Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa
File:                     108D99AC3E6311F1A067C8A3CC833773.roa (raw, json)
Hash identifier:          /JQEBfM1zZrqYFAT+lEkN7EgquebMH9d44BeOs81UzU=
Subject key identifier:   F5:D3:39:11:E7:BF:C3:37:CF:B5:8D:71:1A:98:32:C4:E3:E5:56:78
Certificate issuer:       /CN=A91E64F1/serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Certificate serial:       02
Authority key identifier: DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa
Signing time:             Wed 22 Apr 2026 15:51:03 +0000
ROA not before:           Wed 22 Apr 2026 15:51:03 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138910
IP address blocks:        163.128.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
                          rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E64F1, serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
        Validity
            Not Before: Apr 22 15:51:03 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e8ee67-d5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:20:53:cf:9c:07:1d:fd:52:f9:aa:30:1c:
                    ee:64:1a:24:a0:5b:ec:a7:40:49:de:ac:b5:09:2c:
                    2d:e9:95:ac:68:f3:59:a3:d1:da:2a:78:d1:06:60:
                    3b:eb:42:4a:cc:34:35:9f:87:33:a0:37:0d:7d:a2:
                    df:9b:d4:13:67:93:cf:b8:51:3f:e9:3b:41:9a:1e:
                    81:22:84:1c:fa:61:bd:30:0f:2d:2e:b2:d8:53:98:
                    93:72:70:8b:8f:dd:ba:1b:ea:a5:a2:e6:aa:16:79:
                    c2:ac:93:f9:93:f8:46:20:09:09:9f:6a:cb:61:6f:
                    71:f2:3b:85:0d:13:d1:79:5f:fa:41:f0:f8:4e:c8:
                    40:f4:a0:58:01:cc:82:d1:75:3c:9e:5a:f5:ec:51:
                    7c:c8:2f:9c:c8:e3:cb:b8:be:3b:f4:19:ab:c7:f5:
                    d7:df:a5:a9:8e:9a:51:94:21:0f:69:4b:c2:7f:0a:
                    af:9c:ef:6e:30:f6:79:89:7c:d0:84:3d:ce:f8:1a:
                    91:8e:c6:1e:7b:32:fa:e8:86:b4:e8:f4:b9:b9:e9:
                    77:08:75:d4:29:79:28:51:df:be:aa:74:90:e1:03:
                    4a:ba:c9:5f:93:10:2f:ef:f1:e3:6a:6f:90:23:98:
                    ee:e4:83:5a:d0:a7:54:6c:6f:15:17:d0:32:bf:c7:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D3:39:11:E7:BF:C3:37:CF:B5:8D:71:1A:98:32:C4:E3:E5:56:78
            X509v3 Authority Key Identifier:
                keyid:DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:6b:51:5e:ba:58:d1:72:52:68:28:f8:a1:99:18:be:af:
         9f:27:82:2a:00:10:22:91:ea:83:fb:4d:37:d4:3f:9d:8c:67:
         98:72:f2:2d:30:be:2c:74:39:d3:10:f7:97:03:46:d6:22:40:
         e7:a7:b0:44:f7:21:92:5d:7b:4e:4c:02:73:09:74:b8:96:fe:
         e4:da:3d:70:bf:99:63:14:b7:20:d9:d4:3f:73:20:b4:20:81:
         c7:b3:3d:06:a2:fc:2e:00:19:39:70:e8:85:98:03:01:ba:a3:
         54:89:89:6d:f6:13:86:ac:4f:0d:b2:2d:2f:ae:9c:e6:ad:54:
         2d:65:b0:59:a7:d2:f4:a8:28:ef:ca:08:30:02:c4:4f:93:7b:
         59:f3:c0:92:67:5f:ed:b1:1d:ef:49:6c:97:58:31:19:a3:26:
         59:f8:9d:6f:0a:19:67:4e:a8:e9:c8:fb:22:18:97:5f:e0:55:
         a8:c1:99:84:aa:ae:22:aa:d2:bd:ab:e8:8b:4a:50:77:bd:10:
         4b:22:e6:77:06:bb:3d:7b:d3:a8:3d:c4:e6:ba:11:17:c3:dc:
         aa:88:12:97:26:c5:71:b8:56:f8:08:e3:59:67:fd:52:0a:16:
         54:8b:80:4d:24:30:dc:3c:d9:88:d4:d2:cb:6c:78:9f:9f:46:
         a3:30:78:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:29 2026 by rpki-client