Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa
File:                     13CC4306433711F18A02B862AB833773.roa (raw, json)
Hash identifier:          4UatX4Tw5T6Cxt0fPDGgJ9hIPv2v0sxsXyzKNr9mnPs=
Subject key identifier:   F0:0D:2B:EB:1B:D0:D0:57:CF:16:72:8C:F2:43:33:30:F9:55:3E:F5
Certificate issuer:       /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial:       06CB
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa
Signing time:             Fri 01 May 2026 06:48:02 +0000
ROA not before:           Fri 01 May 2026 06:48:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137213
IP address blocks:        103.166.58.0/23 maxlen: 23
                          103.166.58.0/24 maxlen: 24
                          103.166.59.0/24 maxlen: 24
                          2402:5ba0::/32 maxlen: 32
                          2402:5ba0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
        Validity
            Not Before: May  1 06:48:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f44ca2-431a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:0b:cb:9e:59:b8:d1:e8:63:6c:77:9b:64:
                    e3:60:2b:40:69:15:48:40:2d:c9:27:b7:9d:ac:3f:
                    14:bb:63:5f:c7:30:2b:d2:52:63:a1:6a:81:00:fd:
                    ac:54:db:41:14:89:d4:3e:43:9a:69:11:d3:0e:3e:
                    f9:7c:fa:0f:06:f8:e6:9c:06:10:78:73:e5:c5:4f:
                    d5:16:f9:0e:02:d8:fc:30:a0:52:2d:25:31:90:1f:
                    00:09:8e:f1:1e:aa:e2:b2:21:3e:f6:fe:0b:59:65:
                    9a:6b:9f:98:9c:0d:1c:55:8d:eb:d1:6e:48:0d:55:
                    bc:72:8a:0e:8d:61:48:30:11:2c:95:f8:58:58:77:
                    1e:01:dc:fd:f1:5e:7a:a1:44:2e:26:48:a5:11:72:
                    b7:eb:82:92:fb:cd:68:8b:28:bb:d3:c1:e8:4a:0d:
                    4e:08:0b:d4:93:0a:f9:28:d2:eb:c3:a5:c3:a8:9c:
                    18:d0:d1:72:9c:94:fb:13:59:34:48:49:1c:e0:52:
                    79:28:a3:79:22:67:65:ea:c0:e3:38:04:40:32:cf:
                    e6:70:a0:74:f5:d9:16:60:90:43:ad:6e:0f:b7:b8:
                    22:88:63:bd:cb:0f:ff:df:35:4b:ad:b1:b7:71:f0:
                    31:02:e5:cb:9c:eb:89:1c:3e:76:e7:19:7c:45:bc:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:2B:EB:1B:D0:D0:57:CF:16:72:8C:F2:43:33:30:F9:55:3E:F5
            X509v3 Authority Key Identifier:
                keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.58.0/23
                IPv6:
                  2402:5ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:8f:3e:30:91:22:6f:3b:f3:ae:b1:9f:c2:73:e4:ca:10:
         17:8b:18:b2:72:bb:0d:86:3e:13:cb:d9:54:21:19:7a:02:7b:
         f9:eb:20:c7:81:73:cc:fa:43:49:a2:48:38:59:e0:db:02:ea:
         c1:2e:80:a1:6c:aa:9b:3c:03:4a:06:df:35:f7:d9:b7:4f:84:
         49:61:3c:19:9f:ae:8e:1e:a4:bc:5d:29:73:da:d4:7d:8e:7a:
         75:04:be:9a:5c:37:64:c3:50:65:7e:1d:c3:af:85:14:8b:1d:
         8a:5f:37:8b:45:a2:eb:c7:a2:02:28:7f:94:f4:d1:48:59:8d:
         da:ee:fe:11:4f:71:d0:83:4a:ef:6f:1c:73:92:d3:01:d2:96:
         f1:e8:e2:13:bc:ef:73:5b:40:4d:58:25:52:4c:5c:1a:94:f9:
         5c:c8:c6:22:b8:1c:c8:ae:ed:bf:be:a4:30:a4:86:8a:62:e5:
         b1:1c:05:b5:c9:3c:aa:14:5d:fe:74:eb:f8:46:81:e2:b9:65:
         e1:b0:59:ff:9c:38:f5:bc:b2:2d:e3:c2:ee:26:30:b6:90:99:
         73:e0:d9:be:11:f8:bc:4e:9b:52:fd:2a:ea:9d:06:5e:cb:70:
         3c:57:15:e4:65:07:58:24:0f:9f:a9:3c:af:e6:73:bc:8c:73:
         32:f6:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:39 2026 by rpki-client