Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/91CB97905BD211EBA9178181C4F9AE02.roa
File:                     91CB97905BD211EBA9178181C4F9AE02.roa (raw, json)
Hash identifier:          qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=
Subject key identifier:   38:38:EA:4B:2C:1F:A2:4F:22:67:C7:53:6A:98:D0:53:B5:DC:F5:2E
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1B15
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/91CB97905BD211EBA9178181C4F9AE02.roa
Signing time:             Wed 22 Apr 2026 16:20:41 +0000
ROA not before:           Wed 22 Apr 2026 16:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24440
IP address blocks:        103.213.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6933 (0x1b15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: Apr 22 16:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e8f559-02ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:39:20:0f:35:a6:3f:c1:bc:62:87:98:b6:
                    55:d0:43:4e:23:ef:bf:93:27:8f:79:35:2f:28:da:
                    7d:e9:8f:94:7f:cf:20:3d:60:68:0e:7c:74:c8:13:
                    10:d0:a6:5b:d1:e6:06:3a:bf:48:48:5f:d9:23:08:
                    c0:f1:e8:0a:69:71:eb:00:94:61:cb:bf:35:24:eb:
                    d3:25:e7:c3:db:01:f3:e8:d5:a1:ea:f5:f8:a9:05:
                    81:3f:de:98:f6:be:53:2f:dd:61:37:90:b0:d7:5f:
                    fb:71:c3:ce:f5:69:bc:7a:95:0f:50:6e:1d:65:75:
                    8b:25:3e:e9:02:df:4c:50:5f:c5:e1:c0:21:d5:e2:
                    93:02:3e:0e:8e:43:91:09:73:33:6b:9d:80:e0:6c:
                    62:68:b3:59:d3:71:de:01:2d:8e:cc:d1:8d:d8:ed:
                    2e:c5:57:cf:6b:99:78:99:d0:97:53:a3:e0:a0:52:
                    11:ed:0b:d0:5c:49:8e:0c:d7:4b:e6:c9:59:56:da:
                    7f:64:45:b5:6c:f3:43:9a:24:57:29:bd:52:d6:e0:
                    86:52:ca:89:f0:1d:cf:84:dc:aa:31:f0:80:55:5c:
                    38:c2:0c:44:f0:33:2e:7f:a3:bc:4b:49:f7:9a:6e:
                    11:8c:e4:71:4d:08:93:a1:cc:a2:55:8d:a8:7e:f7:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:38:EA:4B:2C:1F:A2:4F:22:67:C7:53:6A:98:D0:53:B5:DC:F5:2E
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/91CB97905BD211EBA9178181C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:0a:df:d6:2d:6e:16:a6:03:09:45:d4:22:dd:98:e3:67:
         24:2e:bf:ac:4f:08:0b:29:e0:44:c5:bd:e1:df:e8:72:a3:aa:
         f4:4a:50:f6:55:8e:0c:51:dd:dd:77:c5:ed:33:9c:08:ec:35:
         17:a3:66:87:aa:39:b8:5b:75:27:cc:f8:01:58:36:cd:1b:10:
         ba:4a:e1:a6:34:ea:b6:37:6e:26:4b:e3:ef:0e:e4:bc:5b:f9:
         da:54:4f:39:0f:89:ee:7d:87:44:06:b6:a4:f6:e4:68:af:af:
         b3:33:5f:01:93:a8:05:45:ef:f7:0b:a0:7c:fd:14:22:86:db:
         bb:68:5d:f0:49:e2:ce:78:27:49:4a:5c:63:ac:5c:84:69:01:
         81:05:2a:05:73:cf:2d:36:00:e7:f2:25:92:73:6d:19:3a:fe:
         39:cc:2c:69:d3:8f:ac:83:43:8e:b4:86:b0:7f:06:0e:e5:1f:
         00:ed:88:47:98:c8:e9:21:f7:f9:be:0e:b1:96:fa:f5:20:61:
         4a:ea:04:a5:62:b1:cb:e1:fe:e8:c9:e3:63:47:17:ab:6d:32:
         51:33:01:28:52:d6:21:d8:be:49:e5:d9:4c:79:62:37:fa:9e:
         d3:c7:e3:88:42:72:c1:10:8b:34:5b:84:c0:7e:77:21:5b:ba:
         c3:ca:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:48:24 2026 by rpki-client