:c2:36:ae:fc:
         34:97:37:71:ac:d3:7a:89:95:b4:d3:1d:74:24:11:95:fe:d5:
         4b:68:37:7e:60:20:7c:4f:c1:ef:da:32:94:cd:79:1e:24:46:
         1c:5e:90:9b:b0:2c:74:d6:d9:fe:e8:f5:02:7e:fa:2c:5a:e9:
         67:dd:fa:d1:ec:27:6d:d5:24:54:f5:ae:ad:a9:d9:64:a4:f9:
         7b:dc:7d:b9:67:7e:6a:5b:50:87:d0:ed:b3:4b:3a:d1:83:b9:
         24:2c:7d:b5:56:d9:d8:21:41:09:b2:65:89:a9:12:f3:58:d4:
         c3:c8:f9:f3:2e:11:bc:25:b8:4f:19:f7:a1:0e:3f:77:34:bd:
         c0:e5:2c:ae:13:d8:58:71:49:ac:17:e8:45:00:41:46:e3:db:
         33:a1:98:46:e7:5a:78:b7:a1:26:09:c7:d4:01:8d:54:2f:1b:
         76:de:a0:7a:26:73:70:c3:f1:4b:ff:d0:43:76:bb:c7:96:61:
         8f:3f:25:09:3f:cb:60:4c:96:90:97:d2:59:5f:20:f4:db:fd:
         41:e4:14:f4:b5:9a:41:db:57:4f:37:0e:2a:43:5e:88:d8:58:
         e9:e3:51:60:f7:d5:47:44:3f:d4:83:b5:b5:0f:ff:71:40:31:
         99:ee:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:25 2026 by rpki-client