Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
File:                     D992FDD49B4811EFA17EB17FC4F9AE02.roa (raw, json)
Hash identifier:          dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=
Subject key identifier:   A7:DC:73:ED:AE:80:C3:A5:72:9A:48:B9:CE:70:4A:A3:DD:23:35:2E
Certificate issuer:       /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial:       0C4F
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 20:20:31 +0000
ROA not before:           Fri 10 Jul 2026 20:20:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23686
IP address blocks:        101.97.48.0/23 maxlen: 23
                          101.97.50.0/23 maxlen: 23
                          2404:4f01::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
                          rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3151 (0xc4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
        Validity
            Not Before: Jul 10 20:20:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51540f-58c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:8f:bf:ab:f6:f6:41:5f:f4:b3:59:cd:08:
                    6a:bb:c7:da:32:57:55:6a:40:4f:54:59:79:69:22:
                    9b:d3:b2:b0:ff:76:df:9f:06:66:8d:20:8f:09:87:
                    40:2d:ff:7f:8a:49:f4:a0:77:c9:65:41:02:84:be:
                    c6:de:2b:1e:54:44:d4:4b:d4:c0:b3:e9:cd:ed:a0:
                    53:7b:36:b1:5f:33:f8:9d:5e:6a:a6:29:d8:f9:05:
                    69:a7:85:62:59:82:26:64:bb:39:8a:75:6d:77:36:
                    59:07:e2:96:db:24:1e:77:ab:75:8a:79:7c:15:6c:
                    5e:7b:77:e2:d6:f0:a1:db:9a:e2:96:da:dd:c5:90:
                    01:4d:14:ee:8f:ff:76:aa:f5:8a:51:f5:c3:a3:b3:
                    72:46:b1:eb:b6:14:78:96:02:21:b7:15:d0:39:57:
                    08:56:7d:ea:cc:e6:a9:01:81:93:75:05:f0:d4:82:
                    06:87:98:8d:88:54:ad:45:de:fb:17:e5:13:a0:a8:
                    d4:3e:34:f8:a3:20:23:78:35:16:22:d3:eb:04:1e:
                    36:09:f6:38:5e:0e:e9:07:5c:7d:0f:77:b3:cd:33:
                    b9:78:33:cc:76:07:7a:37:98:a0:21:63:f2:e7:6e:
                    a7:e0:4e:09:52:27:a2:2a:66:e4:95:4c:15:7c:5c:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DC:73:ED:AE:80:C3:A5:72:9A:48:B9:CE:70:4A:A3:DD:23:35:2E
            X509v3 Authority Key Identifier:
                keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.48.0/22
                IPv6:
                  2404:4f01::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:5b:35:75:d1:62:1e:6b:9d:b2:56:3d:fe:82:68:d3:4e:3d:
         90:16:05:03:0f:8a:0d:e6:d8:ae:98:fc:57:b8:c0:22:b5:23:
         5e:9e:59:c5:72:03:24:77:42:54:74:54:d3:8e:82:e5:c1:a9:
         d9:6a:ab:fd:80:5d:54:fb:91:14:c7:da:7f:a9:84:fb:e8:1f:
         2c:77:8e:30:90:b6:a2:d7:4f:05:a5:be:62:e6:77:84:6a:bc:
         cd:72:f3:19:60:5e:a0:a3:13:7b:22:60:98:4a:a0:2d:05:ef:
         f6:a4:51:54:5f:70:e5:86:b7:33:cc:57:7c:dc:1a:58:5c:24:
         ca:1c:e9:72:0d:c6:a3:e5:4b:1c:5b:bd:5e:e5:d2:f1:02:e5:
         1b:42:f6:02:41:89:99:12:70:63:84:ed:8a:e4:40:98:37:ee:
         66:0b:93:17:ef:bf:cf:99:23:be:cc:e6:e8:f8:ef:c9:86:43:
         01:d3:a3:7b:48:8b:e5:1b:40:64:41:6c:cd:ec:fc:4d:57:5f:
         08:1c:4d:bf:c4:a6:35:52:b3:17:0b:5b:41:59:b2:3f:28:13:
         f8:2a:8b:05:2f:0b:00:bf:a7:d4:06:76:0c:b3:05:3c:5d:11:
         a3:fa:ff:84:33:3e:3a:87:09:f8:85:5a:1c:0a:e4:1b:e8:7e:
         5d:f8:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:09 2026 by rpki-client