Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa
File:                     0AE7E0B6421711EE97070469C4F9AE02.roa (raw, json)
Hash identifier:          ejoWMDUgt82/44WWAbicbO1p8c1RwlyGtdpOrVgBghs=
Subject key identifier:   61:03:7B:69:24:0E:E6:C6:B7:FC:94:1F:F1:2B:0B:09:6C:F6:7D:56
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       01F4
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 03:36:28 +0000
ROA not before:           Thu 09 Apr 2026 03:36:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7387
IP address blocks:        103.184.102.0/24 maxlen: 24
                          2001:df0:8fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: Apr  9 03:36:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d71ebc-a0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:a2:a6:a2:1f:44:ef:93:2e:41:8c:40:f9:
                    19:50:b4:b4:ee:d7:21:8b:c8:fb:3f:17:09:73:cb:
                    b7:7b:9c:71:0e:4d:e8:ac:88:6c:07:4f:cf:c2:0f:
                    06:2c:d2:20:6f:2a:59:45:93:a0:94:db:f1:6e:68:
                    86:4f:8f:e8:60:81:af:fd:d4:01:ac:2e:22:84:53:
                    75:69:8a:d1:34:1b:0c:c9:58:92:c7:15:17:cc:02:
                    07:cc:c8:9f:78:c2:f8:04:50:5e:ca:34:08:1c:10:
                    4d:3f:d2:81:f7:79:8d:eb:76:5d:73:50:a8:2a:14:
                    b4:09:d6:e9:76:1f:c2:3c:ef:76:51:57:91:83:22:
                    4e:72:59:d9:79:a6:76:37:46:42:11:8a:94:2f:4f:
                    b2:bd:ed:8f:9a:c1:50:9d:b0:86:e1:93:e2:94:9c:
                    cd:35:4a:bb:ac:a3:4f:44:79:0b:95:85:b7:76:84:
                    dc:15:bb:9b:f1:24:b5:54:91:ab:bc:aa:1f:91:7b:
                    71:e8:e7:40:c2:e8:45:5f:5c:9d:73:7a:bd:0b:54:
                    4c:0f:32:51:fb:45:d8:d3:da:0a:cc:52:83:06:4a:
                    29:6f:82:c5:2d:7a:86:a1:7c:f8:b1:48:dc:94:2a:
                    73:57:42:0e:a9:63:ad:aa:5f:f6:0b:ca:85:26:18:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:7B:69:24:0E:E6:C6:B7:FC:94:1F:F1:2B:0B:09:6C:F6:7D:56
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/0AE7E0B6421711EE97070469C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.102.0/24
                IPv6:
                  2001:df0:8fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:42:c9:7c:80:85:fa:48:da:c0:ed:ca:e7:b3:89:7d:95:f1:
         2c:da:2d:47:62:87:9c:ef:c9:b8:40:e0:03:0e:e2:9c:b0:48:
         9e:69:ca:22:b5:0d:9c:cf:6b:ba:df:a6:29:f7:37:fd:52:2a:
         63:07:83:b1:b4:84:e4:ce:09:c1:c8:74:cc:c9:ce:e6:1e:b1:
         04:26:c3:41:b5:83:2f:fa:60:14:d6:65:85:be:c9:c9:48:e1:
         d0:6f:0d:2f:63:60:c3:c6:eb:b6:4a:b7:3e:13:db:be:21:4f:
         d0:91:28:68:6f:e7:87:51:75:2d:29:9e:05:96:32:28:ef:7a:
         01:0c:3b:97:d1:d5:a9:c9:4a:00:c8:0e:09:fc:b0:9b:74:6f:
         82:9f:a9:fa:ba:78:0d:35:25:49:69:5d:aa:df:5e:a7:b0:cf:
         a4:e3:d4:04:f7:1c:a6:e9:05:f2:0b:7e:2d:fa:c0:a5:58:19:
         26:66:e4:20:4d:82:e7:6f:9b:a6:5e:3d:00:7e:45:ea:24:18:
         4e:da:5b:3e:b4:2c:62:08:f8:da:e8:a9:aa:57:25:d1:6e:87:
         15:a0:db:d9:f6:45:fa:6b:2f:f3:c1:b4:03:f1:91:7b:e2:05:
         57:0f:94:f1:73:bd:23:97:b1:96:c9:18:e7:4f:3b:58:aa:aa:
         c4:83:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:58 2026 by rpki-client