Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
File:                     111C77744E1811EDADB36913C4F9AE02.roa (raw, json)
Hash identifier:          6hfUw9nQOdjVrwwSNnhQ1CXEFLWSCYmyZedcFdNSRgg=
Subject key identifier:   1A:72:0B:F8:91:13:BA:C8:6D:31:A8:80:17:E7:01:A8:CA:32:E5:28
Certificate issuer:       /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial:       02A0
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 01:33:40 +0000
ROA not before:           Thu 09 Apr 2026 01:33:40 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58876
IP address blocks:        103.8.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
        Validity
            Not Before: Apr  9 01:33:40 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69d701f4-84fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:32:b1:98:ce:d9:6d:0e:34:1c:67:c7:76:
                    73:56:f9:66:f0:3b:48:96:21:0d:3f:24:69:e4:60:
                    ca:e6:64:68:64:13:b8:ad:0a:cb:e3:f1:d3:ac:89:
                    bc:02:3d:61:1f:13:f4:c6:a7:dc:19:51:54:2a:dd:
                    76:45:93:0c:8d:fa:34:21:91:73:94:ea:2c:4b:3f:
                    88:d9:0c:4f:47:e3:c9:63:bd:2d:dd:8d:d3:d1:f1:
                    25:cd:46:43:cb:d0:64:47:c3:95:b3:48:1b:e2:b8:
                    67:72:d1:23:a3:85:36:c2:19:6b:53:a8:52:9b:a9:
                    fa:e6:2d:21:66:a6:4f:58:9f:cc:50:71:1b:c7:56:
                    e2:17:f1:dd:68:2d:f9:56:27:40:06:ae:b6:26:06:
                    8a:fc:cc:99:12:09:42:94:bf:32:c6:19:e3:ee:7b:
                    c4:d9:af:4f:1a:76:7f:84:9f:30:75:69:65:5e:27:
                    e8:19:7e:85:ef:8c:56:41:16:74:03:80:67:28:b8:
                    7e:1f:9b:d8:9b:04:6f:d8:3d:e0:1c:3f:0f:d3:98:
                    44:54:12:f8:9f:11:30:fa:fd:4c:36:17:6e:ef:79:
                    a0:16:84:db:84:07:14:b4:4e:6e:da:22:d6:ba:ff:
                    21:39:df:eb:0e:82:d1:00:2e:89:19:6a:82:01:b0:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:0B:F8:91:13:BA:C8:6D:31:A8:80:17:E7:01:A8:CA:32:E5:28
            X509v3 Authority Key Identifier:
                keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:90:3a:18:9e:6e:29:98:ae:64:b1:b8:74:6f:da:2a:e3:cd:
         ae:98:b6:bf:6b:22:a3:8d:8b:5f:76:2d:df:03:70:68:30:27:
         cb:ec:2c:ac:fc:2c:c3:ab:09:73:4b:85:da:4a:b0:00:bc:1f:
         c8:1c:67:a6:55:61:03:f7:78:6e:7a:cb:23:29:47:20:f9:dd:
         f2:98:59:0e:b1:0b:1f:c8:6a:33:8e:de:a3:9a:56:cf:9d:b8:
         1e:23:fa:cb:fe:ce:8e:0b:e3:9d:50:7b:5a:bb:57:72:5c:1e:
         54:80:2a:eb:09:a4:81:15:f7:b9:cd:67:6e:b9:f6:59:ca:e5:
         d6:d2:ec:88:6d:aa:7b:f3:e6:cb:29:14:b1:cc:ed:8f:1a:db:
         46:ef:8c:8c:0c:60:95:e0:66:d4:19:3c:eb:1b:a6:48:69:f0:
         d8:fe:4c:a8:22:ee:08:63:48:36:81:aa:21:ff:5e:26:04:0c:
         cc:5c:d5:1a:c9:30:74:06:75:ec:62:4e:95:f9:08:b1:91:ca:
         96:58:ba:54:5b:bc:1a:79:47:6d:15:c5:81:2e:2a:db:6c:18:
         dc:a2:fa:73:b1:d4:33:23:4f:19:a7:77:4c:01:c3:ba:06:10:
         7e:d7:d2:97:2f:7e:36:fa:62:83:eb:d9:a0:36:87:ad:b4:d8:
         11:a2:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:20 2026 by rpki-client