Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa
File:                     9E9EC628D9C511EC81B54F47C4F9AE02.roa (raw, json)
Hash identifier:          4V/uXg1Hzl2+xIxX70vDwjRaqN/UDTZ6oLov6TMPRqA=
Subject key identifier:   2D:17:21:73:54:F0:77:62:22:42:72:E9:35:40:43:6F:6A:73:EC:F5
Certificate issuer:       /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial:       03D4
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa
Signing time:             Wed 03 Jun 2026 06:31:13 +0000
ROA not before:           Wed 03 Jun 2026 06:31:13 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.169.90.0/24 maxlen: 24
                          103.169.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
                          rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
        Validity
            Not Before: Jun  3 06:31:13 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a1fca30-e1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:1c:f2:4a:7b:b6:19:f2:9e:21:d9:1c:85:
                    dc:62:f8:53:7f:0a:40:ac:e8:d4:1e:22:06:a3:7c:
                    2e:d0:92:16:95:c2:d4:8e:6a:88:92:bf:ec:d4:8f:
                    93:db:47:ab:52:eb:e9:8d:8c:62:ba:ef:28:97:34:
                    ca:bd:e5:03:0f:8d:99:2b:d3:6f:76:72:49:26:40:
                    2b:cd:1c:7f:5c:07:61:a9:ec:23:46:94:64:c9:b1:
                    7c:d1:ef:5c:14:72:75:3b:a3:de:5c:6b:c6:1b:92:
                    40:0a:c2:91:1d:1f:a7:49:af:4c:13:57:d6:61:e4:
                    7b:4c:4e:7c:b0:86:89:30:b4:a3:e3:dd:6f:a2:63:
                    a5:8d:d9:6e:d0:8a:97:d3:36:30:79:a6:f7:13:ea:
                    4c:75:f9:f2:80:62:d5:f6:56:d4:62:11:f7:14:87:
                    59:8d:11:38:24:82:3e:14:53:c8:5d:17:a6:68:cb:
                    5a:f4:83:c0:74:7b:e6:58:cd:5c:3b:37:b1:34:bf:
                    fe:ab:88:19:4b:e2:4d:68:22:02:15:8c:7d:1b:a4:
                    76:38:35:24:cb:30:e0:de:9e:d4:d8:24:23:76:a3:
                    d9:da:8d:ce:00:0c:4a:73:9b:d1:77:d4:b5:38:e9:
                    6d:22:f5:8a:bb:90:bd:3f:91:07:3f:f7:ad:cd:d0:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:21:73:54:F0:77:62:22:42:72:E9:35:40:43:6F:6A:73:EC:F5
            X509v3 Authority Key Identifier:
                keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/9E9EC628D9C511EC81B54F47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:0a:16:10:32:3b:e1:93:af:9b:69:6f:40:f3:f0:67:fe:
         68:0c:12:c6:4f:80:e2:d2:df:b4:b9:57:33:75:ea:04:75:7f:
         02:f4:ac:c6:64:1e:05:2e:9d:a1:b9:5f:f0:de:92:c0:cc:b6:
         6c:07:71:1b:8c:16:f9:3f:52:6b:e7:12:44:c5:8a:0c:e4:d9:
         ea:1e:7a:36:36:d5:da:ea:3e:f4:81:55:61:ef:2a:d6:02:17:
         8c:75:f0:42:23:d4:3a:30:6d:61:b5:e9:71:0d:33:fd:f8:4e:
         b4:4c:0d:c5:dc:67:5e:49:4c:88:11:42:31:b2:a0:91:ae:40:
         f0:68:af:e1:83:56:7c:ff:ae:d9:6f:f1:8e:fb:e0:89:ea:ab:
         20:68:1a:6b:8c:5f:54:f3:55:71:45:0e:f5:4b:47:63:5e:8d:
         1a:0a:3c:e6:4f:2c:b6:2a:5d:53:d5:8e:a5:79:78:7f:93:a4:
         d8:fa:26:c0:52:8b:84:09:3c:56:10:f1:a8:4a:d1:0d:81:e4:
         ed:44:fc:c4:b3:51:84:60:23:d8:ca:fa:65:7e:15:98:4e:cb:
         32:c2:39:60:ad:33:a0:68:65:33:d8:79:fb:32:64:16:25:bc:
         a8:04:11:06:06:87:08:ae:c8:56:5d:47:0f:7d:f6:83:b5:d4:
         da:7b:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:47:43 2026 by rpki-client