Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
File:                     4821776AD9A211F092913C6268D3641D.roa (raw, json)
Hash identifier:          LOgkEDPU6qR9vCf6pUezUGPbjzvlJI1psdU+DoBEifc=
Subject key identifier:   92:0D:60:F0:04:93:CA:62:80:2A:32:2A:92:C2:AC:23:2E:F9:6A:8C
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       3583
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
Signing time:             Sat 04 Jul 2026 15:12:52 +0000
ROA not before:           Sat 04 Jul 2026 15:12:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     64050
IP address blocks:        103.1.41.0/24 maxlen: 24
                          121.127.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13699 (0x3583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Jul  4 15:12:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4922f4-ac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:5f:02:61:d8:01:bd:54:1b:0c:d9:07:92:
                    0f:79:31:61:f3:57:97:f5:c6:6e:c4:2d:92:15:a6:
                    10:16:a3:b7:8c:e2:49:d7:7b:ae:93:ff:26:18:d8:
                    f0:3a:89:24:d4:fd:a3:84:09:8b:b6:78:76:30:80:
                    a7:c1:79:ca:3e:b2:09:6b:02:50:1c:0a:82:12:98:
                    be:71:ba:50:c4:d2:99:f0:05:23:d8:a5:62:00:83:
                    07:a9:ce:9b:38:35:6a:ba:11:8f:d3:b5:21:fa:88:
                    6c:b3:39:dd:e4:c2:39:57:3c:c5:3f:96:92:29:cf:
                    d0:dc:b5:86:e4:24:97:94:ce:7f:ab:12:01:28:2d:
                    83:5a:1a:de:ad:e9:9b:e2:88:50:ff:76:bf:01:f5:
                    2c:a8:fa:61:5c:f7:8e:30:49:8d:45:2a:02:74:7f:
                    67:5e:52:5e:7c:42:ef:02:01:af:f7:cb:71:ef:8a:
                    c4:73:04:d5:80:01:ac:5b:47:27:a0:e3:ed:a3:d7:
                    86:9e:c7:39:22:ee:3a:f5:ae:01:63:f7:46:98:8c:
                    df:d2:41:d8:87:0c:ff:b1:62:f7:eb:e8:29:5a:6d:
                    b1:8d:19:a1:b1:d8:68:14:74:a3:cb:b1:d3:29:fe:
                    56:08:ea:42:3b:6c:33:d6:01:28:6a:b1:40:3e:4d:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:60:F0:04:93:CA:62:80:2A:32:2A:92:C2:AC:23:2E:F9:6A:8C
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.41.0/24
                  121.127.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:a6:88:20:a2:95:62:6a:04:4c:6e:28:da:c7:d5:c3:8a:
         28:9c:52:b7:75:7c:6e:97:c8:b1:a2:f3:ef:68:fd:2b:02:5c:
         e7:58:90:33:43:c1:f6:87:1f:d5:29:f9:21:84:2f:da:54:82:
         98:fc:e4:3e:a5:ed:6b:90:f1:96:a6:18:b8:5b:3e:80:f2:09:
         ac:72:2b:7d:1d:b8:7a:6f:8c:2b:cd:23:4b:87:e5:a7:db:b1:
         68:52:e5:69:fd:cb:d6:9e:c8:b0:2d:62:f5:f7:7b:bb:b6:4b:
         8b:01:c8:e6:25:6f:40:02:8e:36:17:4a:71:58:1f:1f:48:63:
         20:e5:10:91:15:21:a1:9d:c0:e2:3e:06:d7:6c:3c:4c:c2:a0:
         53:8d:c7:ea:25:e0:97:5e:c6:9e:5f:bc:89:50:78:a3:7d:49:
         1a:62:17:03:96:57:d5:b8:15:92:c0:1a:63:02:c7:f1:25:ae:
         83:4a:e1:37:b4:cf:d7:91:25:aa:fd:83:5c:48:f8:b1:a0:97:
         bd:5c:04:70:c1:0a:a1:d0:96:d2:ef:4a:dd:f7:07:f2:60:68:
         6b:1b:33:dd:b4:5d:74:75:c1:d3:45:94:ad:93:06:7e:2d:39:
         fb:cf:d8:f4:3c:98:eb:7c:48:70:a1:0b:57:8b:52:35:8f:0f:
         55:df:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:08 2026 by rpki-client