Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa
File:                     7D745B8C800411EB9398C63EC4F9AE02.roa (raw, json)
Hash identifier:          E1QXwlpofWnOF885wZs0H95ShVhWhWqMPlBNA/xt/8E=
Subject key identifier:   13:F7:60:34:49:D7:0B:3F:9A:02:15:E0:F0:92:AE:82:FC:22:11:59
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37DB
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa
Signing time:             Thu 16 Apr 2026 15:14:43 +0000
ROA not before:           Thu 16 Apr 2026 15:14:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141711
IP address blocks:        59.103.24.0/23 maxlen: 24
                          59.103.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14299 (0x37db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr 16 15:14:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e0fce2-4be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:c8:01:f7:2e:bc:8c:e4:e1:42:08:1c:df:
                    69:c6:43:da:b9:0c:7c:dc:7e:21:80:d3:d8:85:d7:
                    cd:64:83:b8:66:7b:36:82:3a:47:53:7b:88:90:53:
                    19:fe:f1:e9:57:1d:3f:3b:44:b4:75:ff:f5:f8:e6:
                    89:20:8d:1b:4b:98:7a:05:6a:06:d6:3a:6a:af:12:
                    71:5b:cb:26:e2:ac:eb:e3:2d:df:06:8b:7b:6f:2e:
                    f8:2a:29:2c:56:3b:d8:7b:5c:ed:10:88:6e:c3:17:
                    ba:fa:7d:35:2a:79:f4:bc:23:90:84:26:98:49:2f:
                    cc:1c:06:f0:c5:66:77:db:6c:12:6d:aa:56:82:96:
                    cf:ca:47:b0:15:01:46:c3:95:f0:cb:88:ef:61:ae:
                    6f:33:65:c8:37:ae:79:a6:d3:1e:e9:ef:f3:c9:b7:
                    f6:7e:0b:8b:f8:ee:5e:9d:22:83:0c:e8:2a:97:1a:
                    11:f4:c6:6e:c4:d7:48:c9:c0:d2:90:62:ef:d6:0c:
                    db:80:ee:d1:2a:01:72:18:fa:04:6b:5d:31:37:38:
                    27:34:13:9f:0a:e1:e0:e8:62:b1:30:54:d3:2c:11:
                    06:64:e1:38:4a:59:79:b6:37:5d:b3:ef:09:6c:a2:
                    9b:8c:04:2d:12:ac:29:8f:27:60:69:0b:fe:c4:39:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F7:60:34:49:D7:0B:3F:9A:02:15:E0:F0:92:AE:82:FC:22:11:59
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7D745B8C800411EB9398C63EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.24.0/23
                  59.103.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:9f:ee:b5:a1:79:01:f2:d5:c2:ac:c3:53:3e:53:f7:1f:35:
         79:35:e7:c2:cd:53:1d:f8:18:91:ba:3a:a2:51:33:2b:cc:43:
         f6:24:71:c1:36:8f:3a:01:aa:78:ae:f7:43:36:6f:f8:07:45:
         03:db:ba:09:54:07:d5:5b:e1:dc:29:2f:f9:17:b8:cb:b0:84:
         f9:ce:ab:86:a1:ef:af:cd:f2:c0:d1:d2:e7:16:3b:05:c2:7b:
         51:84:d4:99:3b:91:cc:2b:83:15:76:72:fe:b0:6a:af:4f:24:
         d4:eb:db:08:3b:b6:34:9a:b1:50:4a:63:9b:11:73:48:fc:6c:
         e5:df:8a:86:ba:96:46:4b:79:bc:d4:55:f4:f2:9a:5c:93:73:
         38:ed:b3:85:76:e9:4b:77:4a:e4:9c:32:63:19:15:43:34:40:
         d8:9c:3a:50:d2:8a:7b:fa:53:07:04:11:3f:43:76:f0:a8:ef:
         07:a6:d5:e2:69:25:1f:27:1a:35:33:e9:28:1b:0a:11:a0:aa:
         8a:7d:d3:f1:85:c1:24:37:8b:fa:17:93:93:91:17:9d:52:ff:
         cd:4d:85:69:51:45:32:24:53:18:ac:e0:32:24:8e:c8:aa:82:
         68:ca:83:7b:34:1c:f8:ee:f8:8c:d2:38:44:2e:bd:97:25:17:
         10:68:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:08:54 2026 by rpki-client