Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa
File:                     B0790AC83AB511E9A79AA42DC4F9AE02.roa (raw, json)
Hash identifier:          zaS5mzK/IyBJHAKDC1c+q1bnUd4SwxYZrRdM7KycEiU=
Subject key identifier:   A8:1D:FC:55:87:92:4C:62:59:DB:FB:2C:6A:74:98:8A:A2:70:05:14
Certificate issuer:       /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial:       113D
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa
Signing time:             Sat 04 Apr 2026 17:21:27 +0000
ROA not before:           Sat 04 Apr 2026 17:21:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     5
IP address blocks:        103.134.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
                          rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4413 (0x113d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
        Validity
            Not Before: Apr  4 17:21:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69d14897-eb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:9e:4b:f8:e8:a3:54:c2:77:e7:21:15:f8:
                    e6:71:17:ff:76:89:2e:47:62:a3:64:49:5b:18:05:
                    9d:a3:4d:87:d6:4f:22:87:83:d0:2b:70:34:16:76:
                    55:88:8b:81:d1:9d:d3:3f:21:fd:ad:5b:66:bd:8e:
                    9c:b4:12:16:af:e2:4e:23:f4:f4:46:bb:b5:bd:9f:
                    ea:1e:d0:f9:ad:d6:8d:e1:8a:bc:8b:a9:48:0e:db:
                    44:f8:79:14:4b:91:fa:9a:68:07:aa:e9:55:96:91:
                    1c:31:71:cc:86:8e:8b:37:11:5c:fa:74:98:cb:4c:
                    51:1f:53:55:1a:d2:d7:a2:af:2e:82:54:8f:a7:cd:
                    e0:38:7b:e5:64:14:de:69:67:6c:d5:3b:b5:ac:c4:
                    e0:53:d4:a2:26:35:cc:15:da:fc:cf:8a:d8:3b:27:
                    ca:f7:66:91:d2:c5:69:b4:a6:2e:46:76:ae:3b:35:
                    15:03:dc:b0:08:1d:cd:fb:49:f0:8c:fe:0b:30:cc:
                    11:e4:7c:b1:c5:3d:41:0f:b2:14:fd:54:58:96:5f:
                    02:3c:05:07:64:b3:85:8b:7f:d9:2e:bc:81:7e:cd:
                    73:52:81:f1:2c:2f:76:c8:db:13:36:77:56:bb:b1:
                    ff:c8:17:0e:29:9b:f1:74:d5:c5:7e:bc:75:33:c8:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:FC:55:87:92:4C:62:59:DB:FB:2C:6A:74:98:8A:A2:70:05:14
            X509v3 Authority Key Identifier:
                keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:fe:c9:5f:f6:2a:fd:a3:8b:75:2c:73:7d:69:47:56:76:
         3f:91:65:dc:3c:9b:df:44:88:63:15:34:63:b5:11:aa:59:99:
         31:7b:e3:15:42:a7:c3:37:60:76:0f:a3:4f:3d:c0:1a:ae:69:
         af:27:68:1d:a8:e3:af:37:aa:b8:2a:e9:c4:be:99:e2:ed:ac:
         ea:df:aa:b9:9d:83:92:c9:c1:8c:59:a5:17:36:98:18:47:a0:
         6d:06:13:5e:49:02:f2:2a:41:73:ae:1c:da:0f:f0:88:77:a8:
         71:5d:74:3a:c7:01:0f:f6:a6:5f:af:ad:fa:c9:f5:3b:10:28:
         84:fa:b5:04:1e:e9:ea:13:b6:c8:22:65:87:3f:3a:f7:d0:4a:
         ff:ce:34:f3:7d:44:b9:ab:96:3d:bd:6c:a9:9e:11:b0:bf:89:
         ef:c5:6a:2f:4e:d8:5c:96:d0:e4:ea:91:31:32:d6:c1:5e:82:
         5d:ba:38:68:80:aa:66:0d:73:77:77:78:1c:b5:2b:05:20:2f:
         b8:18:e2:7d:b6:bf:7e:a8:ec:b6:98:f7:a2:66:41:9b:14:b8:
         2b:43:5a:e6:e1:c6:7b:17:b9:5d:38:d8:e8:dc:9e:57:72:89:
         cf:9e:1b:05:ec:37:e1:1b:b8:30:5a:7e:24:75:d8:c6:e0:39:
         7b:e3:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:45 2026 by rpki-client