Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/81C9B5A4BBFA11ED99272016C4F9AE02.roa
File:                     81C9B5A4BBFA11ED99272016C4F9AE02.roa (raw, json)
Hash identifier:          XQiiRoZi6pRqCcdlCvd3IdGsHWdpm/jnCGN7DrFAwWE=
Subject key identifier:   C7:9D:B4:45:71:D6:E6:35:58:5F:12:16:33:A1:CA:60:7F:81:B7:97
Certificate issuer:       /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
Certificate serial:       3588
Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/81C9B5A4BBFA11ED99272016C4F9AE02.roa
Signing time:             Thu 28 May 2026 15:10:09 +0000
ROA not before:           Thu 28 May 2026 15:10:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.16.102.0/23 maxlen: 32
                          2001:de8:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13704 (0x3588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
        Validity
            Not Before: May 28 15:10:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a185ad1-d338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:64:03:98:a1:9a:30:a9:ac:01:4d:87:73:
                    b5:46:66:bd:0d:1d:5f:2c:e6:58:55:df:45:b8:35:
                    f8:b0:c5:83:ae:ef:28:43:99:f4:8a:0f:77:85:5d:
                    94:d6:8b:f4:9b:ac:9e:37:6d:37:72:af:fc:33:18:
                    39:d7:48:4d:f4:b7:c6:29:91:42:46:3f:f7:f6:80:
                    fd:7e:2f:d9:2b:6b:37:7d:16:77:06:d7:90:24:0e:
                    43:24:1e:50:6d:cc:58:29:b0:13:48:eb:01:a3:e1:
                    d1:7d:3d:71:95:bd:01:8f:e6:90:bb:27:ac:81:e3:
                    eb:3d:82:81:bb:d0:52:e1:ba:6d:93:d1:b4:36:cb:
                    d6:c0:a3:d9:e2:b2:56:c9:53:d7:68:6d:b6:8a:dd:
                    33:91:d9:0e:f1:ea:bd:ab:ff:cd:e9:4c:33:f9:ac:
                    b7:d5:f2:27:51:09:67:9b:c3:c8:02:a6:00:87:0f:
                    0a:fb:1e:fc:14:24:5a:99:9c:ba:3a:24:1c:1e:86:
                    84:c2:46:7b:fc:39:c9:d3:bf:9a:a1:ad:82:6b:a5:
                    b6:c3:7a:30:77:e3:d3:8f:ed:fc:ac:6c:93:39:5d:
                    62:bd:82:d8:9d:9e:61:bf:dc:c4:0a:28:2b:ef:ff:
                    50:c2:8e:c3:bd:02:ec:a3:91:31:cb:5a:1a:31:b6:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:B4:45:71:D6:E6:35:58:5F:12:16:33:A1:CA:60:7F:81:B7:97
            X509v3 Authority Key Identifier:
                keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/81C9B5A4BBFA11ED99272016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.102.0/23
                IPv6:
                  2001:de8:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:09:39:a4:ed:27:39:c5:0e:b0:14:26:d2:a6:d7:9c:92:8e:
         ee:ab:bc:d3:e7:0e:27:ba:c3:6e:22:d3:f0:aa:c5:0a:3e:8d:
         07:0c:26:79:db:be:f6:f5:1e:60:81:06:9d:a3:38:94:55:1c:
         18:9b:e1:8c:54:44:d0:86:89:36:07:ac:a2:ba:52:be:93:8d:
         0b:75:d1:d9:59:35:7a:a4:b1:76:02:60:f9:48:77:34:e6:fb:
         08:c3:56:65:d7:d9:60:b4:7c:49:5b:f5:41:7f:a4:81:10:7b:
         76:4b:42:45:0f:ca:ee:f7:ca:02:0f:c6:c8:84:4f:32:76:0b:
         fd:14:20:64:20:4b:03:7e:c0:dc:b2:35:69:85:3f:bd:b5:9b:
         a4:8f:dd:c7:9f:73:65:00:f4:1b:67:8d:50:c5:a7:64:a1:a0:
         88:c8:fe:36:85:58:26:ca:77:43:0c:bf:48:39:ee:1d:a6:78:
         eb:07:b8:3d:fa:cf:99:bc:a6:6b:64:60:92:30:ed:6c:22:5d:
         fa:89:8d:71:ab:9d:2b:8b:09:b2:65:f8:0e:b9:9a:04:c6:67:
         b7:32:f4:b1:b1:53:6d:dd:85:a8:30:56:d9:4e:14:96:d1:2c:
         7e:5f:06:d1:9f:f0:7f:3c:57:c7:14:ae:4f:dc:0d:36:c6:f7:
         66:2c:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:26 2026 by rpki-client