Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa
File:                     A99E5658488011EE8113A766C4F9AE02.roa (raw, json)
Hash identifier:          PrGqSAcgp1HdiIpn0vqqOgThVUF4Ys8AxQ1iGGW7VmI=
Subject key identifier:   B7:59:4C:94:D1:3F:4E:C6:4F:1C:A7:87:3D:87:FF:5F:1A:7D:65:50
Certificate issuer:       /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial:       01FA
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa
Signing time:             Sun 19 Apr 2026 05:39:12 +0000
ROA not before:           Sun 19 Apr 2026 05:39:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141047
IP address blocks:        103.94.252.0/22 maxlen: 24
                          103.155.68.0/23 maxlen: 23
                          103.155.68.0/24 maxlen: 24
                          103.155.69.0/24 maxlen: 24
                          2406:6940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
        Validity
            Not Before: Apr 19 05:39:12 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69e46a80-2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:72:60:8e:a8:64:44:b3:6f:cb:b7:69:5d:
                    23:4a:0c:cf:25:3d:42:ad:80:73:32:a2:d0:4c:a8:
                    49:86:1c:c8:08:b5:6a:a5:66:32:05:80:e6:da:c6:
                    36:b7:2f:83:3a:e1:b0:a0:75:49:62:a4:94:de:b4:
                    7a:29:db:ec:7e:2f:9b:9c:5c:7c:ac:36:a1:49:52:
                    7e:08:62:ea:95:db:42:a2:e7:da:86:9d:2e:5f:3c:
                    71:2b:5d:54:58:08:7f:87:b4:a9:73:dd:5b:bd:a4:
                    63:f1:6e:13:42:ab:91:54:b1:2f:ba:99:8f:81:20:
                    69:ce:9c:27:fe:59:c8:07:60:c6:d9:a3:23:14:68:
                    6d:06:5c:53:46:82:5c:b4:90:d0:4e:a4:e6:a2:78:
                    f8:dc:89:36:f4:6a:0c:e1:1e:26:cd:9c:8d:d8:3f:
                    44:5d:32:c4:96:ed:a8:b3:85:d3:d8:07:a3:99:f3:
                    fb:36:a2:9c:9e:d9:91:56:38:db:c8:d3:36:9d:ec:
                    5e:39:3c:74:2f:e7:cf:b0:5e:e4:d0:75:b6:24:2f:
                    a2:bd:bd:b5:37:15:62:bb:7a:eb:1b:3b:8a:31:35:
                    c8:65:13:02:32:a3:51:a9:0e:07:36:e0:f3:98:2c:
                    a7:cf:f8:bf:ea:b5:38:03:08:e4:d7:4e:ad:af:7c:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:4C:94:D1:3F:4E:C6:4F:1C:A7:87:3D:87:FF:5F:1A:7D:65:50
            X509v3 Authority Key Identifier:
                keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.252.0/22
                  103.155.68.0/23
                IPv6:
                  2406:6940::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:db:70:87:9d:c5:c8:c1:76:10:e3:d4:d4:87:af:a4:06:
         6f:01:d1:38:cf:78:3d:02:2d:61:de:ce:5c:c1:2f:e2:d3:26:
         af:ad:32:1d:b4:4e:81:d7:9e:22:4d:05:52:92:18:71:69:c4:
         69:86:6f:cb:49:c7:09:09:7f:de:b3:e8:93:25:6a:00:5d:80:
         94:6e:5b:d0:de:fe:2f:36:8b:34:f9:9b:30:5b:ab:a5:09:8a:
         5a:50:8a:b2:e2:a8:74:f3:79:6c:9f:56:4e:7f:cf:46:de:5d:
         99:db:bc:07:6e:8b:98:b8:09:19:ff:6f:06:5f:8f:87:45:a4:
         c9:1c:06:26:bd:ee:f3:21:22:6b:78:11:cb:b5:f3:89:1f:a9:
         90:bc:0f:0c:58:74:6b:26:99:48:fb:1f:4c:ec:92:5e:ed:1e:
         dc:ae:b5:8a:c5:24:90:36:a7:22:d4:8b:79:ba:13:6a:c9:62:
         a3:bc:e5:85:7d:4b:82:74:83:cf:32:96:2b:84:0c:e5:c1:36:
         81:f1:d4:6c:d4:58:7f:91:e9:20:bd:29:01:a1:77:5f:57:7b:
         ff:24:8e:83:6c:42:7e:bb:ea:46:91:88:61:4b:b2:24:98:bf:
         71:b7:d7:0d:23:3a:c9:8c:67:f1:7b:a3:fe:63:f8:6e:2a:75:
         25:a8:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:06 2026 by rpki-client