Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa
File:                     9FD3C6EC45EB11F1A29385B097833773.roa (raw, json)
Hash identifier:          dExHyhgqfE8zJdmuf/00Aoqy7D6f+M0i059P4+A2NUw=
Subject key identifier:   65:B9:02:9A:73:C0:E5:EC:01:94:A2:E7:BD:E9:16:81:AD:81:6A:EB
Certificate issuer:       /CN=A91A84E4/serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Certificate serial:       1B
Authority key identifier: B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa
Signing time:             Sat 02 May 2026 05:56:13 +0000
ROA not before:           Sat 02 May 2026 05:56:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     213840
IP address blocks:        103.104.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
                          rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A84E4, serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
        Validity
            Not Before: May  2 05:56:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f591fd-1a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:f6:66:22:d5:5f:8d:5e:90:69:c0:9e:a7:
                    45:9a:12:04:01:f5:b7:f0:7c:b7:3e:09:fe:37:42:
                    3a:58:d4:e7:57:da:60:f1:09:01:47:63:d7:57:27:
                    76:91:53:4a:07:62:39:e2:eb:7e:77:bd:24:01:15:
                    bc:0e:f6:25:a9:d0:46:df:db:4f:0f:a9:0e:c0:c5:
                    46:46:b4:14:94:3d:44:73:d9:8c:7a:67:72:7d:2f:
                    93:55:b4:18:64:15:31:a6:3e:84:0d:b3:bd:3d:97:
                    95:0f:e3:02:50:83:03:59:b0:2c:72:58:6e:13:3e:
                    32:78:1c:f0:16:db:5f:0b:f5:8c:64:72:07:c9:5e:
                    0e:f5:b1:04:0a:1d:a7:dd:0f:c5:e5:ab:fc:d5:fa:
                    8a:47:04:b4:2f:d5:ce:dc:8c:d6:08:ef:cf:38:62:
                    50:4a:68:7d:ce:a2:5f:d7:3f:39:fc:f1:e7:0f:f6:
                    9e:f9:d8:4d:02:eb:e5:b8:2c:f8:27:16:82:0b:42:
                    28:c8:33:fc:cc:97:16:0a:87:24:30:62:45:c6:1b:
                    d1:28:5e:38:c6:fd:3e:9a:0a:a3:f1:7e:6e:9d:93:
                    28:f6:cb:63:cd:d4:fe:be:64:40:f7:60:fc:b9:df:
                    80:c8:9d:0d:1a:0e:20:fc:2d:b5:6a:f2:05:c6:15:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:02:9A:73:C0:E5:EC:01:94:A2:E7:BD:E9:16:81:AD:81:6A:EB
            X509v3 Authority Key Identifier:
                keyid:B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:48:7c:85:03:48:5f:2f:1f:eb:b8:9f:cf:12:f3:5b:57:6a:
         9e:c3:51:ee:23:90:26:62:78:1c:c8:28:f4:ae:ea:95:ea:46:
         98:6d:18:7f:31:4b:31:5b:d7:84:7e:2e:bd:ea:c1:65:c2:0e:
         d5:9a:36:fc:c7:b7:27:b1:1b:9a:73:3f:12:4f:33:bb:2c:8b:
         79:95:38:67:0b:82:9c:5f:70:36:5e:29:72:24:30:11:8a:67:
         a8:a6:4f:31:5c:a4:fc:5d:1c:09:3d:d7:49:6f:94:bc:a7:5c:
         ed:46:ce:e7:2b:0d:c8:4f:cb:69:51:67:61:1d:e6:02:90:9e:
         cb:cc:63:bf:89:d3:54:35:f4:8b:f4:4d:8a:57:2b:df:a5:b9:
         19:ef:9d:af:69:42:ef:96:d5:61:f2:b6:e4:63:e6:2d:96:9a:
         ba:d7:3f:2b:6d:61:5f:51:c3:db:1e:a9:91:d4:bb:6a:94:fa:
         00:f3:09:96:34:8a:70:91:6f:6c:7f:27:c9:a3:c3:cb:e4:94:
         77:36:43:ef:8b:89:e1:2a:8c:e6:5d:02:44:88:4f:6f:c7:85:
         81:5b:c3:2d:86:af:32:de:50:2e:c3:7a:18:ff:2b:8a:17:48:
         6e:01:0e:03:62:41:e5:15:12:97:ad:93:68:bd:e8:a5:d5:54:
         da:2f:2e:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:14:58 2026 by rpki-client