Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa
File:                     66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (raw, json)
Hash identifier:          MyT7XofLYnzbUWOsIx3LwQVnAKb+WKaP6LQMJGUgR18=
Subject key identifier:   35:58:40:9D:25:B8:6D:57:40:7F:47:6D:50:95:14:D7:15:BC:B3:6B
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       05BD
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 23:30:54 +0000
ROA not before:           Thu 30 Apr 2026 23:30:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138934
IP address blocks:        103.137.88.0/22 maxlen: 24
                          2404:adc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Apr 30 23:30:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3e62e-7687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:99:78:d4:73:6c:23:cb:4b:fa:e0:de:36:
                    d2:a1:8c:5c:87:4d:7b:ae:23:db:cd:a1:46:dd:0e:
                    c9:93:22:8a:03:0b:78:30:78:56:d9:43:84:87:d4:
                    42:14:47:3d:6f:e4:4d:de:f8:70:0e:b8:6b:96:9a:
                    e4:1c:95:e5:53:1d:68:ce:90:13:c0:2e:45:80:02:
                    90:f6:b0:c6:5a:47:97:b9:fa:4a:5f:38:bd:ac:6b:
                    43:b6:7c:19:73:2d:e0:3e:4c:42:2b:93:21:ac:0f:
                    2b:5f:96:52:4d:13:79:27:a7:3a:0a:08:7f:64:68:
                    2f:1a:bc:27:9d:1b:f6:0b:d8:d8:cd:c5:c3:e5:2a:
                    e9:f8:45:5e:71:c1:8b:d9:0b:81:f6:4f:7d:8f:c0:
                    33:19:b2:04:2e:a0:82:95:96:66:38:c3:9f:05:43:
                    d5:fc:c9:7f:da:47:d4:82:7b:23:7a:ba:79:70:33:
                    03:8f:a4:b6:01:63:4b:56:25:d2:8d:ab:0d:d4:a3:
                    e6:81:97:78:f9:99:78:ac:87:c9:99:0a:94:24:b5:
                    7e:ae:c8:b0:85:94:6f:26:93:97:44:35:73:ef:6f:
                    2e:4d:5b:1e:5d:35:36:a7:56:5c:0b:81:7a:6c:99:
                    2d:83:0a:8c:da:75:55:ea:85:7a:18:97:4f:7c:95:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:40:9D:25:B8:6D:57:40:7F:47:6D:50:95:14:D7:15:BC:B3:6B
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/66CA9E0C0C5C11ECBD37E846C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.88.0/22
                IPv6:
                  2404:adc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:4c:cb:77:71:62:00:eb:7d:c3:6b:7f:78:ae:e2:ce:6e:
         99:a8:1a:a6:4d:aa:92:36:72:dc:99:bc:2b:71:e5:a2:a3:1f:
         16:e7:02:ec:24:1d:9f:e4:98:5c:3c:e7:b0:06:7f:c6:96:ca:
         6f:71:1b:78:d1:33:55:50:a5:93:8b:6e:2a:ad:57:5d:f6:f7:
         31:74:06:05:34:57:5d:b2:1c:17:0d:0a:af:dd:91:5a:f8:a9:
         70:f2:8f:37:ed:04:3d:ec:31:b2:de:db:8f:85:69:10:e5:65:
         15:ee:6c:c5:5d:70:7d:0f:67:f2:40:1f:37:f9:03:7e:4b:6b:
         21:78:bc:92:49:cb:e8:44:91:82:3e:6e:f4:48:27:dd:c0:9f:
         d2:4e:69:93:a2:07:bb:0c:c5:93:54:16:da:f7:4e:93:de:96:
         a7:c7:1f:be:75:1a:de:08:be:94:3e:4a:18:3d:5d:44:e8:45:
         a5:14:b7:82:fd:44:79:f6:b7:70:05:e9:c5:11:4e:e3:e6:50:
         c8:36:22:f5:eb:e5:ea:7c:43:c7:a4:ee:bb:fd:aa:55:20:39:
         05:28:d7:fe:46:79:7a:7f:6c:4f:f9:8f:3b:97:91:89:61:0f:
         8e:da:3d:e3:bb:76:2e:d2:7c:05:60:cb:e1:14:e2:58:01:9d:
         58:eb:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:33 2026 by rpki-client