Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa
File:                     10F4AD9C81DC11F1A817832770A30FBC.roa (raw, json)
Hash identifier:          tcEDniWE2GiqOhyoj757p7krVg5bHwf1EmxkpQBck08=
Subject key identifier:   7D:32:68:A8:4B:71:EC:FD:8D:22:88:C9:E6:2B:B9:3E:DF:E6:13:AC
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       05E6
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa
Signing time:             Fri 17 Jul 2026 12:36:00 +0000
ROA not before:           Fri 17 Jul 2026 12:36:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63099
IP address blocks:        103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Jul 17 12:36:00 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a5a21b0-1295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:e2:91:59:7f:0c:3e:c5:59:4c:69:36:f8:
                    f2:33:1f:cf:69:c6:4b:fb:53:a5:d1:c5:06:2f:0e:
                    7e:af:b9:60:ba:af:fb:f8:41:11:7c:50:97:c8:aa:
                    d9:63:44:d5:20:ce:b5:f6:84:23:65:db:42:4d:ec:
                    7b:71:a5:43:37:69:6a:70:7e:38:5f:13:16:51:2a:
                    c5:43:f7:1b:80:41:56:c0:91:c8:34:66:d0:79:18:
                    56:79:d4:b9:98:1d:ce:0c:c5:cd:55:e8:72:a6:79:
                    7d:42:9d:85:70:64:47:f6:de:ef:bf:9e:d2:05:05:
                    4e:75:9e:4f:80:2c:fd:64:b4:dc:6c:d5:69:ff:53:
                    8a:fa:f8:2c:ef:f6:d9:cd:41:ba:b6:c1:7a:c4:1b:
                    da:f8:af:89:cd:30:77:0c:c1:98:96:28:d0:71:8a:
                    c1:a0:bc:c4:6a:73:63:31:cf:c0:2b:de:d4:47:6d:
                    30:04:11:1c:30:1e:e5:ca:bb:2b:4f:d9:a1:65:19:
                    6c:c5:b0:f2:e1:ba:cc:0e:41:31:83:5f:df:9d:4c:
                    db:f9:7e:f0:16:b4:23:3d:57:87:fe:56:20:e3:ee:
                    02:3d:6a:12:d6:06:b1:4d:c5:ae:15:bb:19:fe:7a:
                    23:ef:dc:12:d7:cb:6e:14:5f:f7:b8:28:42:26:c7:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:32:68:A8:4B:71:EC:FD:8D:22:88:C9:E6:2B:B9:3E:DF:E6:13:AC
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:e5:13:5f:03:c4:9c:41:04:0b:f8:58:d7:94:b8:ed:47:
         d4:ee:41:5e:34:d4:15:bd:35:14:a7:14:d2:59:b5:f8:c5:ea:
         f2:1c:cd:42:8d:f6:92:00:59:77:5a:4c:3e:6e:74:6c:df:3f:
         3b:d2:d6:41:25:50:c3:67:bb:2f:bc:c7:f7:e1:e5:db:91:6c:
         8a:7d:b2:85:24:99:88:de:1e:28:ea:29:77:65:1d:8a:6f:2f:
         81:f7:c3:4b:bb:46:03:2a:52:99:2b:bb:3b:71:61:6f:94:40:
         ba:75:51:ba:09:58:96:b9:6d:9e:80:5d:0c:81:67:ec:37:ca:
         2f:4a:4b:90:32:6e:63:b7:bf:98:6e:88:0c:0a:22:36:5a:a1:
         7b:7f:5c:31:e0:62:88:d7:75:22:17:26:8c:d1:9a:fe:fa:d3:
         77:4a:b5:4c:6a:9e:a1:bf:1b:79:e8:c7:f2:fd:ff:50:73:3f:
         03:60:dd:e4:95:c9:32:50:c3:a3:8e:b5:95:76:a5:16:ce:74:
         cd:2b:fb:61:c3:e4:3a:3d:39:62:b7:e2:ee:a7:c4:28:5a:b0:
         fa:4c:ed:11:78:37:32:16:03:97:6a:d4:b3:09:46:a1:93:57:
         d2:cf:c2:fb:77:50:25:9e:06:94:e6:56:69:b0:6a:28:1f:f4:
         2d:49:fa:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwNzE3MTIzNjAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVhMjFiMC0xMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA417ikVl/DD7FWUxpNvjyMx/PacZL+1Ol0cUGLw5+r7lguq/7+EERfFCXyKrZ
Y0TVIM619oQjZdtCTex7caVDN2lqcH44XxMWUSrFQ/cbgEFWwJHINGbQeRhWedS5
mB3ODMXNVehypnl9Qp2FcGRH9t7vv57SBQVOdZ5PgCz9ZLTcbNVp/1OK+vgs7/bZ
zUG6tsF6xBva+K+JzTB3DMGYlijQcYrBoLzEanNjMc/AK97UR20wBBEcMB7lyrsr
T9mhZRlsxbDy4brMDkExg1/fnUzb+X7wFrQjPVeH/lYg4+4CPWoS1gaxTcWuFbsZ
/noj79wS18tuFF/3uChCJsdy9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH0yaKhL
cez9jSKIyeYruT7f5hOsMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvMTBGNEFEOUM4
MURDMTFGMUE4MTc4MzI3NzBBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0ndMA0GCSqGSIb3DQEBCwUAA4IBAQDCd+UTXwPEnEEEC/hY15S4
7UfU7kFeNNQVvTUUpxTSWbX4xeryHM1CjfaSAFl3Wkw+bnRs3z870tZBJVDDZ7sv
vMf34eXbkWyKfbKFJJmI3h4o6il3ZR2Kby+B98NLu0YDKlKZK7s7cWFvlEC6dVG6
CViWuW2egF0MgWfsN8ovSkuQMm5jt7+YbogMCiI2WqF7f1wx4GKI13UiFyaM0Zr+
+tN3SrVMap6hvxt56Mfy/f9Qcz8DYN3klckyUMOjjrWVdqUWznTNK/thw+Q6PTli
t+Lup8QoWrD6TO0ReDcyFgOXatSzCUahk1fSz8L7d1AlngaU5lZpsGooH/QtSfpC
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:20 2026 by rpki-client