Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa
File:                     1DA961ACEE8911EDBFAE4177C4F9AE02.roa (raw, json)
Hash identifier:          KNjhTRkSzjBu8PNcRRIslxNJJksaMrayGo63FfFr2xs=
Subject key identifier:   17:79:58:47:E9:28:12:F0:16:DF:91:AD:86:C1:3C:63:EA:61:15:09
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       0269
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:27 +0000
ROA not before:           Fri 05 Jun 2026 02:34:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     59239
IP address blocks:        103.130.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Jun  5 02:34:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235b3-f313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:fd:dc:8c:20:d3:56:13:75:c0:87:f1:b4:
                    0b:e8:4b:a6:28:6a:21:88:fa:c9:0b:11:f7:f4:67:
                    ec:6b:82:26:f9:2f:52:da:d3:35:93:da:eb:cc:cd:
                    d9:2d:ec:55:1a:65:29:dd:3d:0f:96:d2:32:c0:5b:
                    dd:07:c0:6b:83:0c:31:ed:11:12:20:87:fa:e6:4c:
                    4c:d1:1c:b8:57:b2:fa:a9:24:5b:a2:30:3f:df:cd:
                    49:e0:a3:1b:fa:47:55:e0:09:19:7e:44:24:42:57:
                    70:3b:4f:18:5a:39:de:46:54:55:b0:13:80:69:f9:
                    4a:76:fb:dd:08:a4:87:f7:1f:17:60:66:d0:18:a0:
                    ac:72:fa:db:56:06:85:13:0c:d4:43:ad:07:fe:a4:
                    71:12:47:e1:b4:99:37:60:e4:9a:d3:7c:01:13:4a:
                    78:49:64:7d:0c:d1:70:82:c7:3a:f6:c0:6e:8c:70:
                    0d:95:8c:ac:b8:d0:06:a0:09:ea:74:cc:5c:a7:52:
                    61:1f:06:c1:3d:54:15:cb:bf:7e:dd:e8:98:db:5d:
                    dd:19:18:b1:cf:f4:bf:84:c7:9a:55:37:ff:f4:84:
                    21:38:7a:ff:43:22:8c:dd:38:a1:0d:b9:2f:7b:6b:
                    d4:e3:2a:05:2d:33:d3:c7:62:ba:82:18:97:4e:35:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:79:58:47:E9:28:12:F0:16:DF:91:AD:86:C1:3C:63:EA:61:15:09
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e2:31:58:ed:87:7a:2f:66:05:71:d6:31:1d:72:14:e2:ed:
         02:54:68:73:cc:1b:52:01:98:a9:61:c0:6c:87:a5:aa:a5:a6:
         e0:0d:e0:95:52:66:07:f1:60:50:43:9e:c6:e0:4c:78:63:95:
         59:0b:29:76:56:44:4d:b1:3e:45:0a:3e:33:6e:d0:7b:ff:31:
         2a:ee:39:de:41:f5:b0:f5:d7:49:66:e0:a7:30:88:cd:e9:e8:
         84:57:d6:0e:ca:c3:3e:6c:3b:11:7d:1d:47:82:c6:21:8d:e6:
         30:20:d6:fa:c9:00:3b:f5:e1:5d:0f:62:0f:a2:ed:66:7b:2d:
         2d:a5:5d:78:2e:c6:9d:b4:9a:88:62:85:bf:18:8a:50:2b:9a:
         c1:31:d4:4f:26:60:95:d8:7b:86:ec:a2:64:db:1d:61:d8:ae:
         f7:f0:13:9d:c3:49:a9:96:a7:0f:07:96:58:dd:05:60:e6:fa:
         0b:97:40:d5:cd:14:5c:39:14:ff:d7:ce:93:10:37:70:d0:d7:
         1a:74:8d:3b:b5:6e:a4:dc:78:9e:87:1f:d7:99:07:9f:c2:f4:
         75:df:f4:ee:4a:0c:eb:0d:c4:9c:75:ab:33:03:10:55:9e:36:
         81:27:a1:12:fc:e8:77:a4:ff:1c:ce:be:97:93:63:0b:f0:d9:
         3f:4a:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:12 2026 by rpki-client