Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/E1E6EE7E43C511F1962A06A4A0833773.roa
File:                     E1E6EE7E43C511F1962A06A4A0833773.roa (raw, json)
Hash identifier:          cmPIAYwYsoNNbo5mzt2yvqCGk1BOlEpaPp/Kckub1nc=
Subject key identifier:   7F:CB:02:6E:A4:4C:6A:88:AE:8E:0A:A7:14:99:2E:73:EE:B6:89:CC
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       0470
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/E1E6EE7E43C511F1962A06A4A0833773.roa
Signing time:             Wed 29 Apr 2026 12:21:00 +0000
ROA not before:           Wed 29 Apr 2026 12:21:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150732
IP address blocks:        103.170.230.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
                          rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266, serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Apr 29 12:21:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69f1f7ac-a3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:c2:e5:80:9c:8c:57:30:e3:eb:e0:10:8c:
                    50:48:1a:91:b0:e1:cc:ad:d5:2c:80:aa:0e:b8:9c:
                    56:83:6a:f5:24:88:d1:c1:61:3c:43:67:f8:f0:22:
                    28:e9:75:55:ee:09:e1:12:9c:04:e7:29:24:3a:83:
                    a0:a7:45:fe:6f:e0:76:fb:e8:2c:fb:41:a4:0a:74:
                    de:b8:f1:3e:3f:4d:0a:91:41:43:b8:c7:d9:19:3f:
                    33:87:97:ca:93:8c:e6:11:dd:c9:74:0d:9a:4d:c4:
                    ba:d4:c3:fe:89:e7:da:48:5a:36:65:27:01:12:8e:
                    67:3f:25:b3:53:78:c1:c3:ff:ac:4c:0e:8f:13:d9:
                    0c:05:fe:87:41:e8:87:30:8e:72:2c:e8:42:1d:97:
                    f2:66:74:ff:da:52:43:6f:3d:17:d5:d3:f4:02:73:
                    f8:61:b8:53:bc:80:23:88:bc:a5:15:d2:9e:55:cc:
                    1a:7f:75:04:0e:51:e7:07:81:ad:ec:2d:1d:f7:6c:
                    b1:0a:7c:c5:8a:2c:bb:58:66:69:40:c3:17:62:cf:
                    90:98:ae:c7:83:0d:fb:d3:ea:93:b4:51:5f:a7:3c:
                    b6:b4:1d:3c:73:c4:51:8b:a2:7f:73:74:9d:ff:eb:
                    dd:66:f0:61:a4:75:57:68:bf:92:52:78:8b:c4:46:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:02:6E:A4:4C:6A:88:AE:8E:0A:A7:14:99:2E:73:EE:B6:89:CC
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/E1E6EE7E43C511F1962A06A4A0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:e2:33:d8:eb:22:72:59:b3:d1:0d:21:06:26:1c:ce:61:
         5e:84:51:90:c0:c0:94:7f:e1:20:e8:b2:cf:7a:59:69:36:dc:
         8c:55:6c:7a:e1:cf:7f:d6:9a:e7:4f:89:bb:ae:40:b0:a7:d2:
         01:f5:02:68:93:c4:a5:e7:f5:4e:ec:25:95:d6:64:98:fd:fa:
         49:a5:5e:67:a8:4b:3a:9d:47:a7:4f:10:13:e8:1b:bb:1f:11:
         45:22:3c:23:f7:64:ee:e2:a5:2c:4f:ad:d3:0f:e1:d7:8a:1e:
         cb:f5:ee:d3:b6:ea:f3:7c:65:f7:96:94:c7:fa:37:47:ca:f0:
         78:64:a1:37:6f:53:df:d5:d1:8f:bb:ca:21:44:ec:cc:cd:4a:
         35:36:8b:7a:f4:44:2b:8d:3e:92:35:a0:7b:5d:90:51:f5:87:
         3d:fe:b3:ae:86:7b:81:2a:3e:10:d2:61:3d:dc:d2:69:86:6b:
         df:f3:72:9b:d3:56:df:18:c3:b5:f1:c7:a8:27:58:6f:57:9c:
         b7:14:32:72:35:c4:89:f4:31:78:53:4c:01:ff:69:7f:95:41:
         69:85:9c:06:96:85:09:7e:a3:5e:26:9e:f5:90:79:06:bc:18:
         57:b9:8a:9e:c9:a2:21:fc:07:22:d9:a9:84:6d:68:b7:83:f9:
         d0:0d:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:09 2026 by rpki-client