Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
File:                     90BBD1B6884C11EB88489B75C4F9AE02.roa (raw, json)
Hash identifier:          H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=
Subject key identifier:   B7:2C:6D:39:53:C5:9C:9B:F6:77:55:05:E0:43:0E:8E:30:65:57:35
Certificate issuer:       /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial:       07D1
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 22:29:40 +0000
ROA not before:           Tue 28 Apr 2026 22:29:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.162.82.0/24 maxlen: 24
                          2001:df6:1a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
        Validity
            Not Before: Apr 28 22:29:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f134d4-73c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:7c:aa:b8:eb:f9:2b:c1:55:7c:2b:96:61:
                    94:72:53:68:eb:e5:72:21:d9:33:50:ec:19:4f:79:
                    a8:e2:f7:67:77:17:b4:1c:18:52:bd:3c:28:50:b9:
                    d5:19:f8:75:63:a5:f7:7c:3f:39:59:42:10:01:ca:
                    a7:49:02:e7:98:72:16:03:5b:d6:08:c0:fa:c3:70:
                    60:27:82:45:d4:d3:2b:39:02:2c:64:9a:41:73:30:
                    cc:62:40:3e:e5:7d:f6:b3:f3:de:f9:12:c1:9b:26:
                    c5:f1:86:f9:ff:78:a0:28:14:96:12:67:dc:da:a2:
                    08:92:62:40:02:95:f0:f9:2c:4d:da:28:1e:a1:28:
                    5e:3e:63:71:dc:07:f6:c5:79:9b:d5:17:1b:b4:c7:
                    30:ff:ad:aa:a0:ca:01:a6:66:a5:ce:bf:7a:e9:5a:
                    ef:d6:cc:1d:44:53:b5:5c:fe:ac:0c:3d:81:77:f5:
                    11:1c:f2:83:8c:43:b9:d3:31:4b:62:cb:10:ab:8d:
                    f0:2b:f5:a3:c6:6d:d3:89:2b:53:70:e0:fc:ad:8b:
                    df:5a:86:dc:bc:e0:f6:7d:f6:88:18:58:f5:ff:ab:
                    53:62:7b:58:3e:58:62:6d:67:21:63:9d:7f:ef:2e:
                    4a:41:45:b4:89:a4:02:34:a4:15:8b:4c:f5:46:1b:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2C:6D:39:53:C5:9C:9B:F6:77:55:05:E0:43:0E:8E:30:65:57:35
            X509v3 Authority Key Identifier:
                keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.82.0/24
                IPv6:
                  2001:df6:1a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:58:13:84:ec:ff:50:aa:eb:0e:dc:b6:e7:3c:74:63:87:30:
         e9:42:58:8e:b2:53:2f:12:a5:7c:c6:05:64:19:be:68:1e:68:
         71:dc:1f:5c:be:f7:cb:09:68:19:59:ce:54:62:ad:72:34:4b:
         0f:41:32:bc:78:40:fd:8e:d7:2d:d8:15:5f:ef:8c:e1:cc:9e:
         59:11:21:90:d1:d0:be:6e:2f:4a:2f:1d:67:93:db:83:4b:2f:
         f6:c9:d2:40:1e:75:22:d5:b0:73:d9:10:77:cf:23:2d:26:9b:
         7a:a9:f2:7b:2e:e0:fc:3e:1c:01:8f:33:0d:47:ca:33:1c:ee:
         93:0d:dd:23:2c:ff:73:37:c1:3e:d4:e9:a0:af:8e:d6:35:00:
         2f:f9:b1:92:c1:a4:5f:09:b3:50:9b:94:5f:ce:70:51:91:ab:
         7b:45:d3:e1:ac:9a:7b:7d:71:4c:8b:19:f6:90:a7:cc:14:b6:
         24:0b:4f:e2:a9:2e:c1:ca:34:58:6b:66:6b:83:ec:23:03:87:
         74:17:89:85:3e:3c:3e:d5:e1:4a:67:bb:67:2f:88:7f:48:21:
         6b:92:36:6e:de:d6:ef:85:15:ef:46:89:88:55:fd:08:6c:63:
         10:a6:43:2c:72:fe:04:e1:42:42:8b:fe:a4:6d:a9:77:df:ed:
         dc:7d:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:36 2026 by rpki-client