Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa
File:                     D8831B4A4E8411F19692FE9BB2833773.roa (raw, json)
Hash identifier:          AmaSg04K09nhgDvkJFll07EOLr2ig9e1az30iEGIY3w=
Subject key identifier:   B0:63:4E:D5:3D:24:EB:92:EB:A9:CF:B5:89:C8:0E:88:80:12:F9:D7
Certificate issuer:       /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial:       08CE
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa
Signing time:             Wed 13 May 2026 04:33:10 +0000
ROA not before:           Wed 13 May 2026 04:33:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     963
IP address blocks:        103.127.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
                          rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254 (0x8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
        Validity
            Not Before: May 13 04:33:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a03ff06-255e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:7d:23:c6:8a:87:0d:26:9e:b0:f4:9c:ee:
                    93:b5:f2:f2:2a:92:16:bf:c4:e6:79:12:75:e8:3e:
                    fc:67:21:a7:c0:22:2c:44:0b:21:00:37:f1:83:f1:
                    06:95:f8:c3:70:50:99:6f:78:4f:84:6d:bb:55:c5:
                    f0:9e:90:c4:28:f8:00:d8:4a:d7:35:9a:81:81:d4:
                    4c:76:00:fa:dd:f0:86:ef:f4:9f:ee:69:0f:cb:09:
                    56:ca:37:a7:4e:d7:91:81:67:68:c8:92:a1:5d:68:
                    69:3c:a7:1a:c2:16:89:a7:c8:67:92:fc:22:a3:0a:
                    14:c9:8d:00:38:e7:06:ef:92:e7:b2:9e:6f:ae:a5:
                    d3:c5:58:4c:60:fb:ca:50:41:fc:57:54:df:72:92:
                    46:90:56:42:0b:74:7f:ab:a9:10:60:74:52:84:4d:
                    12:15:62:ef:13:e4:5e:9b:0c:a6:a3:6e:b9:31:86:
                    b0:c8:79:c2:17:15:ce:5b:f7:d5:ae:00:f9:00:71:
                    3f:cb:db:d5:41:9e:0a:19:31:35:65:eb:7f:29:bc:
                    2a:ee:40:b1:92:3b:bb:af:7b:94:56:42:8e:9c:3d:
                    d3:44:07:5c:22:85:48:63:85:47:34:b1:6f:89:82:
                    d7:8f:30:29:82:b9:cd:33:1c:7b:6c:37:78:aa:65:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:63:4E:D5:3D:24:EB:92:EB:A9:CF:B5:89:C8:0E:88:80:12:F9:D7
            X509v3 Authority Key Identifier:
                keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:fa:fa:42:a8:da:36:73:6c:b5:e4:cf:e1:a3:03:75:53:
         a5:a2:6c:e9:d4:be:9a:fe:34:07:5b:06:96:60:c1:85:1b:bf:
         30:83:9c:aa:af:a8:95:05:93:ca:16:f3:1e:da:ea:39:7c:41:
         8b:70:12:ff:6d:5e:3c:88:3a:cd:48:b1:ba:1a:14:28:8c:87:
         52:5f:6e:ad:0f:ad:c2:09:c0:21:a8:07:50:d1:64:5b:5b:23:
         52:10:42:c9:14:a4:ed:fb:d7:6d:6e:ef:31:fb:09:18:1a:19:
         ab:2f:68:13:4a:eb:ad:4a:24:94:75:d0:93:44:8b:cf:1e:c9:
         2a:7c:39:ef:4f:cc:95:95:3f:5a:fe:bc:dc:73:fe:96:f2:b7:
         26:f3:ab:ac:e4:25:65:95:81:22:31:e2:59:d2:79:bc:f0:2e:
         8a:4a:3c:36:52:63:bb:26:6a:46:89:60:c4:b4:0b:d6:30:a5:
         9c:4d:eb:c9:ea:41:7e:b9:e9:0a:07:32:58:7a:6e:3b:d1:72:
         a5:eb:35:c3:78:b7:8e:d9:08:de:94:94:06:a3:75:d7:ad:81:
         a3:97:20:6b:01:c3:04:7f:1a:84:b8:d1:25:77:2f:ab:4f:db:
         b0:d7:90:2e:f8:e3:7f:75:be:11:e9:4d:57:88:2e:bf:b0:4b:
         a8:bf:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:10 2026 by rpki-client