Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa
File:                     10A3333E3BAC11F1B91923E195833773.roa (raw, json)
Hash identifier:          qv+5geqvZuNiYk7aYI5fXtMxpLW2mBJm6HRn38gC5D4=
Subject key identifier:   D4:39:77:1F:71:69:2D:3C:C4:33:7A:31:A4:37:23:BD:66:A8:B4:A5
Certificate issuer:       /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial:       01F8
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa
Signing time:             Sun 19 Apr 2026 04:56:02 +0000
ROA not before:           Sun 19 Apr 2026 04:56:02 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     24550
IP address blocks:        103.94.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
        Validity
            Not Before: Apr 19 04:56:02 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69e46062-6778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:7f:8f:50:14:76:e5:d6:25:e2:5d:cd:1d:
                    74:36:f9:3a:8e:fc:6b:11:0a:1b:25:81:34:9c:c5:
                    65:af:c3:79:aa:aa:44:34:2f:34:be:62:99:47:7b:
                    54:e5:ee:7a:ef:17:6d:5f:5a:46:0c:de:a1:34:2e:
                    02:7b:8c:b8:af:a3:2b:3d:1c:80:c8:de:75:a9:8e:
                    fb:f2:fb:40:fd:1e:12:2a:e5:87:06:9e:9c:80:28:
                    41:b3:c6:b8:fe:f8:94:43:c6:23:63:88:18:4e:9e:
                    fb:9e:c3:7c:76:6e:52:ab:ac:34:8b:4b:5c:21:71:
                    3e:0d:8f:e3:1f:db:11:2b:d8:1b:3e:ca:40:03:2f:
                    7f:89:d5:c4:bd:e6:24:97:f8:17:63:bf:0a:b1:d4:
                    e6:e0:e0:36:95:58:d1:17:09:ab:e5:3d:59:5c:db:
                    5e:e9:f7:ef:94:b6:8a:00:b5:66:fe:64:92:aa:db:
                    82:65:a0:e7:f4:48:d9:59:5d:14:76:fc:4a:43:90:
                    00:1d:ad:fb:f3:31:7b:85:8e:f8:45:9a:b8:99:05:
                    3d:36:f1:06:a5:56:9c:cb:d6:4f:91:a2:ce:6e:2f:
                    02:be:8d:0a:47:1f:aa:de:8f:0f:0a:b8:b5:21:2b:
                    70:d7:62:08:50:a1:5d:2a:c4:cb:56:30:1d:3d:20:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:77:1F:71:69:2D:3C:C4:33:7A:31:A4:37:23:BD:66:A8:B4:A5
            X509v3 Authority Key Identifier:
                keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:15:18:29:1a:e2:ba:c1:b6:1f:20:8f:40:f3:f8:99:9e:59:
         92:73:ee:bf:2a:9e:e8:44:24:a6:09:93:34:a7:e6:f7:96:5e:
         af:22:eb:b2:5b:6a:4f:1c:39:3b:b0:2b:49:39:ae:f4:e8:86:
         51:68:f5:b1:72:5a:23:fb:18:c7:83:d4:55:fc:c7:a7:d9:8c:
         0d:92:18:06:7a:d2:93:23:de:f0:6c:3c:e1:1e:2b:04:a1:09:
         18:a4:38:81:2c:97:e6:11:78:74:21:e6:43:7e:b2:7c:c7:f2:
         62:85:99:b1:3a:cd:7f:b6:72:fb:7d:b2:e8:cd:8f:73:c9:6b:
         a9:a9:c1:44:95:13:ba:dd:bc:65:67:c5:3e:75:35:f6:07:2c:
         19:a6:d8:e4:e5:4f:9f:24:4f:1f:5b:ca:d3:9a:69:46:ec:a3:
         ba:ce:44:b2:1a:32:56:51:e5:d4:fb:01:3f:10:b2:20:82:f5:
         39:13:7e:a5:49:12:8e:43:f8:87:18:7b:38:a1:2d:c3:4f:83:
         bc:f7:c3:92:60:73:65:b2:10:70:c5:63:27:9e:d7:36:9a:01:
         48:8c:5c:e1:b5:c8:c1:d8:d3:c5:34:98:8a:96:72:00:aa:24:
         8e:56:10:4a:f1:44:68:54:a5:0e:6c:74:81:41:7f:3b:67:71:
         fa:03:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:43 2026 by rpki-client