Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
File:                     E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier:          PufzxBd2e27/rNpgvD6P/KRmIlxFJfcT3TUZsFAm2cU=
Subject key identifier:   84:16:AA:C5:52:9B:FA:31:A1:C4:A6:1B:2F:C9:B0:E4:E0:84:C0:C2
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       046B
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
Signing time:             Sat 11 Apr 2026 00:31:36 +0000
ROA not before:           Sat 11 Apr 2026 00:31:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138153
IP address blocks:        103.183.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: Apr 11 00:31:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d99667-ee84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:7c:58:e6:aa:da:88:59:25:8b:9e:52:73:
                    95:f4:4b:52:ea:08:e4:2d:be:1b:f0:29:a0:13:7b:
                    0f:7b:dc:51:dc:15:e4:0f:49:fd:9d:52:b4:f8:d7:
                    87:5c:e6:04:ba:fd:79:6d:c9:b8:f0:fe:be:5e:41:
                    bf:a1:be:ee:b4:bb:7a:dd:38:dc:d2:a0:68:0c:a8:
                    8b:7c:12:eb:b9:11:4e:4f:12:2b:a9:39:7a:1f:2d:
                    6b:b6:03:5e:47:15:96:96:da:d8:99:e7:f8:8d:62:
                    4e:00:7b:7d:4f:38:b9:f8:3b:e4:05:8d:ff:46:4a:
                    a4:d9:b5:38:e2:1b:f0:0c:f5:46:96:98:79:0e:3c:
                    b1:0b:53:02:d7:00:46:55:e1:d6:db:1b:85:e1:dd:
                    90:ce:c6:87:1f:33:68:56:61:cd:0e:86:e1:5f:cb:
                    1a:e3:5e:49:6e:38:a3:26:f8:9c:5f:dd:ce:9b:c3:
                    e5:10:45:f0:67:79:ac:8e:2a:de:5a:72:1b:c8:1d:
                    4f:1b:6b:b9:18:e4:04:8e:16:b3:24:92:24:2a:95:
                    a8:0a:8a:c0:4b:ed:38:4e:dd:73:d5:3a:a3:07:e6:
                    b8:29:3b:7e:5b:ac:a6:f8:b9:39:61:31:c7:ef:c3:
                    89:ad:c6:a3:7c:40:e2:b0:28:e8:3c:8f:be:a4:9e:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:AA:C5:52:9B:FA:31:A1:C4:A6:1B:2F:C9:B0:E4:E0:84:C0:C2
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7e:f8:39:6f:f7:d6:62:e2:ed:80:e6:7d:09:53:46:5e:06:
         5e:da:f6:54:bf:18:09:60:d7:21:97:f2:22:51:80:d3:0b:8b:
         39:be:4b:ff:d0:70:f2:68:74:92:ff:99:77:3c:14:21:ed:66:
         5a:21:07:ba:32:8f:96:07:d5:02:94:bc:08:37:60:9a:b2:b6:
         d6:e1:03:5d:45:48:ae:bc:2d:50:01:6b:2d:42:5f:b7:69:5c:
         0c:37:e3:66:d8:49:dd:a0:4f:49:85:a8:5b:bc:c2:e4:63:47:
         f6:23:4b:76:04:6b:89:47:f2:40:43:a1:b7:6f:07:07:1a:dc:
         95:b4:93:e7:e5:92:a3:bb:99:4e:ca:63:77:4e:13:83:a3:a3:
         be:ac:b0:31:3d:f4:e3:17:6a:55:b3:5b:3a:e1:84:39:23:8a:
         17:3f:cd:54:73:6f:66:59:5a:59:bf:97:b0:f4:84:b4:80:5e:
         d2:2d:da:e3:24:fb:06:1c:d7:53:07:c3:d2:87:7f:c6:bd:91:
         e7:d8:2c:78:1d:92:81:9e:08:7f:f8:46:dd:b7:01:f8:e9:07:
         28:d9:09:e5:4d:a5:9d:8b:a4:48:9b:46:93:84:f2:e7:d2:bd:
         3e:94:a0:db:a4:f6:44:42:a2:83:a1:4c:39:c2:95:3a:a2:a8:
         c5:6c:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:28 2026 by rpki-client