Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/41F66AE4CA3D11F1969D92815611F970.roa
File:                     41F66AE4CA3D11F1969D92815611F970.roa (raw, json)
Hash identifier:          9CpJWupTyTXh0UyY+flgAhOlt46sYM8wDCtKaS8zdnE=
Subject key identifier:   F2:50:44:02:79:AD:93:69:9E:93:02:AF:8B:AC:51:9D:4C:74:10:38
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B6C
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/41F66AE4CA3D11F1969D92815611F970.roa
Signing time:             Sat 17 Oct 2026 15:13:07 +0000
ROA not before:           Sat 17 Oct 2026 15:13:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58895
IP address blocks:        103.203.44.0/24 maxlen: 24
                          116.213.32.0/24 maxlen: 24
                          116.213.33.0/24 maxlen: 24
                          116.213.34.0/24 maxlen: 24
                          116.213.35.0/24 maxlen: 24
                          123.253.92.0/24 maxlen: 24
                          123.253.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 19:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2924 (0xb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Oct 17 15:13:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad39083-67dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:59:cc:08:4f:fa:26:89:5f:cd:55:e3:03:
                    1c:ab:2e:0a:77:20:67:30:d4:96:ae:c9:0e:97:41:
                    14:4d:56:f1:1f:51:1e:cc:3e:02:f7:6a:d1:bc:74:
                    8d:fb:6f:1d:fa:82:53:cb:44:c0:29:dc:0a:3c:45:
                    c6:e7:67:1f:28:7d:74:36:cb:1d:da:43:d0:cf:bd:
                    ec:be:74:61:ea:0b:b6:c9:89:d5:da:c7:dc:26:22:
                    e1:5d:82:d2:75:e9:4f:01:17:6c:ab:68:0b:78:d4:
                    60:13:35:c2:11:e8:fa:f9:a7:1d:e1:5c:d1:af:0b:
                    80:ba:e5:6e:5e:12:18:e9:d2:9d:9e:92:6c:43:fb:
                    d7:1b:4f:f8:f7:bf:64:bd:e0:bd:be:58:1f:e2:f1:
                    61:d3:47:0a:5b:1f:68:df:5a:a2:0b:17:25:1f:b6:
                    82:08:87:54:e0:dc:7a:ec:50:a1:d2:c5:b0:cd:b9:
                    73:b6:6e:7c:e1:c9:6f:a6:ab:6a:38:c8:5c:09:f4:
                    15:89:2d:f3:23:69:6d:5c:90:1e:38:1c:26:9a:25:
                    fa:5a:b4:aa:41:8d:82:35:89:55:aa:71:45:d4:b4:
                    c0:38:21:1b:52:f7:9b:22:52:54:22:08:c3:4b:e3:
                    f4:0f:93:9d:a8:39:05:ba:15:e2:d9:b4:f5:79:da:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:50:44:02:79:AD:93:69:9E:93:02:AF:8B:AC:51:9D:4C:74:10:38
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/41F66AE4CA3D11F1969D92815611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.44.0/24
                  116.213.32.0/22
                  123.253.92.0/24
                  123.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ea:f8:3d:05:c1:f8:7e:01:3b:64:f8:48:9a:8b:5a:48:d3:
         f6:54:8e:3b:ef:6b:0c:12:b0:d3:63:c5:cb:b6:56:87:3e:ed:
         92:74:da:88:ed:2d:b6:ee:5f:dc:7d:5d:bc:4a:a6:aa:cb:5c:
         76:91:72:c3:2c:86:a3:9d:c9:3d:12:88:dc:18:33:b0:73:4a:
         ad:ec:fb:ad:f0:1a:eb:f1:54:cd:87:eb:23:5b:a2:90:99:a8:
         ca:ca:26:fa:bb:95:30:21:d5:db:36:8f:f9:65:07:5b:13:23:
         f8:15:62:67:ab:cb:ee:53:9c:5e:19:59:4f:2e:3f:6c:e5:07:
         3f:be:9b:e1:23:7b:07:05:b1:0a:0a:83:d2:ae:0d:6d:93:b4:
         98:b2:0c:60:c4:e3:f0:f9:b8:de:1a:be:e5:6a:31:8f:19:3a:
         06:a5:71:b8:97:af:c9:62:71:be:b6:19:e6:4f:a8:e3:9e:99:
         ef:4e:50:c7:dc:7d:a5:99:24:50:93:49:de:2c:83:32:10:1d:
         5f:26:78:60:f0:97:b8:57:4f:56:45:bb:5d:27:f8:08:62:79:
         ab:e8:f0:92:7b:41:cb:1e:7f:44:8a:db:e9:96:32:de:e5:fc:
         b0:48:4c:48:e7:79:8d:af:77:42:ff:f1:cc:6b:0a:13:99:ae:
         92:9d:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:00 2026 by rpki-client