Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa
File:                     6B5723D8F89F11ED8F29921CC4F9AE02.roa (raw, json)
Hash identifier:          oThRjVHDmoFWRnFR0NxIEVr1V8eRjzhqrwR3MFXCY2U=
Subject key identifier:   9C:CF:CE:DE:60:AC:C5:93:50:6C:A9:A5:71:38:66:51:3B:B4:50:A5
Certificate issuer:       /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial:       022E
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 03:36:02 +0000
ROA not before:           Wed 29 Apr 2026 03:36:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141004
IP address blocks:        103.131.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
        Validity
            Not Before: Apr 29 03:36:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f17ca2-9233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:51:89:2e:12:a4:ed:56:b2:cd:85:d9:78:
                    c6:b1:0f:df:f8:1e:2a:3a:4c:f0:fd:e8:27:28:f2:
                    05:27:03:9d:95:e8:b2:cd:ae:48:27:34:6b:78:6a:
                    7f:2e:91:0f:f2:6d:41:36:b4:3e:b4:1c:7a:2f:db:
                    ca:09:87:57:68:9e:28:27:48:3b:2e:62:51:a6:9b:
                    ba:d0:6d:c1:3d:ee:3a:d6:7f:df:de:8f:ea:2f:7f:
                    5f:5f:8a:fc:ab:33:ec:62:5c:50:cf:54:bc:1e:02:
                    65:09:a5:f6:63:00:3c:72:6a:31:28:4f:35:53:94:
                    b2:20:92:62:ed:bd:e1:49:e8:4e:87:75:03:d8:8b:
                    e1:b7:09:7f:d7:33:a7:39:a6:7e:06:85:6f:2d:23:
                    64:15:09:aa:33:b4:6e:ee:cd:77:15:96:94:e6:53:
                    b8:60:87:b3:cf:dd:c4:f5:17:8f:56:b6:8e:98:c9:
                    51:ba:dc:2b:cb:36:5f:ae:65:bd:3d:16:d2:d8:4f:
                    40:15:fa:b5:83:17:6e:50:a7:94:43:ee:d6:d2:9d:
                    c8:fc:e0:41:32:6c:0a:ea:43:cf:dd:8e:6d:21:98:
                    a4:d9:c7:ba:4e:7d:4c:74:46:6d:14:23:da:22:e0:
                    11:36:b7:0a:33:54:77:10:9a:ed:a3:3f:ca:7b:9e:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:CE:DE:60:AC:C5:93:50:6C:A9:A5:71:38:66:51:3B:B4:50:A5
            X509v3 Authority Key Identifier:
                keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:67:09:00:15:18:9b:c0:d4:11:db:9a:02:f6:59:69:a2:
         28:e5:d4:fb:b9:ae:1b:80:2b:84:32:49:b0:bd:a9:d9:c2:01:
         ee:e0:1c:51:57:e3:4d:bb:88:2c:f0:a4:53:39:2f:7c:23:74:
         5f:de:f0:4b:58:80:84:af:98:e1:2d:ea:a9:f0:90:dc:eb:48:
         8f:7e:97:2f:2c:4b:55:09:a0:05:2c:1d:0a:71:be:b8:af:0f:
         f3:c5:e9:e2:3b:3e:ea:6b:4f:9c:92:0c:07:c4:5f:d4:77:f8:
         77:49:5c:f8:74:16:af:bc:09:1a:1d:60:fc:38:a5:8a:ba:be:
         aa:e9:80:33:8c:c9:ed:f6:d0:eb:d8:f1:fd:27:73:eb:4f:2f:
         df:5e:7b:61:32:17:5a:03:a2:a5:c8:32:42:61:40:57:c0:c5:
         d4:65:1f:a0:2d:fc:5d:5d:d5:5b:3a:c2:a2:76:fa:44:16:b6:
         3c:10:e0:6d:4d:05:a8:2f:76:50:44:f9:9a:42:ff:61:d8:d0:
         74:98:0e:bc:51:f4:2d:0a:b1:ff:c6:b3:28:cb:9a:0f:b7:c1:
         0b:32:81:73:d8:2a:bd:8f:60:d5:e5:2e:88:db:8f:db:ac:f5:
         76:ad:e8:01:d8:bd:47:78:24:70:62:9d:a0:a6:53:86:ea:96:
         a5:73:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:54 2026 by rpki-client