Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa
File:                     10F4AD9C81DC11F1A817832770A30FBC.roa (raw, json)
Hash identifier:          MovtHAK/PsupbFCkYS7og2K1pP0+N2V4b/xbXPJc89s=
Subject key identifier:   1F:01:71:E8:8A:6C:6B:E8:EF:B7:44:9E:4D:98:48:CB:2D:88:B0:C1
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0614
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa
Signing time:             Thu 24 Sep 2026 23:44:40 +0000
ROA not before:           Thu 24 Sep 2026 23:44:40 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     63099
IP address blocks:        103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 23:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Sep 24 23:44:40 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5b5e8-86e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:01:96:da:33:ee:4c:53:94:ee:86:3a:ce:
                    3e:8d:4f:8f:cc:8f:92:03:4a:7a:c6:fd:14:bb:9d:
                    92:45:18:12:43:e4:20:cd:c1:58:a0:7c:0a:22:5c:
                    53:4a:eb:d7:b0:53:38:c2:af:34:75:f2:15:db:78:
                    b9:39:5c:16:44:9a:f5:96:ce:f9:a1:06:b5:22:b6:
                    de:e4:cd:c6:ca:44:d7:20:a9:3e:04:33:6e:76:da:
                    c3:be:1a:29:f7:35:6f:26:c0:24:bf:54:1a:0a:3f:
                    6f:c3:9c:ba:ab:3d:eb:8a:20:88:91:eb:2c:07:b3:
                    a2:b0:f3:38:cd:7b:38:6d:ab:be:e1:a9:30:f8:79:
                    38:10:a3:8b:4a:e5:92:88:40:4f:ab:6a:21:b9:9e:
                    4b:f6:c6:0f:61:7a:64:c4:b2:7c:ba:f2:d4:79:73:
                    be:f6:60:fc:c8:9b:8d:5f:a4:19:15:8f:a7:87:4d:
                    e2:18:dc:74:b1:2b:08:1f:a4:81:2e:11:76:e2:cc:
                    31:03:35:07:83:73:16:ba:37:75:f6:de:a7:05:05:
                    08:c0:4e:84:52:85:76:7c:4f:c7:85:6d:03:34:20:
                    a0:57:e9:d6:5a:08:91:d6:b8:c7:c9:16:52:45:ff:
                    66:6e:da:86:3c:74:7b:87:52:23:64:ae:fe:e4:7a:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:71:E8:8A:6C:6B:E8:EF:B7:44:9E:4D:98:48:CB:2D:88:B0:C1
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/10F4AD9C81DC11F1A817832770A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:9e:b4:88:d7:49:08:e5:f6:a3:61:fa:c3:6e:e0:2b:1a:
         a1:e7:89:15:eb:1c:70:35:68:91:d4:7d:59:99:79:41:37:f4:
         fd:c7:ea:10:c8:2c:c8:4c:4c:56:d2:a0:f4:30:8c:d6:92:ff:
         83:02:a2:28:46:80:60:1b:90:a4:a3:11:f6:e5:b8:72:c3:a7:
         bf:71:1d:98:b2:89:d7:0d:a0:d3:5d:08:db:71:b2:bb:e1:41:
         a3:29:fb:df:e4:32:7d:af:8f:d3:4f:1f:03:15:24:1c:ff:fb:
         c3:b8:30:2a:4a:af:d8:93:7b:4f:94:5c:f6:c1:b6:66:b0:c8:
         5b:b5:b8:ee:65:a7:c2:3b:c0:b3:50:31:53:07:ee:b7:72:85:
         a2:58:c0:2a:44:7c:12:f3:a7:63:ce:a7:0d:f1:ab:55:bc:ba:
         e9:97:1b:27:a3:40:5c:ad:38:2c:db:b8:60:67:6c:41:fa:af:
         bc:80:3b:25:a1:21:cd:a6:11:42:a5:57:39:54:de:8b:23:15:
         59:8e:8f:c3:5a:7c:10:a6:60:54:1f:16:cd:c5:e0:01:46:1f:
         96:ad:81:b8:0a:64:2e:a7:94:45:4b:04:5b:b6:18:ca:bf:60:
         82:b2:e5:b0:53:ab:f0:69:e1:65:1c:d1:ad:b2:3e:51:e7:12:
         73:13:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:45:28 2026 by rpki-client