Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
File:                     86550F680B4311EE8ABEE820C4F9AE02.roa (raw, json)
Hash identifier:          l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=
Subject key identifier:   16:CA:FA:74:FC:59:E2:26:02:B9:6C:4B:F0:4A:CB:DB:4A:29:A4:A2
Certificate issuer:       /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial:       048B
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
Signing time:             Wed 13 May 2026 00:30:30 +0000
ROA not before:           Wed 13 May 2026 00:30:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140630
IP address blocks:        103.84.44.0/24 maxlen: 24
                          103.84.45.0/24 maxlen: 24
                          103.84.46.0/24 maxlen: 24
                          103.84.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
                          rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
        Validity
            Not Before: May 13 00:30:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a03c626-c0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:22:a4:cb:de:86:7f:46:e1:a1:09:79:a3:
                    82:3a:35:3e:47:b5:74:54:2b:af:ef:de:c4:9a:91:
                    5f:05:f8:61:4f:b3:c2:1a:d3:42:55:81:f7:1a:73:
                    a4:dd:dd:03:18:24:c3:9e:33:02:f3:53:e3:7c:33:
                    ce:43:b3:22:9e:8b:fc:c2:48:e5:15:90:8a:48:a0:
                    20:62:70:60:c6:d3:3f:60:cc:b0:67:6b:bc:90:c0:
                    f2:40:bc:4d:f3:8f:57:7e:de:ce:fd:bd:e5:71:d6:
                    66:97:b9:95:cc:e2:b2:cd:50:b1:08:b0:44:93:fa:
                    f6:ea:8f:5b:bf:24:2d:a4:11:85:ba:de:2a:93:ff:
                    fc:b7:03:65:20:6a:f2:0d:64:dc:b5:e0:6e:d6:bb:
                    d4:4d:a2:1f:e9:ed:69:20:9b:81:2d:3d:dc:19:56:
                    58:59:ce:84:e1:01:ae:8f:ea:c0:97:77:32:a5:ee:
                    1c:9e:e0:e9:7c:46:9c:08:6f:9e:eb:95:7e:14:c8:
                    b0:cc:eb:e1:c0:e2:04:90:4c:20:4f:05:50:e2:38:
                    a5:a7:1d:86:48:e6:49:b0:ca:0b:5c:93:6c:ae:8d:
                    d0:e2:89:d0:0d:77:b2:a1:98:97:0c:0b:72:80:4d:
                    4f:2a:e6:8c:6f:2e:06:b8:92:b2:58:5b:c3:1b:45:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:FA:74:FC:59:E2:26:02:B9:6C:4B:F0:4A:CB:DB:4A:29:A4:A2
            X509v3 Authority Key Identifier:
                keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:99:d2:b4:03:a7:eb:85:f8:af:4a:26:2b:e1:ee:47:08:99:
         83:21:43:69:dc:7a:26:50:de:96:67:d3:03:a5:c2:f4:78:58:
         6e:c8:81:f7:8e:be:7a:76:cf:58:a4:3c:0d:86:d4:90:d7:30:
         b9:d6:e6:c6:85:03:5b:11:cb:21:1a:13:86:43:68:5f:6d:cb:
         22:11:a7:db:30:f1:62:35:68:13:88:75:09:f6:fa:5b:5c:86:
         73:40:80:b7:9a:54:69:b1:38:e6:f8:ec:3a:68:27:fa:aa:59:
         cc:e1:68:90:84:aa:dc:c5:a6:b6:f6:7f:1b:a2:b1:71:78:40:
         5b:67:22:0a:96:0a:17:2f:d4:22:5c:53:bf:10:43:d8:73:4c:
         1f:26:1c:79:49:94:d9:94:3a:c5:d7:fb:b6:27:ea:35:c0:41:
         2f:6f:84:a9:66:20:e7:23:0a:ff:dc:31:2a:43:ab:f0:b2:bc:
         f7:25:36:69:8f:09:96:00:e2:a7:02:e4:e1:e9:98:68:9e:b2:
         ee:96:cb:ed:f5:f0:cc:e4:20:b5:5b:99:50:48:19:04:99:f9:
         ce:d7:27:43:e3:2c:05:9b:92:7c:a7:48:30:a1:39:f0:5e:58:
         f7:c7:55:60:70:47:fb:27:17:fd:e6:6a:42:ec:54:d6:77:20:
         f6:e6:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:29 2026 by rpki-client