Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa
File:                     F15E709A880611ECAF18133AC4F9AE02.roa (raw, json)
Hash identifier:          j2hMu4vrzb6+OQ14y8aDrlxJAHAg1Q4VRfzxB6CWYK8=
Subject key identifier:   DB:81:C3:46:31:C2:2F:28:D6:4D:1E:D7:82:8F:0B:85:66:92:43:A0
Certificate issuer:       /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial:       047A
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 11:00:00 +0000
ROA not before:           Thu 09 Apr 2026 11:00:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136903
IP address blocks:        103.98.106.0/23 maxlen: 24
                          2001:df1:1780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
        Validity
            Not Before: Apr  9 11:00:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69d786b0-89b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:ad:dd:20:16:25:15:71:de:fb:6e:7c:61:
                    ee:c3:7a:64:ad:be:aa:d8:8e:a3:0a:6c:02:e0:88:
                    d8:d8:cb:b4:3a:51:31:99:19:21:09:d3:40:21:2e:
                    77:90:a9:e6:86:06:0b:97:9a:c3:4f:4b:a8:90:88:
                    64:2d:7c:c5:68:33:27:8a:5f:08:3d:f0:73:93:17:
                    9b:0a:ea:9a:ea:50:1e:c8:a6:95:c4:57:38:fc:d2:
                    e4:05:d4:c9:d0:73:01:8f:59:71:d1:44:e4:54:86:
                    de:6a:5d:34:f2:e6:84:62:f7:f7:5b:8d:2c:68:7f:
                    34:5e:78:57:d9:59:39:fb:38:c6:9d:c4:b9:90:77:
                    41:73:a7:26:41:30:79:d3:38:13:74:fd:3f:5f:89:
                    8c:d4:99:1a:a6:d5:91:3d:55:68:95:7d:47:af:cd:
                    34:09:3e:43:b5:21:b7:26:e4:b8:7a:1f:42:06:5c:
                    17:c4:ab:98:3a:7a:06:73:34:7a:f7:62:a9:07:47:
                    a6:cc:5d:44:4f:9c:26:41:b7:d6:19:94:47:6e:f7:
                    2c:64:ed:dc:d8:d1:84:59:3f:a8:e8:43:83:ce:35:
                    42:97:0d:0b:41:c6:e0:1f:0f:5b:37:f5:23:48:e0:
                    e4:99:5a:b0:c8:ec:98:eb:fd:30:1c:75:d3:c7:06:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:C3:46:31:C2:2F:28:D6:4D:1E:D7:82:8F:0B:85:66:92:43:A0
            X509v3 Authority Key Identifier:
                keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.106.0/23
                IPv6:
                  2001:df1:1780::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:55:5d:38:33:8d:dd:96:dc:e5:2b:63:f7:04:a4:bf:2d:58:
         24:1e:93:5b:5d:3e:22:9b:6e:d9:19:4f:a0:1d:c3:2b:ae:85:
         77:40:52:9c:94:33:ce:d3:14:7b:e2:cc:02:94:64:00:e2:12:
         2e:91:3f:5f:d3:60:2d:f7:35:55:ac:27:58:9d:91:5c:ba:33:
         7c:51:df:1d:b0:26:50:e7:9c:d0:d9:7f:60:b3:79:2c:1a:65:
         ab:98:45:ef:7a:9a:9e:30:6f:98:82:38:f2:99:36:e9:50:86:
         66:31:a8:41:ac:b3:6e:a1:d9:de:14:2b:4f:83:d3:ea:2e:69:
         6e:28:02:82:6e:d7:1b:c8:a0:0a:5c:28:35:db:c1:17:5e:be:
         b8:c1:78:06:fc:50:7c:04:16:3a:53:ad:8d:47:1f:43:59:4b:
         e1:21:4b:fc:96:b2:6d:e7:1f:d7:f0:9a:3c:d7:67:dc:4b:97:
         37:7d:e3:db:4a:44:8e:d3:a7:ee:f3:01:81:67:37:83:79:4a:
         b4:4e:41:cd:64:de:c5:7b:04:1d:7e:6e:0f:93:e7:6c:42:d2:
         45:38:36:a6:30:97:b1:53:67:08:f9:78:86:0d:2b:c4:ad:ae:
         f8:d9:b7:c0:18:40:42:65:ff:6b:88:e6:21:10:ac:68:69:35:
         63:23:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:09 2026 by rpki-client