Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
File:                     C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (raw, json)
Hash identifier:          GqrG1fpjl/FS6/QcFeouUYo3Nekrspl6hyOuNMZABaQ=
Subject key identifier:   30:B7:D2:62:13:A6:0C:42:01:3A:FA:3D:6A:07:1C:01:7C:E2:BE:9C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       04D5
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:58:54 +0000
ROA not before:           Wed 25 Jun 2025 00:05:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131316
IP address blocks:        103.50.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Jun 25 00:05:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40dde-f89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:b8:01:99:08:6f:54:32:be:66:f0:13:3f:
                    85:41:36:a3:77:56:b3:c9:f8:62:b2:9b:75:f8:65:
                    ef:e8:73:9b:eb:a0:1e:02:3b:5b:be:0a:98:a6:fe:
                    bb:c9:09:d0:93:7c:cb:80:80:25:04:85:2c:88:85:
                    7c:8f:42:4b:c3:2a:3e:a7:f4:7e:5d:e0:51:f1:1f:
                    bc:68:01:1a:fc:95:5b:d0:3a:f5:c4:98:35:06:d7:
                    f8:8d:d5:62:25:e0:9d:81:72:c1:0d:33:7a:33:47:
                    8e:39:ef:a8:20:d8:f2:3a:75:46:bb:0a:46:0c:99:
                    7c:dc:a5:21:24:2d:d3:43:6b:dd:fc:f0:8a:d1:b9:
                    0a:58:a2:31:6f:8d:d8:14:b0:a2:32:61:73:d9:4c:
                    4e:2c:b6:c4:7d:55:62:f1:09:e8:bd:ee:9c:e8:dc:
                    d6:e4:6d:f7:a4:4d:6d:6a:1a:4f:60:19:09:d9:25:
                    b6:d7:c4:41:e4:ae:b2:cb:a2:af:ef:32:04:9b:bd:
                    4a:31:7c:fb:b2:59:d1:59:05:25:f7:54:65:a0:2a:
                    52:16:72:c2:2a:c5:d9:60:08:0b:fe:c0:9a:64:ef:
                    77:3e:09:af:d7:20:22:2e:94:bc:e7:35:0f:ec:f8:
                    79:a8:a7:5f:c5:d7:93:68:1f:3a:be:60:1a:92:15:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B7:D2:62:13:A6:0C:42:01:3A:FA:3D:6A:07:1C:01:7C:E2:BE:9C
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:cb:7a:d8:c0:7a:16:7c:82:ed:1d:aa:75:44:37:b9:c7:ec:
         5b:a6:a1:06:0a:e1:a0:30:d8:9a:0a:49:1c:d3:01:77:b3:fc:
         55:50:d6:84:e9:3f:55:7f:25:a0:b6:9d:6b:c0:64:0b:2a:95:
         eb:39:9e:c3:50:ef:99:d5:40:2c:c0:1e:e9:e8:17:a3:56:51:
         45:00:07:4e:da:57:9b:3c:67:aa:59:ea:cf:2a:30:6f:6a:49:
         32:a5:6e:45:21:5d:37:c3:96:ce:c3:65:1e:4b:57:bf:fa:d0:
         50:b8:bd:01:6d:c5:62:b2:09:be:6a:4d:89:88:fa:51:8c:b9:
         f2:73:34:6e:b9:24:94:02:ab:04:84:44:7c:55:5c:86:11:b4:
         a7:f9:da:78:8e:ad:d7:1d:f2:bb:b5:40:9f:c1:4e:f6:3a:a9:
         b5:78:9f:d1:d6:9b:32:53:8a:13:60:17:cb:08:4d:b3:8f:f1:
         bf:ac:1b:9e:3f:0f:de:ab:ce:7d:7c:31:21:31:91:58:a4:a6:
         03:54:6f:48:a7:ef:7a:4b:5c:74:5c:82:7f:63:68:9b:ef:ac:
         c3:82:c5:bf:f8:f0:c0:3d:2c:45:01:10:fa:ae:cc:65:2d:20:
         71:2f:23:d4:01:ba:7e:ea:ea:d7:5a:3e:04:56:76:53:b5:46:
         ce:33:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:38 2026 by rpki-client