Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa
File:                     B7E47C68C02511EC93BB8865C4F9AE02.roa (raw, json)
Hash identifier:          pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=
Subject key identifier:   EB:A8:BA:39:1F:CF:D2:25:EF:66:EA:6C:E3:C6:98:6E:D0:79:2B:21
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       0427
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 01:33:26 +0000
ROA not before:           Wed 29 Apr 2026 01:33:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139218
IP address blocks:        103.184.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Apr 29 01:33:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f15fe6-da94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:db:de:05:33:b7:1c:ba:dd:e5:b6:cb:74:
                    a7:14:a1:ba:12:62:ac:f0:fb:ce:2f:b1:bc:7b:b3:
                    70:c9:f6:98:2c:26:a6:99:34:f4:ed:d8:d5:8a:bb:
                    08:d3:41:a1:6a:ec:34:d2:89:48:b1:f3:20:2f:3c:
                    6a:c1:ed:e0:4f:88:26:43:dc:ee:ff:88:1b:c0:e4:
                    35:96:63:f4:06:d2:34:64:b7:10:9c:0c:34:6d:8f:
                    28:ca:52:88:f2:a4:5f:6c:27:f6:80:53:7e:87:01:
                    ae:cb:2e:08:da:09:e9:6b:26:60:c4:22:cf:25:2d:
                    df:c9:4c:07:40:4c:a1:4b:4c:ee:f9:b9:0f:fd:6b:
                    85:8a:dd:8d:16:f4:06:28:f2:42:2d:38:7e:84:91:
                    3d:35:b7:00:01:8d:a5:55:78:45:c7:7d:95:6f:fc:
                    28:5d:0a:5d:9c:8e:f7:69:6e:97:4c:43:41:4e:7f:
                    45:d6:32:f7:53:17:27:f2:e2:f2:e3:ed:c4:6f:14:
                    46:7e:28:39:c3:c0:cc:39:14:38:d2:11:f2:16:43:
                    ca:41:cb:dd:18:07:b8:a6:5f:73:8c:dc:1c:fa:b7:
                    08:21:5f:fc:d6:ce:01:dd:28:04:54:86:87:02:1a:
                    f0:44:41:5a:41:22:78:c4:7c:76:e8:f2:dd:01:8c:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:BA:39:1F:CF:D2:25:EF:66:EA:6C:E3:C6:98:6E:D0:79:2B:21
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:47:8c:61:e1:62:f3:e2:a9:5f:68:ff:fe:1c:24:c2:63:7f:
         1a:65:c5:f1:f6:8b:b0:5b:4e:d7:9c:52:c0:55:02:c8:5e:6d:
         a2:21:1a:f5:d9:60:05:17:f9:34:30:54:ce:98:6f:0f:a3:62:
         f5:87:61:01:50:84:b5:0e:de:e4:b4:41:09:11:93:0b:34:6d:
         db:34:1f:6a:7d:2b:70:fd:7c:56:6d:7d:01:95:5d:49:f8:89:
         79:9f:a1:cf:8b:d2:2a:0a:da:33:a8:94:16:01:19:91:c5:24:
         63:a6:06:90:92:cd:ac:4a:06:ca:67:9e:86:0d:f8:25:80:cc:
         1e:9b:42:8f:60:ee:42:40:9c:ac:64:32:68:7a:74:41:f7:d9:
         f6:eb:03:84:55:90:4b:80:45:1e:6e:e0:16:e6:a2:0c:ba:75:
         7b:9e:b2:e7:e7:19:8d:95:05:8b:83:14:2b:0d:d6:5e:a3:21:
         28:34:fe:88:da:1e:0c:93:e8:9b:fa:28:67:4e:cf:09:58:e9:
         73:c4:2e:7a:ae:61:b0:be:9f:18:c4:72:ac:27:6c:0c:7b:5b:
         b9:2e:18:c5:c2:0b:90:4b:d0:4b:a6:16:26:59:a7:8b:37:82:
         1e:1f:d3:0e:f6:95:53:a2:89:28:e9:65:06:58:84:e2:28:5c:
         a9:6e:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:19 2026 by rpki-client