Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
File:                     D10DBCB2475C11EEBF5FB180C4F9AE02.roa (raw, json)
Hash identifier:          BRxvYL/f6CA3SKIVGbpzXkGKWWs47DxZMHo2MAWlkko=
Subject key identifier:   53:E4:27:26:C5:33:83:66:D4:9B:13:FE:07:DE:C1:A2:22:E7:28:64
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37CD
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 15:14:17 +0000
ROA not before:           Thu 16 Apr 2026 15:14:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        59.103.36.0/24 maxlen: 24
                          59.103.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14285 (0x37cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr 16 15:14:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e0fcc9-9319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:41:1a:f7:e0:09:91:31:06:49:dd:59:58:
                    33:23:38:d8:f0:26:97:16:1f:7c:e8:4b:86:5e:73:
                    5f:2e:1e:39:92:70:b3:1b:a3:e1:02:1d:84:e7:f4:
                    55:7d:93:5c:d5:a6:87:68:24:e8:1a:d5:80:c9:bf:
                    be:1b:94:ec:e0:0b:07:f5:8a:c2:6c:49:ca:73:3a:
                    2c:de:e8:c9:ec:65:ce:50:ca:00:49:c8:10:1c:b6:
                    8d:b1:65:62:6a:ab:41:c5:81:8f:2b:7d:1f:97:8b:
                    f4:22:e0:f2:c7:43:84:a6:3b:f9:48:ab:7f:16:f9:
                    fa:e9:a9:45:a5:c1:52:b7:32:1f:a7:b6:89:03:19:
                    4a:5e:cb:c9:e7:b3:9d:ea:19:77:5c:3b:54:8c:d1:
                    6c:69:29:95:8d:03:05:5a:3a:c4:f6:99:31:06:22:
                    25:40:50:fd:dd:37:53:1a:ec:86:7c:8d:bc:2f:7e:
                    a8:01:8c:ae:d9:d5:0a:51:40:b8:8c:0b:bf:79:65:
                    4c:af:ca:aa:22:eb:98:57:ba:93:e8:9f:4b:1f:ac:
                    a1:6f:c9:cb:30:83:c7:af:a6:de:83:a2:23:b3:d0:
                    3c:fa:94:a0:e6:11:43:bf:7d:3c:2f:74:bb:2f:22:
                    5a:42:91:08:ed:95:fb:a2:b6:87:02:7d:91:07:d7:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:27:26:C5:33:83:66:D4:9B:13:FE:07:DE:C1:A2:22:E7:28:64
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:f0:d1:4e:9e:dd:6d:31:30:24:7f:ab:5f:d1:16:73:1d:
         0e:28:e5:7d:bd:e0:a0:56:d5:57:6c:78:96:e2:2f:9f:87:b1:
         48:01:d3:40:e5:3b:5a:25:c4:7e:6d:22:37:fd:9b:47:7b:5c:
         3c:b1:82:17:6e:d8:9b:f3:f3:82:b4:55:e0:d4:12:b4:1c:3c:
         28:65:a9:ae:2d:43:84:eb:1c:30:ec:67:69:6a:b9:b5:0b:59:
         d3:b5:6f:81:d2:a0:52:bf:dd:f1:22:f1:9f:9e:f0:14:84:53:
         d7:fb:4c:99:21:b7:6b:4b:50:d3:b0:58:2a:b3:df:72:d7:62:
         aa:bc:45:3a:07:63:5f:c2:78:2b:4b:1c:fa:f7:31:5e:38:7f:
         6a:d7:6d:69:b5:f9:7b:f4:b7:ef:83:d0:61:84:60:3c:47:2a:
         08:9a:9b:13:9f:4e:55:9e:85:5d:d7:a1:fb:bd:0d:da:d9:b4:
         2e:3c:f9:2b:b4:9e:f0:37:6b:5d:f0:b4:64:3c:f4:8d:b7:7f:
         06:1f:f6:12:4c:6d:09:4a:7a:66:be:de:97:bc:0a:66:79:c8:
         73:5e:46:6b:21:03:ae:8f:d3:55:0a:44:17:d4:d7:79:00:7c:
         db:bd:fc:f1:1f:a5:b4:b8:9f:fc:61:1e:9d:8d:6f:a3:be:b1:
         6e:58:28:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:31 2026 by rpki-client