Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
File:                     99C51F96DA6D11EC86CE4D59C4F9AE02.roa (raw, json)
Hash identifier:          1QnIPwxuY/dfkR4MhbghggmusXDfW8Mw8GOCC4ieNXY=
Subject key identifier:   94:F8:17:3E:8B:D5:86:B4:0F:F1:02:B0:C8:FE:2B:36:B5:21:32:92
Certificate issuer:       /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial:       03B1
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
Signing time:             Sat 09 May 2026 01:31:12 +0000
ROA not before:           Sat 09 May 2026 01:31:12 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149817
IP address blocks:        103.187.8.0/24 maxlen: 24
                          2001:df0:b3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
        Validity
            Not Before: May  9 01:31:12 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fe8e60-4d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:91:ee:3b:25:e8:cb:d3:13:88:22:47:dd:
                    0f:c0:31:b2:47:29:a3:f9:31:1e:97:f4:b3:f2:fd:
                    49:3d:e6:88:bd:34:18:12:eb:a7:98:42:89:87:41:
                    ca:2c:32:c6:17:4a:4e:3f:4c:f3:a3:eb:91:bc:d3:
                    39:50:39:b6:16:f6:77:ad:58:36:4e:5b:6c:c9:61:
                    99:e7:01:a6:b6:74:4b:dd:06:e3:0d:c0:f4:9e:10:
                    d2:2c:a4:45:f5:3b:af:35:6d:62:f7:01:ff:37:4b:
                    64:8c:fd:98:bb:0b:d9:14:ca:ac:01:76:49:2f:1a:
                    94:d8:62:72:3d:fc:33:5d:7f:48:87:0e:1d:1b:9b:
                    30:73:cf:27:e1:af:58:55:91:30:14:83:96:19:a6:
                    f3:42:9c:81:ea:02:62:6d:f0:8e:ce:02:3d:11:51:
                    7c:18:8f:3c:75:e5:42:5b:07:df:d8:84:96:d7:bb:
                    87:cf:44:08:fb:8c:e2:a3:15:6c:a7:1a:03:73:36:
                    fb:02:c3:80:8a:44:db:56:dc:88:85:e2:bc:86:4a:
                    70:1f:f0:e9:f5:6c:a0:28:18:b9:42:15:b3:6f:fb:
                    f0:87:dd:18:36:2b:bf:4a:e4:47:1f:49:3f:d3:ef:
                    ba:72:e5:26:f4:4c:b2:fd:5c:37:fb:c1:56:aa:c5:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:17:3E:8B:D5:86:B4:0F:F1:02:B0:C8:FE:2B:36:B5:21:32:92
            X509v3 Authority Key Identifier:
                keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.8.0/24
                IPv6:
                  2001:df0:b3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:1f:00:90:d4:a1:31:4c:e8:5e:67:d1:7e:bf:aa:ba:2b:
         be:0f:ac:da:4d:49:67:61:d1:10:fa:02:5d:94:e6:21:c4:9a:
         25:52:95:6c:42:32:a3:b9:59:c5:0f:cb:6b:c0:8f:77:9d:7b:
         ef:1b:3c:0c:a0:aa:ca:e8:21:5f:c6:03:f3:1f:c4:dd:e8:05:
         45:aa:ce:d9:b4:f1:eb:be:7a:9e:51:cc:54:f5:2a:16:ed:22:
         4d:d7:9e:4e:20:bf:9f:05:85:5a:c3:ac:88:b2:c4:0d:d0:3c:
         70:bd:7a:2d:38:5d:8b:f4:53:55:17:da:ca:50:54:05:5d:0f:
         d0:5a:70:8d:35:9b:e6:a9:8d:3f:00:5e:ce:a6:73:e9:36:68:
         f6:5b:74:da:67:3c:91:46:be:79:80:a0:eb:16:26:0c:77:2a:
         fb:bc:9f:d5:90:36:1a:4c:25:e1:76:51:c3:0b:88:9e:0e:13:
         68:ba:77:62:d1:ef:93:16:0c:d0:57:fb:54:cd:4f:79:d1:8a:
         38:1b:60:a3:20:ab:f0:e5:08:91:c0:5d:ce:78:6f:47:ad:c5:
         ed:ff:65:a2:b5:10:9e:e3:26:81:47:48:ed:71:c4:51:20:81:
         78:83:20:5b:91:4e:04:aa:c1:55:10:76:77:e9:57:56:eb:ce:
         fb:48:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:32 2026 by rpki-client