Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File:                     81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier:          XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=
Subject key identifier:   CC:26:13:BA:55:A9:1F:BA:36:C8:10:B9:F9:F2:EE:93:53:46:41:24
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       026D
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:35:23 +0000
ROA not before:           Thu 09 Apr 2026 02:35:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150778
IP address blocks:        103.93.140.0/24 maxlen: 24
                          2402:2c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Apr  9 02:35:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d7106a-670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:45:56:77:08:02:76:10:23:76:7d:6a:6e:
                    03:6f:a0:9c:d2:15:ff:e8:ff:16:e5:f4:e2:73:20:
                    b7:80:6d:aa:69:9b:48:07:fc:aa:a2:bc:1f:9b:14:
                    60:e7:82:49:39:ae:98:5b:6c:7c:4e:f5:99:be:77:
                    08:03:ea:72:c4:5a:13:9a:61:79:58:e0:ab:c4:8b:
                    ea:74:3c:27:da:87:53:b7:8b:65:b0:43:bf:94:19:
                    a0:e0:b1:5f:46:d4:21:ea:25:0d:6c:a2:6f:3a:eb:
                    24:de:f1:bd:1a:84:a6:9f:df:c3:59:5b:3c:b1:4e:
                    11:5e:b1:37:11:c0:17:66:20:7b:93:20:84:b2:8f:
                    bd:85:3a:c1:a7:c0:66:05:61:a6:1d:47:fc:43:cf:
                    7e:21:d8:4a:bc:f3:e9:70:2f:96:aa:c2:cc:66:2d:
                    32:b9:e8:08:e4:58:26:ad:89:62:cc:97:d2:1b:87:
                    7e:85:ac:8f:27:82:73:fa:63:5a:10:25:ee:43:c6:
                    9e:11:d9:99:2b:d3:e4:fa:89:a4:a2:3d:04:18:7e:
                    f6:54:b1:77:12:25:42:5a:b6:46:d6:1a:cf:c0:11:
                    0c:07:f4:d1:dd:b3:77:65:91:a2:38:12:2f:46:37:
                    f3:c0:b2:10:38:57:a5:e6:d8:d0:d2:bb:89:f2:d2:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:13:BA:55:A9:1F:BA:36:C8:10:B9:F9:F2:EE:93:53:46:41:24
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.140.0/24
                IPv6:
                  2402:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:e5:58:85:20:4b:89:df:db:6a:cc:7f:20:90:22:f5:ab:
         90:be:b9:30:83:52:a5:3d:56:b2:75:d5:c2:08:14:f0:db:10:
         cb:6d:a9:f2:a1:2e:77:e7:13:21:2a:70:ac:8e:9f:17:bf:76:
         76:50:26:2e:f8:5b:ec:38:8a:5e:78:5d:9e:c8:95:2b:7c:e0:
         e4:57:e1:b1:fb:ad:5e:3b:26:17:ca:86:8e:7f:4c:b1:a0:b5:
         14:37:aa:ad:3d:4b:ea:2e:71:60:55:c4:5e:2f:f3:4d:6a:95:
         40:6a:07:54:fb:4e:04:52:93:e1:b9:21:eb:4c:ca:7f:01:6c:
         d2:8a:4b:5f:3d:86:6a:24:93:64:44:1a:79:2d:1e:ee:7d:73:
         bc:41:b5:7c:f0:c5:50:31:3a:29:f9:b0:d5:13:51:11:2f:82:
         62:bf:47:c3:b6:fe:54:39:d7:ff:ad:22:22:8a:04:3f:4b:dd:
         c5:35:53:3a:bf:f2:7c:d3:90:f2:c1:6d:1e:8d:e5:b4:ea:75:
         8d:0a:5d:42:74:6f:39:a0:d6:67:70:34:c7:b9:46:e5:57:fd:
         f4:f1:bb:b6:3e:6d:eb:5e:db:1e:fa:16:85:1e:ec:c6:d7:1d:
         dc:68:b5:0a:12:b0:58:75:f0:68:7d:e0:e2:f1:c9:34:77:f4:
         81:af:95:77
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjYwNDA5MDIzNTIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3MTA2YS02NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntpFVncIAnYQI3Z9am4Db6Cc0hX/6P8W5fTicyC3gG2qaZtIB/yqorwfmxRg
54JJOa6YW2x8TvWZvncIA+pyxFoTmmF5WOCrxIvqdDwn2odTt4tlsEO/lBmg4LFf
RtQh6iUNbKJvOusk3vG9GoSmn9/DWVs8sU4RXrE3EcAXZiB7kyCEso+9hTrBp8Bm
BWGmHUf8Q89+IdhKvPPpcC+WqsLMZi0yuegI5FgmrYlizJfSG4d+hayPJ4Jz+mNa
ECXuQ8aeEdmZK9Pk+omkoj0EGH72VLF3EiVCWrZG1hrPwBEMB/TR3bN3ZZGiOBIv
RjfzwLIQOFel5tjQ0ruJ8tIa2wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMwmE7pV
qR+6NsgQufny7pNTRkEkMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURBMjAvQjczQkYzN0NCNUUzMTFFREFCNTQ0NTVBQzRGOUFFMDIvODFCQTkwNUFC
NUU4MTFFREE3MDkxMTYzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAZ12MMA0EAgACMAcDBQAkAiwgMA0GCSqGSIb3DQEBCwUAA4IBAQAA
9+VYhSBLid/basx/IJAi9auQvrkwg1KlPVayddXCCBTw2xDLbanyoS535xMhKnCs
jp8Xv3Z2UCYu+FvsOIpeeF2eyJUrfODkV+Gx+61eOyYXyoaOf0yxoLUUN6qtPUvq
LnFgVcReL/NNapVAagdU+04EUpPhuSHrTMp/AWzSiktfPYZqJJNkRBp5LR7ufXO8
QbV88MVQMTop+bDVE1ERL4Jiv0fDtv5UOdf/rSIiigQ/S93FNVM6v/J805DywW0e
jeW06nWNCl1CdG85oNZncDTHuUblV/308bu2Pm3rXtse+haFHuzG1x3caLUKErBY
dfBofeDi8ck0d/SBr5V3
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:33 2026 by rpki-client