Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa
File:                     0716B2646C7111EC8C5E6967C4F9AE02.roa (raw, json)
Hash identifier:          n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=
Subject key identifier:   D1:2C:6A:B1:AD:46:B7:6B:C1:F0:32:BD:FC:23:82:49:F6:30:2C:D2
Certificate issuer:       /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial:       04CA
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 00:32:53 +0000
ROA not before:           Sat 25 Apr 2026 00:32:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58617
IP address blocks:        103.9.23.0/24 maxlen: 24
                          163.61.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
                          rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
        Validity
            Not Before: Apr 25 00:32:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69ec0bb5-137e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:77:d3:83:32:c5:97:78:27:b8:ee:22:41:
                    5d:c3:0e:a7:58:6c:d0:c9:f6:1a:68:94:e1:1d:cb:
                    03:b9:83:1f:1f:c7:09:ff:a8:f5:a3:bf:d3:e2:29:
                    91:f7:36:99:fc:23:33:96:22:fd:fc:81:28:8e:54:
                    16:e1:d7:62:c3:a3:cc:02:e6:e5:12:bc:c3:69:a4:
                    73:2e:a9:8c:27:e8:27:e3:71:eb:42:b2:0f:35:07:
                    1a:d3:6d:31:ae:7f:32:28:a9:2a:eb:12:3a:03:2e:
                    e4:0f:7d:9f:af:8e:ba:d2:2e:64:e2:87:91:04:35:
                    fa:9e:c3:6b:b2:1b:22:23:f9:d4:b2:e1:45:d0:91:
                    c8:9c:a9:f4:f1:4d:40:67:c0:17:ae:06:bc:1f:2b:
                    26:0a:1e:4d:62:b5:b9:5b:88:5d:c5:bd:f6:38:9f:
                    8e:89:02:78:53:af:26:2a:4e:4b:b3:44:cc:00:0d:
                    98:50:b4:77:22:67:33:7f:d5:82:18:e5:dc:55:5e:
                    64:eb:e0:70:82:7a:69:e2:ec:75:40:ea:1e:10:e7:
                    2c:f6:a3:4d:b7:5f:96:9d:88:7b:e3:85:86:b0:23:
                    46:8c:3b:b9:fb:b0:5e:40:e8:ba:1c:15:ac:3f:de:
                    f4:0b:c6:67:fb:3e:88:cc:ed:8a:ed:1a:c4:13:4c:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:6A:B1:AD:46:B7:6B:C1:F0:32:BD:FC:23:82:49:F6:30:2C:D2
            X509v3 Authority Key Identifier:
                keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.23.0/24
                  163.61.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:98:60:64:0c:a1:73:41:8e:0e:84:5b:c4:08:55:66:a6:
         98:07:49:7d:73:c2:38:6c:19:1f:a4:18:73:63:b0:35:02:53:
         f8:2e:46:ae:90:cb:32:56:17:05:00:bd:bb:27:14:77:39:84:
         1c:8f:b6:3e:4f:6b:a2:78:fb:f9:03:ea:2e:97:c0:78:3a:8a:
         8f:8a:24:2e:66:53:4c:2f:89:d5:ae:14:2a:cc:77:62:53:b9:
         09:5b:9a:78:a0:e4:e6:9b:40:88:a5:52:ba:bf:8f:61:73:4b:
         e0:35:a9:42:f1:9d:3e:e2:84:bf:dd:5e:9a:e0:28:1c:d4:bc:
         3c:73:7c:3a:fe:e6:c1:3b:45:3c:7e:06:b2:76:f8:8b:c1:85:
         e5:5d:5e:77:6f:5c:01:54:f3:dc:2b:37:80:04:9b:d5:00:20:
         1e:56:4a:84:6e:95:8f:71:1e:89:01:d0:d5:97:d5:f9:be:f3:
         81:6b:a1:9e:ba:ed:8b:8e:92:c5:cf:8f:ea:e7:18:75:0f:e6:
         55:aa:55:55:7f:5d:26:84:23:7a:51:36:1f:e4:c9:24:17:cd:
         9e:6e:23:26:bc:7e:88:69:73:b5:8b:33:e1:25:88:69:cd:0d:
         88:82:f6:0b:d6:c6:85:31:c0:ed:b6:a7:f1:d6:e5:8f:d9:0f:
         8d:d2:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:58 2026 by rpki-client