Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa
File:                     6B8789A63FA011F1B60E4CC5BB833773.roa (raw, json)
Hash identifier:          eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=
Subject key identifier:   4E:3A:06:74:FA:32:E6:90:A1:EE:3B:6F:2E:70:E9:8B:57:B3:6C:16
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       0953
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa
Signing time:             Fri 24 Apr 2026 05:42:46 +0000
ROA not before:           Fri 24 Apr 2026 05:42:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.23.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Apr 24 05:42:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69eb02d6-82c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:0b:32:a4:b6:3e:3a:86:d7:9f:d5:5e:e0:
                    b0:29:fb:ed:52:0d:49:de:94:e2:2a:88:22:ec:c4:
                    01:cb:a9:15:c2:91:e9:3a:d3:bd:64:28:9f:7a:85:
                    ca:98:41:c2:69:e6:2d:a5:9e:82:d5:8a:2b:ab:19:
                    01:ef:cd:2c:e6:db:50:27:90:67:3c:96:68:14:c6:
                    b2:51:0f:eb:03:0c:ad:51:45:a7:a5:cc:b1:65:10:
                    ef:e5:04:b5:e5:22:33:cd:a1:e8:78:88:98:fe:ea:
                    5f:7f:08:34:d4:9e:c2:cd:41:3f:e9:fe:68:d6:88:
                    3d:e2:49:b4:5d:4a:ca:dd:fb:f5:1a:47:da:e7:73:
                    6a:f6:c0:50:43:93:55:c1:78:4b:1d:da:70:2a:56:
                    60:1f:10:e3:4e:02:ce:0e:ff:28:00:fd:70:e9:43:
                    9f:72:50:35:bf:2b:dd:2b:0c:ce:f0:d9:a0:f7:0b:
                    21:1d:f4:7b:f6:13:32:84:a5:f8:36:09:86:d8:80:
                    41:cf:ff:24:02:5a:9c:89:11:b3:17:f8:2f:ec:34:
                    6d:88:34:6d:07:31:45:e1:8b:5f:cb:66:d5:5d:84:
                    9d:8b:f9:0a:a6:7e:5d:d2:d9:d0:15:a6:17:44:6c:
                    3a:58:a7:77:08:b6:05:53:e5:f4:d2:00:0b:d8:aa:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3A:06:74:FA:32:E6:90:A1:EE:3B:6F:2E:70:E9:8B:57:B3:6C:16
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:2c:8e:5a:9a:3e:c1:09:73:57:42:84:2b:b5:d5:7f:0c:
         50:bf:4f:3c:69:2d:20:01:5f:58:aa:c1:c2:e6:78:51:ce:40:
         77:9a:4b:fc:f0:f6:b6:eb:c8:86:de:8b:9e:8e:59:4a:a5:b0:
         01:2a:43:a2:53:16:20:6a:72:b9:be:97:6c:cc:48:95:c0:56:
         7c:72:0f:90:b5:10:de:02:81:95:e8:42:03:15:36:ac:08:9f:
         fc:55:6f:41:4a:24:84:0b:06:b8:ae:8b:b3:2e:41:13:e6:a6:
         c4:b3:c5:e4:d8:65:f4:fe:09:48:41:42:c6:78:b3:ff:60:e3:
         98:06:53:8f:44:5c:b6:0e:25:0c:b4:69:97:15:08:ca:f6:fd:
         aa:70:6d:03:91:4e:52:a6:54:88:6a:3d:17:fc:7d:40:e8:32:
         d2:84:98:98:34:0c:d6:03:6a:e1:10:24:de:78:21:4a:dc:c2:
         4e:53:5c:8e:71:0c:6d:59:c7:97:e2:f9:53:18:60:86:11:19:
         cb:bc:9d:8c:a7:a7:fb:55:57:f7:93:81:77:ed:cf:cf:29:0f:
         e4:1a:9c:03:ca:49:be:78:b1:9a:4e:70:fb:c4:21:c7:39:bb:
         ca:f6:f7:b6:05:bb:10:0d:c8:08:71:47:56:d9:04:da:63:70:
         58:1e:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:15 2026 by rpki-client