Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
File:                     C584C646CA5111EAB9696B0AC4F9AE02.roa (raw, json)
Hash identifier:          fPAkeNQdJZe5HT86HVD6ytSe29buDB2xdAiPtGBOOrU=
Subject key identifier:   DB:FD:1E:94:4F:27:B9:A7:B3:B4:6A:45:3D:AA:B1:00:68:0B:48:C5
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       095B
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
Signing time:             Mon 04 May 2026 20:25:30 +0000
ROA not before:           Mon 04 May 2026 20:25:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     23647
IP address blocks:        103.90.84.0/22 maxlen: 22
                          103.90.84.0/23 maxlen: 23
                          103.90.85.0/24 maxlen: 24
                          103.90.86.0/23 maxlen: 23
                          103.90.86.0/24 maxlen: 24
                          103.90.87.0/24 maxlen: 24
                          202.51.74.0/23 maxlen: 23
                          202.51.74.0/24 maxlen: 24
                          202.51.75.0/24 maxlen: 24
                          202.51.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: May  4 20:25:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f900ba-e74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:88:47:41:23:38:7f:d2:b9:3b:e1:bd:ee:4c:
                    85:6e:7c:ff:7e:14:65:67:ef:95:ff:96:2d:60:1d:
                    59:77:16:bc:ee:7f:02:87:6b:00:1a:dc:52:b6:b9:
                    3d:2c:08:a3:54:2b:aa:9c:bc:ed:5e:5c:f1:07:ed:
                    3b:db:07:0f:d9:5b:7a:d4:29:5f:5a:0a:d8:28:b4:
                    cf:bb:87:9a:86:f5:92:76:c0:8c:a8:a6:89:05:b0:
                    9f:52:13:06:3e:36:58:69:f2:31:ee:88:cb:f6:92:
                    8b:ab:c1:ae:3c:88:73:eb:66:95:bb:47:b3:e8:80:
                    e7:53:a1:c5:e1:1e:04:ea:10:61:a9:5a:33:b7:09:
                    be:27:b2:60:63:d4:4b:98:0a:5a:6c:ce:44:db:91:
                    28:70:dc:a2:e4:c7:83:fd:e6:4d:76:ea:6b:4b:e1:
                    ae:f9:28:e1:29:02:a7:0b:65:8f:00:64:16:71:ab:
                    f7:f8:42:34:4c:5e:cc:44:13:09:5a:ce:de:1c:c8:
                    01:8e:ce:c6:f1:5a:82:ee:d4:74:1e:aa:8c:7e:42:
                    20:3c:8c:28:fe:89:4b:5a:a2:91:26:51:b9:99:ff:
                    6b:2b:87:32:a2:c3:b0:e8:f3:23:02:c5:53:85:3a:
                    7a:54:34:ff:ac:c6:bf:c4:82:b0:2a:7b:61:d5:ee:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:1E:94:4F:27:B9:A7:B3:B4:6A:45:3D:AA:B1:00:68:0B:48:C5
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.84.0/22
                  202.51.74.0/23
                  202.51.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:4e:5d:45:d3:d2:bd:a9:a3:ec:da:d3:c5:aa:61:60:4c:
         8c:4e:2f:41:cc:d6:e8:33:f0:1b:82:15:d6:a8:84:2a:75:c1:
         33:b2:b3:ea:31:39:04:7e:82:fb:a2:43:53:43:7e:e7:62:de:
         05:98:48:8c:43:d1:30:3c:85:37:12:6e:ba:69:bf:16:0b:ec:
         f3:5b:2e:b0:17:c3:a4:94:b3:98:1a:74:2f:98:46:f3:43:6e:
         37:a4:e2:25:d6:85:2f:b8:85:a2:06:06:e9:63:c9:bb:bb:15:
         c1:58:81:7c:14:bf:7d:52:25:b2:ff:a5:12:b2:86:4c:65:3d:
         27:1b:98:b8:94:95:f4:0b:7c:22:9d:cd:98:a8:da:42:e1:7a:
         24:6b:de:cd:6b:87:7d:90:d1:b6:3e:4e:e5:f1:3c:2e:8e:a7:
         94:9d:76:df:0d:a1:f6:f4:79:fa:e0:29:22:df:20:8a:4b:ba:
         77:74:bc:88:be:31:1f:06:c3:69:45:41:b0:8a:47:31:22:39:
         f2:ed:49:e4:a4:48:d2:da:e1:74:d0:70:4e:24:b7:93:f4:84:
         20:fe:78:83:c8:50:1d:b0:c1:a4:1e:a1:1e:9d:f3:f1:9a:0f:
         32:1f:00:38:a9:e3:a1:81:a6:10:71:96:f5:1b:89:88:3b:41:
         37:a3:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:23 2026 by rpki-client