Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa
File:                     7BBC1DD2040611EF909F6C3EC4F9AE02.roa (raw, json)
Hash identifier:          syEln6vii/wYYxWVLv3KUps2a6bihbeCkUKikcEp+5g=
Subject key identifier:   4B:B1:B5:D7:4B:12:B0:78:99:7E:41:A5:6C:AC:E7:03:29:37:93:20
Certificate issuer:       /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial:       0941
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa
Signing time:             Tue 28 Apr 2026 19:23:42 +0000
ROA not before:           Tue 28 Apr 2026 19:23:42 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     137514
IP address blocks:        103.111.90.0/23 maxlen: 23
                          103.111.90.0/24 maxlen: 24
                          103.111.91.0/24 maxlen: 24
                          2402:99c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
        Validity
            Not Before: Apr 28 19:23:42 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f1093e-97b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:82:ee:70:d5:60:bd:96:ca:94:65:77:c0:
                    d3:31:0e:d6:18:3c:e7:d7:94:7d:ec:5c:a2:89:1b:
                    80:60:59:05:dc:01:f9:eb:03:8c:e7:d6:9e:c7:e3:
                    51:20:70:f9:95:a8:fc:6d:65:48:0d:b2:fd:7e:85:
                    38:28:01:f8:c3:e6:56:1f:53:eb:7c:aa:fe:88:67:
                    16:16:3b:9f:0e:07:48:28:0c:db:aa:b6:7d:c3:a1:
                    f9:09:ed:4c:7d:eb:a4:14:44:38:ab:54:22:b2:02:
                    3d:ef:17:91:4c:fe:a9:14:2a:a8:48:3d:bd:d4:a9:
                    6f:5e:35:6b:81:87:ef:d0:1c:5c:c8:c2:b6:58:c2:
                    f4:77:58:de:07:35:a3:4d:73:3a:7a:15:f0:e7:96:
                    59:d3:91:52:1e:93:7c:c4:3c:57:a2:69:29:5d:43:
                    2c:32:2a:f6:3f:c7:7d:14:fc:9f:16:61:b3:11:62:
                    a2:51:5e:74:96:e0:86:74:07:e2:f4:22:26:48:40:
                    c0:70:ad:3d:86:8d:f2:fc:e9:a8:f9:93:f2:25:b9:
                    a6:78:c6:73:a7:5b:67:23:e4:9d:9a:cb:e2:da:56:
                    75:a3:ce:ee:0c:c6:7b:a9:90:ec:e7:d4:42:ca:36:
                    53:aa:7c:b7:14:ad:e1:eb:27:c8:19:c0:b7:07:4d:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B1:B5:D7:4B:12:B0:78:99:7E:41:A5:6C:AC:E7:03:29:37:93:20
            X509v3 Authority Key Identifier:
                keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.90.0/23
                IPv6:
                  2402:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:c5:0e:e7:01:30:29:35:1c:1f:8b:c4:61:bb:6c:1c:64:6a:
         d0:f7:05:0c:12:5e:04:6b:be:c5:30:ad:af:49:94:77:bf:4f:
         43:55:0e:ba:95:85:07:b7:a7:32:f4:77:f1:02:6e:3a:3d:43:
         a6:a8:dd:d6:27:44:3c:36:a7:47:98:37:14:a9:67:6f:90:b5:
         4d:fc:53:46:4a:b8:a1:55:e0:1c:f3:5c:68:d3:17:94:f8:03:
         7f:3a:c6:29:c6:f1:57:b2:6e:d3:d3:41:f9:43:85:4e:35:55:
         5d:58:a1:5a:11:f7:66:07:35:9a:94:19:91:a3:e8:1e:68:70:
         f1:71:a1:15:7c:7c:97:23:1c:80:38:fd:f8:28:8e:38:d5:8c:
         d0:b8:46:1f:2e:fc:c8:da:aa:9b:0e:41:af:62:4e:a0:70:d5:
         9e:3b:0a:d2:03:a4:5b:fd:be:fe:be:61:dd:b2:16:98:1a:07:
         ce:92:0e:38:80:58:61:a3:c5:a5:78:0f:ac:6d:18:b3:22:93:
         cb:86:af:86:86:7d:b9:f1:62:aa:63:f7:8c:6f:6b:d6:cc:7d:
         38:1c:20:37:ff:00:81:9d:b3:54:7c:27:ef:78:6e:aa:cf:3c:
         03:7c:db:09:e1:6e:f8:cf:2c:62:83:26:59:1a:3e:cc:08:a8:
         c5:16:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:27 2026 by rpki-client