Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/1011982E326611F1A1041DA0BB833773.roa
File:                     1011982E326611F1A1041DA0BB833773.roa (raw, json)
Hash identifier:          tEuH5H2vH3q7ISjLZVqO5vmC55MpS6sj/MMaczDExM4=
Subject key identifier:   2D:23:26:8E:95:0B:86:44:3E:1E:44:4D:6E:46:2F:32:DE:06:8B:59
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       143A
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/1011982E326611F1A1041DA0BB833773.roa
Signing time:             Tue 07 Apr 2026 09:42:16 +0000
ROA not before:           Tue 07 Apr 2026 09:42:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139820
IP address blocks:        103.120.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Apr  7 09:42:16 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69d4d178-e8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:8c:f4:cf:19:82:b1:47:a5:9d:07:06:69:
                    f6:fa:20:1a:0f:79:14:b5:c5:97:4e:d9:d4:06:ab:
                    28:c4:f9:62:c3:70:8c:15:c5:f8:bb:84:76:ac:85:
                    e7:eb:72:76:13:b6:d3:40:37:60:82:1d:a8:50:28:
                    eb:b7:d5:e3:0e:c2:8a:ea:84:78:c4:66:19:d0:0d:
                    f3:76:49:a4:5e:bd:c0:9f:b2:39:b8:8c:ac:84:1c:
                    de:6e:5f:78:70:37:0c:82:9b:71:1f:a7:7e:92:40:
                    dd:a5:b9:59:ff:bb:51:60:fc:91:b3:e7:6d:fe:51:
                    ea:8a:c1:10:65:98:ae:45:ae:3a:5f:1b:24:36:c6:
                    52:a7:9a:42:04:17:c4:e5:b1:31:c5:82:84:aa:39:
                    68:8c:c2:24:80:dc:19:52:dd:e2:1b:61:bb:32:89:
                    4a:75:3b:91:ea:e1:8b:42:d9:8e:35:d3:60:bb:db:
                    75:72:55:cc:65:db:f3:c6:39:05:47:64:63:2d:77:
                    20:11:51:4e:02:0d:0b:84:d2:15:01:44:37:18:f4:
                    a8:0f:d5:c5:1b:06:12:a8:db:0c:92:64:d2:c2:2a:
                    8f:e0:ca:37:75:03:f7:4f:c6:22:c6:2c:31:9e:6b:
                    18:d0:e9:04:b7:f9:dc:a6:cf:a2:28:81:9b:f2:f3:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:23:26:8E:95:0B:86:44:3E:1E:44:4D:6E:46:2F:32:DE:06:8B:59
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/1011982E326611F1A1041DA0BB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:46:94:46:f4:83:06:d6:7d:7a:ba:80:fe:9f:02:70:db:
         6e:89:d8:49:4d:f6:bd:47:a2:1e:8d:3e:38:51:02:98:0b:56:
         af:ca:47:14:52:0b:ef:d7:c0:d6:a3:57:83:23:bd:fd:0f:ca:
         e8:9a:7f:57:12:2f:e0:5a:25:89:02:bc:db:6e:be:9b:9f:17:
         62:cc:a5:7d:db:55:ad:73:37:4b:df:c3:87:4f:20:75:0a:f6:
         fe:88:f0:bd:16:1a:c8:5b:42:6b:7a:f3:f4:f7:08:e0:12:8e:
         5d:2b:2e:7c:b7:3a:73:99:79:0d:83:50:5e:f2:60:12:40:bb:
         9a:5b:b1:4d:1d:1d:13:a4:67:17:70:5a:61:b9:86:03:78:21:
         9a:f2:e0:17:df:e2:f8:75:de:50:96:a1:4c:ad:b8:2c:21:df:
         b1:6e:9c:ca:b2:7a:18:5e:e5:31:16:47:63:9c:a4:fd:f5:e3:
         4b:8b:8b:c4:eb:ca:2c:88:52:9a:f1:ba:cc:ea:fa:78:fa:6f:
         8f:16:a4:a1:f8:64:96:98:4e:31:7b:0d:6a:f4:53:b1:66:ad:
         fe:60:c0:f7:2b:45:72:8a:6a:6b:88:f7:7e:45:dc:33:b6:49:
         a1:17:c7:bf:fa:a2:a7:ed:db:4d:70:7f:25:3a:7c:c2:44:d6:
         21:11:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:38 2026 by rpki-client