Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FC94057A370111F1AC489D14BF833773.roa
File:                     FC94057A370111F1AC489D14BF833773.roa (raw, json)
Hash identifier:          JZJalDSQr/IoFea9NxLBWN3ZOZ/DgJ84ZBHO9Nd0bsM=
Subject key identifier:   44:8C:82:38:B1:B0:64:F9:39:FD:98:AD:DA:74:90:91:75:AD:08:82
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       054C
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FC94057A370111F1AC489D14BF833773.roa
Signing time:             Mon 13 Apr 2026 06:28:30 +0000
ROA not before:           Mon 13 Apr 2026 06:28:30 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     24224
IP address blocks:        103.73.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Apr 13 06:28:30 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69dc8d0e-100f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:69:5a:e6:aa:27:19:bd:f5:ee:5a:4b:c9:
                    34:81:bd:16:64:68:5b:6e:09:a5:00:f2:a4:11:6e:
                    68:f3:1c:a8:c4:e8:ca:5e:fa:06:c8:d7:e7:92:f1:
                    87:79:9d:ee:9a:0d:82:8f:4c:dd:2b:0d:fd:1d:0c:
                    ed:dc:4c:97:3f:e6:9f:85:18:9c:a1:6c:77:3f:0e:
                    3c:ce:2c:05:d8:74:51:71:d7:10:9f:b0:03:ff:c9:
                    d2:35:e4:08:a8:f1:90:4c:09:b8:f0:c2:4b:c0:62:
                    54:04:bd:54:d9:8e:b8:7b:80:68:65:3b:9c:bf:26:
                    4c:c3:f8:d5:c8:ef:16:d9:98:d7:05:62:b4:b4:14:
                    83:d5:6b:1e:24:20:65:ba:68:99:17:05:f2:b2:73:
                    d9:0a:68:e7:6e:ab:2d:dd:5b:86:5d:ae:9c:27:b0:
                    fc:6d:4a:89:81:7e:c4:ba:e4:3e:15:9a:e8:59:fa:
                    5c:a8:f4:29:d2:a4:99:1c:f7:9f:e2:f9:9c:7a:89:
                    3e:ed:41:0e:e1:67:15:81:e0:7e:d5:46:4e:51:79:
                    d2:53:83:c4:f4:ba:47:17:e5:70:9f:b4:1d:c0:2a:
                    75:44:7f:62:83:09:37:4f:d6:fb:f1:0c:97:69:0c:
                    71:27:b7:08:55:e2:2f:22:8d:0e:52:e3:d4:e6:39:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8C:82:38:B1:B0:64:F9:39:FD:98:AD:DA:74:90:91:75:AD:08:82
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FC94057A370111F1AC489D14BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:c7:3e:b2:d9:5f:5b:70:89:76:d2:1e:5b:60:3e:2a:31:
         b1:e7:83:22:ce:75:f1:77:9c:50:3c:41:c2:0f:af:b1:fd:78:
         ee:2a:ac:7e:0d:7e:24:bb:d4:50:35:69:f0:87:d1:e7:6d:29:
         fd:c1:af:84:a1:b8:b9:8e:71:b2:eb:fa:ad:cc:29:36:ad:2b:
         7f:11:7f:a5:aa:61:7a:8a:d5:b2:bd:ca:fd:65:f5:21:7b:3b:
         77:b3:6a:d4:50:e3:66:ef:43:51:7f:c9:56:ca:f8:db:58:01:
         9f:23:69:fd:5d:39:75:98:9c:aa:98:d4:17:cd:70:1b:5a:22:
         e3:bb:99:f7:5c:54:d5:fc:e4:c9:a2:7b:a7:1d:44:f3:c5:33:
         31:88:b0:89:3f:21:7a:ca:cd:e1:bf:71:ca:06:a8:25:07:3d:
         5c:ca:6a:92:43:cd:ee:38:ae:24:b6:ca:35:52:36:92:72:1e:
         42:45:35:b7:17:3a:5d:0a:53:47:7f:c3:54:b7:bf:f3:a5:40:
         be:26:40:a2:bd:71:a7:c8:79:a4:ae:aa:0e:75:a7:07:21:43:
         a7:cc:a4:8c:01:d9:4c:d5:8f:e4:06:9f:c6:28:cd:41:a7:09:
         a9:70:9a:a7:33:d1:6e:c9:74:2d:6b:de:b7:c3:52:19:a9:a5:
         e8:96:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:24 2026 by rpki-client