Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
File:                     09513072DE3B11EC9F25BA5FC4F9AE02.roa (raw, json)
Hash identifier:          yG7cQXlLeQDmRJWtBQ7FWthoSWhErCv5Ur1ke2twhVY=
Subject key identifier:   6A:90:C3:5E:EE:E7:9F:36:7A:09:0C:F1:16:10:D9:17:C4:D7:57:4C
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       03A8
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 01:34:04 +0000
ROA not before:           Wed 29 Apr 2026 01:34:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137537
IP address blocks:        103.112.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936 (0x3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Apr 29 01:34:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1600b-50d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:18:2b:f5:05:5c:3d:f2:33:58:2b:ac:dc:
                    27:b6:aa:46:7b:63:36:6d:00:5f:39:8f:57:cb:02:
                    9c:5e:a9:d5:36:ed:b9:b8:3a:5f:c6:d6:f2:a4:2e:
                    f3:04:ae:93:25:c7:e3:93:89:3f:eb:75:ed:e6:6c:
                    0d:2e:9e:0b:ea:83:3b:96:ae:4d:3c:0f:3c:ac:f0:
                    91:59:c8:3a:2f:00:71:f1:12:36:c1:80:1b:e0:e4:
                    84:db:de:6f:0e:f5:b6:65:f5:88:2d:37:b4:c1:71:
                    25:47:58:37:3d:dc:e4:4d:7d:52:c3:7e:6b:cb:2f:
                    13:90:15:b8:b6:13:96:e5:7f:9c:95:fa:78:1a:1c:
                    f9:66:68:c9:ee:04:d8:69:56:78:84:a3:71:8c:2a:
                    53:bf:95:84:53:d8:2d:11:4e:b2:29:ac:95:c4:e4:
                    41:3a:f8:33:32:41:cf:ea:44:05:10:49:61:59:50:
                    38:8a:d1:83:ab:cb:2d:88:1e:c0:f4:a4:5f:e6:ee:
                    93:67:27:d3:8b:8e:4e:a2:5c:fa:34:a6:8c:5c:75:
                    a3:02:d5:cb:0a:90:df:85:aa:03:ae:5e:70:64:5b:
                    39:5f:6b:ec:e3:bb:21:84:23:26:a4:c4:45:bd:24:
                    b1:d4:fe:85:b1:cb:55:2f:b9:7b:90:91:5e:67:1e:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:90:C3:5E:EE:E7:9F:36:7A:09:0C:F1:16:10:D9:17:C4:D7:57:4C
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:5e:94:07:86:ff:d0:5d:a0:d1:f4:f2:97:0d:ad:01:44:3a:
         1f:fa:b3:bc:f8:7d:19:28:bd:88:83:c8:3f:94:06:19:42:8b:
         c7:f7:00:89:94:f9:2f:02:6f:b8:a4:59:90:42:eb:3a:b3:76:
         fb:b1:a0:ba:75:0d:e3:02:57:2c:c5:fc:3a:44:72:b5:4f:59:
         7e:ad:69:bf:87:fa:b7:4e:0b:ba:b8:49:36:74:49:13:b0:ed:
         1c:de:f8:e8:9d:2c:24:99:a3:5b:c1:dd:38:ef:32:6f:e9:38:
         58:d5:30:01:cb:60:94:a2:79:1b:e3:94:1e:60:4c:86:78:2f:
         70:c3:c2:82:61:39:ad:0a:d8:77:29:aa:c4:93:66:07:9c:aa:
         bb:3b:ea:ea:13:8a:fd:0b:f8:72:48:2c:3b:b2:ca:4a:10:94:
         b1:fc:26:e8:f3:3e:61:b0:e8:cc:04:d4:2b:e4:13:c6:75:8a:
         d2:25:9c:04:f7:cb:40:b0:b3:d2:92:89:1f:18:76:9e:94:41:
         6e:7a:22:e9:69:5c:cf:d7:32:82:34:ed:39:b4:f8:df:f5:9a:
         91:64:95:7d:e2:88:d8:79:f6:90:88:68:cf:66:25:6b:4a:ba:
         ea:04:cd:43:30:38:52:7d:10:3a:c2:e6:d8:76:91:71:b8:d7:
         95:f2:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:02 2026 by rpki-client