Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/FA73196C6DE711F1AA720C725CA30FBC.roa
File:                     FA73196C6DE711F1AA720C725CA30FBC.roa (raw, json)
Hash identifier:          pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=
Subject key identifier:   E9:3A:97:CF:A5:CF:F3:5A:E3:DE:E2:95:D4:51:6E:EE:A8:5A:06:5B
Certificate issuer:       /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial:       0580
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/FA73196C6DE711F1AA720C725CA30FBC.roa
Signing time:             Mon 22 Jun 2026 03:10:53 +0000
ROA not before:           Mon 22 Jun 2026 03:10:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     963
IP address blocks:        103.91.8.0/22 maxlen: 24
                          123.253.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
                          rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
        Validity
            Not Before: Jun 22 03:10:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a38a7bd-3cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:fd:47:5d:f8:6e:74:35:12:ac:5d:c0:db:
                    5e:c6:70:d7:05:c3:f9:60:1d:8a:4c:19:d6:6c:39:
                    2c:08:00:8b:85:fd:fa:d6:d9:aa:44:cd:dc:e7:1c:
                    03:87:59:3f:ae:63:c9:9c:fc:6d:40:a3:be:54:14:
                    48:a5:29:5a:6e:03:9e:d1:0e:dd:bf:25:46:2c:b4:
                    e2:93:4b:50:8a:71:ff:dc:26:74:fb:c1:7d:62:9a:
                    05:27:86:06:47:63:eb:69:5a:05:26:eb:41:0b:f4:
                    a1:5b:1e:2a:59:68:e5:fe:2f:99:0c:a9:b3:d2:24:
                    76:24:f3:83:74:a7:50:41:ab:6b:8b:ba:d1:84:90:
                    ff:9d:ca:84:26:aa:9e:10:93:50:98:82:58:40:20:
                    5f:ac:6e:c0:5e:e2:65:5d:62:08:67:58:d3:2a:b7:
                    2d:65:96:44:87:0c:57:7e:15:29:2f:b5:95:50:c9:
                    12:11:dd:99:df:51:67:ca:6e:27:70:a4:c5:81:25:
                    7c:fb:92:d7:61:89:e9:68:81:ce:36:8c:cd:da:b4:
                    4b:a6:7f:77:52:44:72:19:52:40:82:86:5e:54:3c:
                    93:f6:3d:54:cc:bc:6a:6e:fb:7f:88:d9:df:58:4c:
                    da:26:45:08:ca:e1:65:98:ad:83:ab:7d:68:39:99:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3A:97:CF:A5:CF:F3:5A:E3:DE:E2:95:D4:51:6E:EE:A8:5A:06:5B
            X509v3 Authority Key Identifier:
                keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/FA73196C6DE711F1AA720C725CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.8.0/22
                  123.253.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:ee:5c:07:0e:b5:2e:9c:81:c4:2f:86:9e:6d:43:22:af:
         1a:35:8f:09:98:8a:eb:cc:27:09:34:04:64:38:2b:fb:ee:01:
         4a:75:00:39:72:d1:62:f4:9b:43:3c:ec:c2:60:44:e7:77:60:
         2b:33:74:ff:cb:8d:cf:91:82:fe:1b:9d:82:0c:7a:ab:96:df:
         1e:f8:2a:49:58:48:d8:67:a0:ac:08:a5:d3:9c:05:f3:85:66:
         2b:6d:ea:29:5c:aa:41:05:70:1c:f3:69:e3:82:73:f6:3e:e5:
         64:f5:1d:fc:57:ca:85:6a:9c:68:ca:d5:dd:a9:24:86:c4:c4:
         52:64:3a:0f:86:48:e5:65:45:a9:7c:45:b5:25:f2:61:a1:4b:
         49:11:45:f2:36:2e:c9:48:24:1d:47:08:b9:49:a1:a2:42:e4:
         fd:77:2a:d1:f7:13:01:25:8c:84:8f:b2:c0:9b:ef:f1:49:9d:
         e6:14:88:41:42:7f:d6:17:88:7a:61:be:17:2f:07:42:8d:5c:
         b6:2c:ce:48:ed:e7:d9:42:bb:aa:66:f6:c5:4e:4b:ea:b0:23:
         ea:8f:07:d2:20:fb:f1:24:2c:5f:fa:c1:ec:1a:30:1b:33:69:
         97:07:e8:0f:c4:72:f1:0f:e0:10:7a:71:fb:f7:5e:c4:8b:4b:
         3f:8a:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:36 2026 by rpki-client