Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/E7AA3C5A37D911F1B36666D1C4833773.roa
File:                     E7AA3C5A37D911F1B36666D1C4833773.roa (raw, json)
Hash identifier:          siCvmhGtqnY35C3NOh4YSIg2JyFDveLmbf9cMd4ZK0U=
Subject key identifier:   CD:ED:1F:F6:7A:58:02:C5:F4:FA:B7:82:9A:D6:0C:AD:19:62:B8:C1
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       023B
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/E7AA3C5A37D911F1B36666D1C4833773.roa
Signing time:             Tue 14 Apr 2026 08:14:06 +0000
ROA not before:           Tue 14 Apr 2026 08:14:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132541
IP address blocks:        103.99.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Apr 14 08:14:06 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69ddf74e-c466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:23:ae:ef:a1:cb:15:b1:9a:1d:b0:db:cc:
                    94:9c:07:68:5c:ad:9c:88:e7:d4:3a:e5:e4:f7:a0:
                    df:c9:ae:44:54:97:e6:75:c7:ed:a6:bc:93:68:ad:
                    ac:a0:8d:f4:16:a5:7c:8f:b7:d2:d5:f1:3a:9a:ec:
                    eb:48:dc:65:ab:35:28:eb:46:ad:26:97:23:58:61:
                    ce:8f:3d:52:2c:9f:c3:d7:bd:58:09:1b:6e:20:72:
                    5d:2c:0d:ed:32:03:71:da:c3:5a:27:d6:c8:98:fd:
                    02:e0:e4:4e:20:4c:2d:48:7b:5c:37:80:b6:6e:65:
                    d9:5c:55:b8:06:55:e8:15:ae:73:1f:43:89:64:be:
                    d3:ce:5d:f6:c7:2f:8b:45:88:a0:7d:5e:00:c6:e2:
                    e2:16:e0:ac:22:14:86:22:66:27:a4:c0:f6:78:7c:
                    29:a4:d6:32:b9:d8:57:f6:bd:99:c0:3e:fb:c6:8e:
                    14:73:cc:4f:0e:cd:4f:b6:59:0d:9d:bb:b0:16:5e:
                    b2:0c:26:2e:cb:7c:7c:87:d8:74:91:87:2a:e5:ca:
                    59:d3:c4:c6:8e:f3:bc:42:c8:1f:3f:56:b0:dd:27:
                    df:f2:82:21:0f:39:b3:f2:17:fa:85:1b:91:af:8a:
                    86:b7:7d:be:c8:29:39:ae:de:4e:47:12:fe:fd:a4:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:1F:F6:7A:58:02:C5:F4:FA:B7:82:9A:D6:0C:AD:19:62:B8:C1
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/E7AA3C5A37D911F1B36666D1C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:45:38:1c:95:1f:e1:54:85:08:50:f1:19:fa:f6:7a:e1:
         da:43:35:2d:20:c3:32:1d:dd:00:b4:1b:47:72:24:86:bc:fe:
         cc:31:f4:74:40:b3:6c:7e:1a:3e:93:fc:43:c4:7d:e4:35:b1:
         d1:ab:86:59:b8:f0:39:72:70:c1:e1:82:55:33:69:75:62:8e:
         fc:b5:53:6b:ea:e9:af:c7:54:44:1c:39:7c:a1:7a:5c:e6:08:
         09:98:84:f3:c1:b6:93:fd:12:74:3c:53:b4:65:4d:bf:bd:01:
         13:f1:8a:8a:2d:cc:ab:0e:c6:e5:b7:5e:ee:5d:74:b6:9f:96:
         e1:45:44:83:59:4e:99:ba:9f:1b:06:42:3e:94:59:f9:ca:f3:
         de:e4:51:78:31:c6:ae:8e:be:62:e8:e5:d1:eb:27:a6:d0:2d:
         dc:97:ee:d8:3a:08:02:c8:73:76:c8:b5:9b:2e:49:04:da:d1:
         bb:08:87:1b:c8:fc:94:9c:2a:d8:bf:64:92:d2:10:12:1a:39:
         55:46:e5:db:11:c9:28:fb:54:a3:c6:02:7f:9b:2a:c4:c2:cb:
         e1:25:8d:d0:de:08:9b:46:c9:98:b5:97:58:ec:ed:82:3a:d4:
         1d:8d:42:1d:73:ea:dd:e4:e6:29:e8:f8:c1:31:7d:f4:c0:e5:
         88:71:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:49 2026 by rpki-client