Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
File:                     E6F73E22B99E11EEBF189021C4F9AE02.roa (raw, json)
Hash identifier:          8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=
Subject key identifier:   DC:E1:F2:90:35:37:4B:80:C5:BD:B0:8A:E4:D2:D0:76:0B:02:B0:3F
Certificate issuer:       /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial:       3605
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
Signing time:             Tue 12 May 2026 15:13:04 +0000
ROA not before:           Tue 12 May 2026 15:13:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24192
IP address blocks:        103.7.168.0/22 maxlen: 24
                          103.253.192.0/24 maxlen: 24
                          103.253.194.0/23 maxlen: 24
                          202.174.81.0/24 maxlen: 24
                          202.174.82.0/23 maxlen: 24
                          202.174.84.0/22 maxlen: 24
                          202.174.112.0/21 maxlen: 21
                          2406:1200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13829 (0x3605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
        Validity
            Not Before: May 12 15:13:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a034380-31da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:0f:22:05:15:1c:8d:3c:22:08:7f:ab:11:
                    fb:f5:76:54:f0:c5:34:4f:82:f8:eb:cf:50:82:3e:
                    d6:63:fb:a3:0c:cc:68:84:bb:3c:a0:97:38:b9:e9:
                    d3:2a:9a:3d:79:34:aa:2d:1b:36:36:15:fe:55:05:
                    30:76:e8:78:31:d7:e1:43:cb:8c:c0:b8:9c:90:54:
                    1c:12:27:b4:94:2d:fa:b3:99:0d:88:c6:c8:c4:c5:
                    38:ce:af:40:53:aa:4d:80:3b:3e:b1:ce:bf:3d:d3:
                    3c:91:06:df:1e:a5:18:56:13:09:0e:e1:da:66:f6:
                    3e:fd:a4:82:15:c9:c0:d5:e7:be:7f:35:8b:ef:06:
                    04:e4:8a:5c:ac:93:55:8b:c6:0e:66:36:11:0c:1f:
                    2e:86:98:30:ab:3d:96:5c:5c:be:22:dd:5b:4c:16:
                    2c:63:18:3d:d9:59:a8:1f:ac:8a:b3:08:4b:1e:28:
                    0f:89:b7:a2:7a:63:c4:c5:50:0f:5f:1c:a7:14:bf:
                    72:44:89:fb:3c:da:8b:46:04:57:cb:81:c2:87:f6:
                    1f:c6:0c:25:50:e3:07:09:d0:3a:04:4f:3d:42:11:
                    8b:66:46:f3:a3:21:99:4c:23:88:bb:0c:b2:d3:70:
                    66:e4:c9:b9:79:7d:0d:cb:55:e0:2d:cd:41:78:09:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:F2:90:35:37:4B:80:C5:BD:B0:8A:E4:D2:D0:76:0B:02:B0:3F
            X509v3 Authority Key Identifier:
                keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.168.0/22
                  103.253.192.0/24
                  103.253.194.0/23
                  202.174.81.0-202.174.87.255
                  202.174.112.0/21
                IPv6:
                  2406:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:8e:63:09:69:5e:f8:08:fa:86:d7:71:25:db:c3:55:1e:91:
         dd:20:49:54:e7:97:a8:4e:6e:43:40:e2:df:5a:ad:69:94:e0:
         aa:f9:3d:aa:3e:cd:98:35:0a:34:52:9a:25:ac:ad:24:90:7c:
         6b:8f:0b:36:ad:03:e7:c1:dc:e0:51:60:86:e7:2b:0e:91:60:
         5e:db:dd:d9:af:47:5a:25:fd:71:c9:bd:98:7f:48:4c:0e:0b:
         6e:65:57:18:e8:bc:fb:66:61:cb:e7:a8:63:fb:bc:66:a2:fb:
         f7:27:fd:f0:d4:7e:2a:e3:cc:5d:f0:2c:9a:45:1b:b9:5e:eb:
         ed:ba:65:6d:a9:c9:f3:39:82:ae:19:05:cf:52:70:45:ba:5b:
         83:ec:2b:ac:85:fe:f9:9f:ca:44:07:06:23:82:2d:01:23:f4:
         18:30:5c:e8:49:96:b4:a5:1a:23:a4:15:53:02:6f:48:6b:ee:
         44:0a:65:ec:3d:b2:ac:fd:32:27:9e:1e:13:cb:a9:17:c2:da:
         04:8b:59:95:c9:5d:3d:47:9f:9d:4a:66:be:45:90:c6:79:58:
         cf:4a:48:52:6c:2b:b4:c8:3a:8f:29:b9:01:22:b6:15:22:85:
         f0:1d:4a:5f:bf:0f:5e:66:d5:6d:fe:d5:32:6e:2a:84:a5:2a:
         f3:23:6f:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:05 2026 by rpki-client