Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa
File:                     B69B54D43F4311F194710EE29D833773.roa (raw, json)
Hash identifier:          IrlTrvW4nCk65/vfAs74/1SLq8xj6MgKVPmYM/ug71g=
Subject key identifier:   90:2A:47:25:E3:80:60:7D:BC:CE:67:2E:56:C4:BB:DC:F5:68:0C:5B
Certificate issuer:       /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial:       0707
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa
Signing time:             Thu 23 Apr 2026 18:54:17 +0000
ROA not before:           Thu 23 Apr 2026 18:54:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142050
IP address blocks:        103.165.186.0/23 maxlen: 23
                          103.165.186.0/24 maxlen: 24
                          2407:4d40::/32 maxlen: 32
                          2407:4d40::/48 maxlen: 48
                          2407:4d40:1::/48 maxlen: 48
                          2407:4d40:2::/48 maxlen: 48
                          2407:4d40:3::/48 maxlen: 48
                          2407:4d40:4::/48 maxlen: 48
                          2407:4d40:5::/48 maxlen: 48
                          2407:4d40:6::/48 maxlen: 48
                          2407:4d40:7::/48 maxlen: 48
                          2407:4d40:8::/48 maxlen: 48
                          2407:4d40:9::/48 maxlen: 48
                          2407:4d40:a::/48 maxlen: 48
                          2407:4d40:b::/48 maxlen: 48
                          2407:4d40:c::/48 maxlen: 48
                          2407:4d40:d::/48 maxlen: 48
                          2407:4d40:e::/48 maxlen: 48
                          2407:4d40:f::/48 maxlen: 48
                          2407:4d40:10::/48 maxlen: 48
                          2407:4d40:11::/48 maxlen: 48
                          2407:4d40:12::/48 maxlen: 48
                          2407:4d40:13::/48 maxlen: 48
                          2407:4d40:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
        Validity
            Not Before: Apr 23 18:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69ea6ad9-6d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:ae:bc:e4:cc:b0:7d:a9:e0:3b:cc:d7:7e:
                    03:ea:de:71:cc:ac:f7:eb:ea:da:52:f3:28:7c:d4:
                    b9:a4:f6:4c:ba:e1:e7:3f:7b:88:41:c2:9b:7b:5a:
                    86:f9:7e:6f:cb:8d:24:ef:11:a1:90:3e:c0:d4:8d:
                    99:8b:33:6f:c0:3b:a3:29:18:57:43:f9:8d:b4:aa:
                    0e:b6:69:47:04:c3:b5:e5:ce:48:b1:4c:8a:93:05:
                    99:46:f2:c0:a0:3f:32:d3:82:ab:e8:f0:9a:25:6d:
                    f0:df:6e:89:00:dd:56:88:a2:a9:57:de:fe:bb:fe:
                    62:e8:bc:4b:c6:3a:a5:aa:1d:f5:55:96:77:67:5d:
                    4f:32:83:5d:02:56:b6:6f:02:a7:53:6a:77:1a:5f:
                    0c:87:73:36:94:02:b3:af:a4:d6:2c:ec:6c:2e:ba:
                    8f:c8:62:15:75:8f:5b:30:a3:e9:a2:e4:f1:6d:c1:
                    ef:5c:06:eb:2a:ff:32:b8:b0:1f:fd:ae:4d:1c:77:
                    4b:b9:19:50:0d:89:68:70:47:b3:a0:33:ab:02:ed:
                    f8:53:5e:58:90:1c:d0:70:f7:9a:ee:7e:8f:b0:2d:
                    58:e3:e4:6e:44:79:c9:44:c2:38:ff:ad:a4:5f:b4:
                    ed:72:4c:a0:38:6b:08:14:92:72:e3:8b:40:2a:7d:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:47:25:E3:80:60:7D:BC:CE:67:2E:56:C4:BB:DC:F5:68:0C:5B
            X509v3 Authority Key Identifier:
                keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.186.0/23
                IPv6:
                  2407:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:f3:92:a4:fe:8c:b9:6c:af:92:cc:ba:2d:c8:d3:09:d9:
         c2:95:a1:4e:1b:29:dc:07:95:b0:43:ae:f1:a0:71:49:02:b5:
         68:b6:ec:13:70:b3:74:72:61:c5:bc:c1:40:9c:7a:e1:d4:92:
         b4:79:ae:bc:03:5e:f0:58:bf:55:8e:e2:22:4c:50:81:94:e4:
         8d:f5:8c:05:9a:66:79:8e:2b:f9:aa:42:93:31:08:ae:ea:19:
         7d:7d:c2:30:6f:46:cd:04:96:e3:3e:19:fb:05:b6:35:84:f9:
         c4:3f:ed:96:85:5c:4d:b0:39:e3:8d:9c:3e:7f:6a:c1:3b:87:
         1d:31:44:ff:ff:5c:cc:55:7a:1e:23:1e:f3:c1:30:a0:7f:a1:
         d2:6a:04:2e:32:9f:85:8f:2d:0a:f0:73:e3:0e:80:7b:33:0e:
         1a:46:0d:ea:e4:e6:cf:f6:57:5b:61:bc:a3:28:ba:9e:25:64:
         e2:18:a2:de:5c:83:ba:23:19:a9:21:ed:41:72:0e:cf:80:95:
         89:8f:6f:e9:1b:fc:70:0e:ed:a6:d9:a4:7e:b2:10:54:d8:37:
         7f:0a:c6:21:3a:7c:95:92:6d:de:fb:ca:c3:1b:a9:de:d5:3d:
         d1:19:cd:05:fb:1b:04:61:e1:16:4a:c9:1e:d6:ea:3c:47:07:
         26:e7:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:21 2026 by rpki-client