Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/B73DBDC848FD11F1BBA9715993833773.roa
File:                     B73DBDC848FD11F1BBA9715993833773.roa (raw, json)
Hash identifier:          AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=
Subject key identifier:   92:D7:86:D9:50:F1:68:10:57:59:9B:98:A4:4E:6F:BE:26:6A:57:D3
Certificate issuer:       /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial:       04
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/B73DBDC848FD11F1BBA9715993833773.roa
Signing time:             Wed 06 May 2026 03:45:49 +0000
ROA not before:           Wed 06 May 2026 03:45:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138962
IP address blocks:        103.137.190.0/24 maxlen: 24
                          103.137.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
                          rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
        Validity
            Not Before: May  6 03:45:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fab96d-88b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:fd:ab:11:08:d3:2c:cb:d9:c8:2a:b5:96:
                    67:1b:2d:0c:03:6f:8f:02:9c:2f:32:b8:ff:f8:56:
                    63:08:cf:74:38:80:54:1c:4d:2b:eb:03:cf:54:99:
                    10:d1:1b:ec:a1:47:28:fc:22:3b:68:eb:1f:84:2c:
                    19:01:e1:c3:ea:65:81:3a:38:16:d3:92:de:75:07:
                    a9:1a:d3:5f:49:9f:20:73:39:4f:d1:45:51:6d:33:
                    9f:c6:50:97:8f:b5:e3:db:54:e1:6e:58:1c:57:cf:
                    5b:47:87:64:84:03:01:ca:d1:bb:57:df:39:cf:94:
                    3b:25:64:d5:ab:23:46:71:9d:cb:73:e2:a7:fd:58:
                    f2:c2:ec:b7:76:c6:ed:e5:b2:40:38:6a:d8:7d:bd:
                    08:e4:be:5b:55:b8:92:3e:01:c6:c0:83:81:03:51:
                    5e:4c:bf:6f:d1:ce:7d:d2:c5:a9:fb:28:0c:60:bb:
                    64:44:69:9e:a8:cb:fa:3a:1d:18:97:71:f5:c2:4d:
                    29:17:64:51:b9:ea:1b:fc:6a:76:c9:ff:5d:64:a4:
                    a4:b9:a8:6a:63:e9:5b:73:f8:33:34:c4:33:7a:c3:
                    17:27:4c:c8:18:61:c3:64:c5:4d:ac:40:44:ce:42:
                    4e:69:3d:10:66:db:c7:96:24:4b:59:30:64:08:3a:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D7:86:D9:50:F1:68:10:57:59:9B:98:A4:4E:6F:BE:26:6A:57:D3
            X509v3 Authority Key Identifier:
                keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/B73DBDC848FD11F1BBA9715993833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:36:39:0a:db:5c:5e:3f:14:d8:ab:88:b1:2c:d6:fb:76:05:
         b3:bc:c7:88:26:93:65:7f:e1:f7:13:1b:88:d6:2c:3a:33:fc:
         e4:f1:11:e5:fc:e7:ec:d3:a3:1b:48:16:c1:04:25:d0:9f:59:
         85:ff:0d:32:7c:90:5f:e7:55:7b:68:d3:83:c2:0e:7d:f9:37:
         69:01:2f:38:8b:5e:42:fc:cd:bf:62:73:54:37:fb:f4:fe:cf:
         1b:12:3f:95:f5:87:e7:66:3a:fd:18:5b:ba:a4:48:2a:11:2d:
         ed:2a:f2:c1:0b:33:62:f3:cf:04:92:98:af:ce:b5:09:18:15:
         e9:6a:fd:a3:43:5b:3a:9b:bc:16:3a:88:55:da:fd:1c:b3:62:
         77:47:3d:86:78:22:be:f7:e4:96:db:09:33:51:18:66:95:d2:
         70:87:0a:d7:76:80:ee:6c:2d:8e:fe:26:15:c7:30:50:84:e9:
         1d:9d:59:96:fe:60:d6:5a:fa:69:6d:28:a4:68:2c:e0:33:65:
         62:16:0c:09:12:d1:d8:bb:db:dc:90:f1:e8:57:3c:df:c6:d6:
         a7:41:e2:da:cf:f4:13:3b:ec:90:ba:71:23:d9:c7:66:2b:58:
         44:e7:ef:de:2d:6d:e4:05:5d:d3:61:d2:03:12:65:78:ed:e8:
         68:f6:51:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:19 2026 by rpki-client