Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa
File:                     F2CE31B608CA11F09E81487CC4F9AE02.roa (raw, json)
Hash identifier:          03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=
Subject key identifier:   1A:06:CA:4E:C6:D4:36:D3:9E:84:B5:3D:19:8B:AD:52:42:E4:42:67
Certificate issuer:       /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial:       026C
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa
Signing time:             Sat 11 Apr 2026 02:34:09 +0000
ROA not before:           Sat 11 Apr 2026 02:34:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.81.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
                          rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
        Validity
            Not Before: Apr 11 02:34:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69d9b321-285f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:ec:cc:03:0c:48:75:a1:bd:ac:49:7b:04:
                    49:b6:0c:f6:d8:fa:69:37:bc:df:c8:65:92:52:bc:
                    96:05:60:9d:ad:57:5f:56:e5:7a:26:ed:93:52:91:
                    b6:90:c0:55:c8:74:c1:e7:f5:ed:21:8b:53:64:bf:
                    23:2b:90:be:fc:92:a3:c4:a5:95:19:37:9d:20:eb:
                    b6:d5:4d:65:33:7e:44:89:a8:7c:e1:ba:84:3c:79:
                    31:0b:86:4f:f1:f5:47:19:75:e0:ee:c8:82:df:a2:
                    55:0e:ec:36:57:b5:ee:e3:5b:6e:90:b7:41:49:ed:
                    53:60:39:7b:e9:2d:9e:bf:9a:45:47:9e:d5:8e:98:
                    26:07:6b:c0:c2:dc:af:3e:82:22:88:27:72:09:34:
                    d3:11:1a:ea:18:d4:ae:aa:33:eb:a1:73:9c:c6:c7:
                    d5:5d:80:8d:ad:b8:15:95:8d:1e:9f:1d:d9:b4:7d:
                    4b:3c:17:d0:15:3d:53:b4:46:a8:19:e6:93:cb:a4:
                    e2:4d:e1:23:c9:3b:db:86:16:75:2d:bf:6d:5e:de:
                    91:99:2b:a4:f6:54:11:6d:a9:1f:9e:75:ad:6a:3e:
                    fa:c6:16:35:1d:ec:6a:ab:e6:2b:5b:64:cc:41:21:
                    48:43:16:b8:81:4f:48:d5:45:93:6e:f0:b7:a1:1e:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:CA:4E:C6:D4:36:D3:9E:84:B5:3D:19:8B:AD:52:42:E4:42:67
            X509v3 Authority Key Identifier:
                keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:a7:03:31:71:cb:35:3f:56:35:0a:18:6f:2a:1c:8b:d2:
         ff:f8:44:d2:19:74:fd:4e:93:ab:d6:44:c4:02:e3:9b:dc:21:
         0b:b8:5d:d1:b9:e3:28:25:95:93:6e:84:53:b3:b0:c4:87:f6:
         6f:12:69:83:08:c8:34:6d:05:1a:11:b2:94:01:08:ce:7d:d2:
         93:cd:2e:10:b9:1b:5a:e4:3b:c2:4f:07:b7:e3:a8:07:6c:06:
         c0:51:13:2d:86:e2:1c:7a:8a:4d:9f:6a:61:a9:d8:78:eb:8e:
         3b:43:18:64:f4:72:e5:c2:87:9f:72:64:c1:d0:e3:53:fa:27:
         ea:d6:66:ec:7e:f1:c4:9a:40:2c:07:65:50:a2:b0:0d:2c:e2:
         0a:b6:44:8f:97:7c:5d:9e:da:07:ca:27:12:9d:4b:15:32:05:
         25:aa:22:d4:57:1f:7c:e7:88:90:f7:9e:13:a8:92:74:a0:87:
         1a:5d:62:07:40:2c:37:6b:0e:ef:5c:cd:25:84:f8:c6:24:49:
         81:53:d0:44:6d:45:16:4a:39:b3:e1:53:cb:48:f2:79:24:6e:
         d3:3e:59:ba:66:6f:33:82:75:4a:1a:66:8d:6c:d5:07:3b:69:
         3d:fe:20:4d:d0:54:75:19:3e:79:9c:a8:cd:67:bd:e1:c2:2d:
         d4:21:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:11 2026 by rpki-client