Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
File:                     86550F680B4311EE8ABEE820C4F9AE02.roa (raw, json)
Hash identifier:          i5R8VUyCEsYs87lziXPACinu0ljmmV6mAP0eNfHwrtQ=
Subject key identifier:   0E:B7:15:70:E7:91:DB:FC:34:F0:8F:18:06:BE:6A:5C:CA:A6:2E:75
Certificate issuer:       /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial:       0470
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:32:55 +0000
ROA not before:           Fri 03 Apr 2026 00:32:55 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     140630
IP address blocks:        103.84.44.0/24 maxlen: 24
                          103.84.45.0/24 maxlen: 24
                          103.84.46.0/24 maxlen: 24
                          103.84.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
                          rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
        Validity
            Not Before: Apr  3 00:32:55 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0ab7-b797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:97:fb:ab:92:f1:5e:31:95:de:03:ac:bc:
                    14:c1:09:fb:8d:7c:b3:48:89:33:3b:e4:9a:19:a3:
                    35:4c:02:4b:72:23:c5:7d:2d:b7:1f:5b:28:7f:eb:
                    e2:66:c4:d8:96:0d:57:5e:c5:26:8e:5c:7c:37:4a:
                    fe:9d:28:ae:05:88:99:47:a8:c6:d1:f5:ea:54:08:
                    32:da:dd:a9:3b:28:95:ec:52:ee:a3:3c:4e:b7:c9:
                    ed:4f:c2:4e:ab:20:b6:77:15:f9:f0:4c:40:db:73:
                    b6:3b:97:60:be:11:83:19:fb:09:68:34:e7:59:4c:
                    b1:96:c2:c1:0a:47:c1:75:59:8e:a4:d2:a9:af:18:
                    e5:9a:51:0f:73:06:ad:15:90:75:3a:d1:da:91:5a:
                    6e:6b:87:fe:1d:59:c6:2e:a0:2b:ee:78:28:2b:d4:
                    f8:3e:23:da:64:eb:81:b4:0a:78:3c:d1:86:c3:57:
                    df:92:4a:71:4b:aa:02:e3:f1:be:44:40:ce:03:fd:
                    d7:66:8a:fb:21:36:63:78:65:88:d2:ae:3d:ad:58:
                    fa:57:be:01:21:5b:13:9f:29:b0:ff:1d:ce:3a:c8:
                    c9:ca:54:15:f7:88:84:d6:41:89:c7:19:1d:61:10:
                    5c:0e:9d:80:1c:fe:b2:e4:43:2a:cf:ef:3a:7e:83:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:15:70:E7:91:DB:FC:34:F0:8F:18:06:BE:6A:5C:CA:A6:2E:75
            X509v3 Authority Key Identifier:
                keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:a4:de:03:5b:4d:33:5f:88:38:7d:33:40:87:72:d6:b0:
         66:9b:ab:fb:f3:20:6e:92:4d:a4:9e:b2:96:1a:97:38:1e:cb:
         0f:a6:b4:4e:e7:ac:a4:3b:9c:1e:9d:6d:b4:e4:b5:36:9b:0d:
         1e:1e:36:8f:2d:37:97:38:ae:fa:b0:e7:6b:4a:5d:5d:3d:41:
         05:b5:48:eb:3a:1a:0d:e9:56:98:7f:28:f8:50:61:76:d1:b3:
         2f:92:57:51:d8:f6:bd:28:70:c1:78:b3:94:05:c4:59:c2:13:
         13:04:8d:d6:01:6c:c9:d6:ee:3b:58:19:b8:48:b0:e8:9f:1f:
         56:62:e8:b3:3d:4c:db:a7:73:ca:81:91:21:32:3a:a6:99:41:
         3e:5a:b7:e3:19:9c:22:80:74:d3:bb:81:cb:b6:bb:cb:c5:a1:
         5b:f5:45:15:5a:58:0a:90:46:4d:6a:96:b9:ed:27:10:88:89:
         b5:70:25:82:f2:e7:0f:26:00:16:d0:01:11:e7:49:0a:57:dc:
         54:30:83:4f:43:17:d1:00:cc:ea:86:82:68:c0:f9:92:4e:a0:
         f0:78:55:b7:74:6a:df:0e:a4:23:7b:e8:b2:07:00:e6:4f:cb:
         ab:2f:f7:c2:16:e3:51:1e:c9:ff:08:21:64:c8:63:c7:e8:11:
         7f:40:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:36 2026 by rpki-client