Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
File:                     FDAC7EBA26D811EE86689D0EC4F9AE02.roa (raw, json)
Hash identifier:          OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=
Subject key identifier:   CA:E3:AC:04:3F:C5:3D:3C:2B:23:65:80:58:70:D8:58:0A:4F:D3:06
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0E96
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
Signing time:             Sun 12 Apr 2026 17:21:15 +0000
ROA not before:           Sun 12 Apr 2026 17:21:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137185
IP address blocks:        103.88.92.0/24 maxlen: 24
                          103.88.93.0/24 maxlen: 24
                          220.158.192.0/24 maxlen: 24
                          220.158.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Apr 12 17:21:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dbd48b-a77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:c8:78:5c:97:94:35:c3:89:8b:ba:d4:58:
                    29:7e:37:f9:42:92:43:21:26:a9:8d:34:ca:47:6f:
                    f4:2e:ed:11:90:74:2d:a0:a1:fc:a3:b3:70:bb:50:
                    db:96:56:1c:51:33:0f:82:64:38:20:3f:cc:23:81:
                    b1:52:41:aa:58:e8:70:6f:52:42:78:93:56:54:bd:
                    c6:30:8f:a9:11:14:f7:cb:81:1c:0f:34:e3:3d:e8:
                    31:48:98:88:40:e5:1f:2d:57:d6:00:4f:25:1d:0b:
                    e3:a7:cf:bc:fc:af:77:b1:8c:ca:86:2b:29:4c:e7:
                    2a:a8:ee:db:8e:9d:ae:fd:ad:20:70:c0:b9:62:1d:
                    ed:17:f9:7f:8f:59:67:7b:5b:22:e5:fc:91:23:dc:
                    64:a5:7c:82:cd:71:d1:23:f9:23:af:98:87:b6:24:
                    73:21:37:a4:3e:28:0f:40:1a:65:75:89:98:c9:75:
                    eb:3d:59:70:a7:e4:c2:77:0d:21:96:19:05:1c:ef:
                    4d:b5:16:98:3a:f6:d9:17:62:6b:a3:77:72:41:98:
                    f8:9d:13:f7:5d:3b:36:bf:f7:4c:a2:2d:f9:65:21:
                    13:c6:d7:01:1e:03:e7:0c:ce:f4:cd:24:3c:f5:1e:
                    a9:e0:26:60:b8:a1:61:69:a1:cc:45:26:a2:e7:07:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:AC:04:3F:C5:3D:3C:2B:23:65:80:58:70:D8:58:0A:4F:D3:06
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.92.0/23
                  220.158.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:88:b0:79:9c:e6:e9:04:92:43:9a:2d:87:14:f1:36:be:
         3b:92:55:6d:ed:78:5f:1b:b4:d5:bc:82:ef:e1:6a:c2:7c:44:
         38:6d:84:ff:5c:a5:ac:9a:59:82:be:ab:3d:5b:8a:f3:51:f0:
         c4:97:fc:00:26:a6:6e:05:e4:31:a2:86:d0:69:74:0f:8b:95:
         70:5e:6f:a1:0d:9b:79:2c:2f:a6:87:fc:aa:d7:90:e1:f4:75:
         63:70:bb:c6:80:0b:ed:50:94:81:42:03:f3:9e:99:1d:44:89:
         b6:be:3a:d1:13:27:5c:bb:b6:44:69:2b:e6:48:09:0f:7d:8f:
         8a:7e:41:d4:5c:61:98:a6:b5:56:f2:87:04:64:4b:0f:cf:08:
         0e:e1:9a:bd:25:8a:85:52:64:1a:a7:54:88:cb:84:dd:8a:ef:
         cf:ca:c2:d5:3b:41:15:02:2b:7d:ef:02:4c:ed:15:4f:73:43:
         04:70:c9:72:1d:7e:be:d3:a6:b0:41:64:da:54:1d:9f:f6:32:
         a8:b3:61:81:70:cb:b8:90:14:13:98:95:eb:2e:4c:dd:f7:c6:
         5b:f4:45:02:e6:55:48:bc:06:89:96:76:d0:3c:29:f5:7f:02:
         dd:6e:b2:ff:13:6a:32:8f:fa:84:4c:b6:18:f6:95:9d:e5:92:
         ba:39:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:16 2026 by rpki-client