Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa
File:                     35A169488D8611E9B1106E6FC4F9AE02.roa (raw, json)
Hash identifier:          RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=
Subject key identifier:   BA:8E:95:87:BE:B6:0D:33:E5:79:95:51:36:82:99:A7:62:AE:2C:75
Certificate issuer:       /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial:       1087
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 18:20:59 +0000
ROA not before:           Thu 04 Jun 2026 18:20:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138978
IP address blocks:        103.138.32.0/24 maxlen: 24
                          103.139.90.0/24 maxlen: 24
                          2404:bb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4231 (0x1087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
        Validity
            Not Before: Jun  4 18:20:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21c20b-b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:74:54:09:6e:fc:b9:22:f6:51:fd:03:d5:
                    2e:70:ea:22:5d:67:7c:12:1d:29:15:19:fc:75:37:
                    63:fc:eb:95:d0:50:10:18:96:56:16:d7:7a:31:64:
                    92:83:4e:fd:de:d6:20:9d:4a:a0:aa:31:ba:84:3e:
                    65:2d:0a:57:33:44:ef:46:cd:dc:30:61:9d:2d:d1:
                    45:a7:a7:24:a7:ba:6a:c2:07:8b:80:d8:95:4b:14:
                    a5:87:99:f4:f9:60:90:46:3d:de:61:f0:0d:7e:aa:
                    20:e8:34:1a:dd:75:6e:04:d9:c1:92:82:8c:84:a6:
                    2b:b3:71:d6:1a:1d:4b:26:9a:2b:e9:8f:83:92:9d:
                    ca:ed:49:94:7a:e5:1b:d9:42:df:e6:3b:10:b8:eb:
                    32:15:cb:f7:a2:4b:da:97:03:86:02:16:b2:e7:33:
                    19:e9:7a:fb:1b:03:1c:fe:3f:46:34:5e:96:1d:44:
                    7d:aa:60:03:54:78:7c:4a:f4:a9:68:cf:08:48:70:
                    83:9d:80:91:79:89:8c:54:e6:22:4b:3c:a3:87:f2:
                    89:df:ad:9f:1e:6b:93:4e:a3:00:63:fe:1a:89:bf:
                    e7:8d:6f:bc:2d:c4:d5:87:dd:cf:f5:dc:41:05:51:
                    91:a9:36:a0:f6:42:f0:f5:a1:1d:00:a9:f6:13:35:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:95:87:BE:B6:0D:33:E5:79:95:51:36:82:99:A7:62:AE:2C:75
            X509v3 Authority Key Identifier:
                keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/35A169488D8611E9B1106E6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.32.0/24
                  103.139.90.0/24
                IPv6:
                  2404:bb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:e0:24:97:90:e8:9c:9f:78:f4:10:d5:73:42:a3:05:79:
         23:68:46:e4:b5:b7:ee:a0:ad:6c:42:ca:f8:8e:50:f5:7a:59:
         cc:54:e4:5e:b0:d0:eb:7b:53:83:7d:45:77:37:5c:ff:b2:d6:
         5c:d6:ed:fe:8b:23:12:56:e5:1c:f2:5d:5d:77:d3:e6:ba:0e:
         cf:22:81:df:6e:4b:2c:93:c8:68:6f:c2:31:31:6a:03:36:47:
         2f:6c:c8:cc:92:30:61:9e:62:6b:6b:c7:77:c8:1e:66:93:2d:
         45:a6:93:dc:4e:c5:02:1d:11:55:27:7e:be:83:80:d9:ff:5e:
         83:82:18:3a:46:1a:19:d4:73:a4:93:36:66:a8:3a:95:17:8c:
         0b:73:7e:f8:5a:ef:61:5b:cc:5d:08:8f:f2:64:44:af:49:87:
         d0:4e:78:83:4c:bf:1e:59:b1:44:b7:29:59:c5:66:50:53:6b:
         a7:85:fc:c6:c9:9f:3a:85:8c:93:f9:39:d9:04:72:22:06:51:
         37:a8:44:27:a9:1a:72:60:5b:a1:76:e4:97:17:c8:3c:4b:09:
         2d:80:43:0b:d5:bd:a9:f8:97:15:10:6d:a8:b4:55:93:be:d8:
         d0:1d:4e:e5:f0:34:7a:9d:37:cc:e6:80:d3:3a:aa:3b:98:a6:
         eb:d1:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:42 2026 by rpki-client