Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa
File:                     F41AA87837C311F1976C4134BE833773.roa (raw, json)
Hash identifier:          +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=
Subject key identifier:   78:9D:38:17:99:25:73:D4:B8:3A:17:45:25:53:37:0F:5E:85:57:3D
Certificate issuer:       /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial:       09
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa
Signing time:             Tue 14 Apr 2026 05:36:58 +0000
ROA not before:           Tue 14 Apr 2026 05:36:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        203.23.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
        Validity
            Not Before: Apr 14 05:36:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ddd27a-7bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:b7:c4:b5:ac:86:d7:2e:ec:2d:c1:8f:70:
                    0e:d5:ba:ca:4d:d2:6f:c1:94:ef:1a:19:37:f7:d0:
                    e6:a8:a2:98:6a:23:11:be:d6:53:72:71:ed:ae:1c:
                    8a:d5:5d:dd:0d:12:f7:19:45:c3:d0:90:29:82:14:
                    c0:16:ba:b2:9a:89:cf:44:aa:b7:69:fb:b7:b9:d2:
                    67:ae:89:83:42:cf:06:43:07:a7:4e:29:1e:e5:fc:
                    17:3f:b3:77:c9:c7:7e:13:9c:be:66:8d:e2:cd:61:
                    d8:cd:6e:3a:76:ed:00:03:ea:3a:9e:3f:e1:3e:d4:
                    5e:e6:42:7a:29:78:c3:aa:c4:06:15:8a:58:4a:b3:
                    7b:72:8b:b0:35:36:3a:69:a2:59:de:5a:3c:08:c0:
                    45:8e:0c:09:4e:aa:59:84:56:1c:5e:dc:e9:52:2c:
                    f6:80:e0:f2:15:4b:74:e7:51:e1:88:e9:85:dc:27:
                    10:d3:6f:cf:95:08:1d:2c:98:21:96:12:28:f6:26:
                    83:9f:e2:40:b2:80:eb:a7:a4:66:0a:fd:25:11:b9:
                    db:31:b3:f8:a5:e4:36:30:e8:2e:56:8a:e8:37:b6:
                    0a:20:5c:6c:36:7c:08:84:c6:dd:52:cc:08:c0:9d:
                    a9:a9:65:0c:d7:29:dd:3f:b6:8d:90:eb:ea:bd:9e:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:38:17:99:25:73:D4:B8:3A:17:45:25:53:37:0F:5E:85:57:3D
            X509v3 Authority Key Identifier:
                keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:d7:f8:75:e0:3f:48:c0:fa:0b:e4:20:04:9d:8f:8b:d1:
         63:30:fb:f0:89:ee:3a:25:c2:30:02:a5:e2:36:83:61:e6:d8:
         08:24:9f:39:9a:51:8f:06:ca:a5:23:11:4c:49:ca:77:a9:a5:
         91:a6:23:6c:fc:62:8a:ca:df:86:62:af:4c:54:7f:3d:71:57:
         89:95:8f:5b:6c:63:c0:4c:f0:ce:98:c8:fc:01:db:45:45:34:
         d4:46:e2:32:e2:b3:c0:13:82:b3:da:fa:99:96:6c:c1:64:0b:
         c7:cd:9d:ef:fc:54:77:2c:12:46:20:56:0a:41:13:28:7f:e8:
         ff:c6:fb:1e:79:95:bf:46:48:33:31:95:3e:4d:73:60:c5:0e:
         44:22:7a:4f:7e:b4:16:5a:3b:d9:dd:ea:89:48:18:d5:8d:60:
         ee:b3:3b:b1:15:0b:92:8a:3d:30:48:a6:2d:42:05:87:ac:45:
         da:4b:f4:c1:9d:d9:7f:f4:b4:f2:12:a2:f4:7d:99:c4:04:d6:
         f1:08:e0:34:e5:e2:3c:47:b9:94:ea:d1:eb:a4:6e:3b:9f:fe:
         3b:c1:a0:64:10:5b:ff:bf:4e:dc:86:5b:a5:19:ea:0c:13:7d:
         aa:67:ca:27:38:f1:af:92:7b:6c:fc:fd:f4:1a:35:95:40:c3:
         70:f9:03:60
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MkQ4NTExMC8GA1UEBRMoM0RCMzRDQjhCNUJENkE5OUVDRjdENTI5Mjg5MTNFNjUy
NUE3MUM1RjAeFw0yNjA0MTQwNTM2NThaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZGRkMjdhLTdiZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpyLfEtayG1y7sLcGPcA7VuspN0m/BlO8aGTf30OaoophqIxG+1lNyce2uHIrV
Xd0NEvcZRcPQkCmCFMAWurKaic9Eqrdp+7e50meuiYNCzwZDB6dOKR7l/Bc/s3fJ
x34TnL5mjeLNYdjNbjp27QAD6jqeP+E+1F7mQnopeMOqxAYVilhKs3tyi7A1Njpp
olneWjwIwEWODAlOqlmEVhxe3OlSLPaA4PIVS3TnUeGI6YXcJxDTb8+VCB0smCGW
Eij2JoOf4kCygOunpGYK/SURudsxs/il5DYw6C5Wiug3tgogXGw2fAiExt1SzAjA
nampZQzXKd0/to2Q6+q9noBFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUeJ04F5kl
c9S4OhdFJVM3D16FVz0wHwYDVR0jBBgwFoAUPbNMuLW9apns99UpKJE+ZSWnHF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDg1LzlDMjFGRTBDMzQ3
OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBuczk5VXBLSkUtWlNXbkhG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGJOTXVMVzlhcG5zOTlVcEtKRS1aU1duSEY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ4NS85QzIxRkUwQzM0NzkxMUYxOEE1RDFGM0JBODgzMzc3My9GNDFBQTg3ODM3
QzMxMUYxOTc2QzQxMzRCRTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLF3YwDQYJKoZIhvcNAQELBQADggEBAIhL1/h14D9IwPoL5CAEnY+L
0WMw+/CJ7jolwjACpeI2g2Hm2AgknzmaUY8GyqUjEUxJyneppZGmI2z8YorK34Zi
r0xUfz1xV4mVj1tsY8BM8M6YyPwB20VFNNRG4jLis8ATgrPa+pmWbMFkC8fNne/8
VHcsEkYgVgpBEyh/6P/G+x55lb9GSDMxlT5Nc2DFDkQiek9+tBZaO9nd6olIGNWN
YO6zO7EVC5KKPTBIpi1CBYesRdpL9MGd2X/0tPISovR9mcQE1vEI4DTl4jxHuZTq
0eukbjuf/jvBoGQQW/+/TtyGW6UZ6gwTfapnyic48a+Se2z8/fQaNZVAw3D5A2A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:41 2026 by rpki-client