Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa
File:                     58722CCE5B5011F1A484689580EE528E.roa (raw, json)
Hash identifier:          ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=
Subject key identifier:   81:76:F5:BA:15:04:54:02:E5:B7:37:F3:35:C7:BF:E8:8B:74:81:09
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       02
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa
Signing time:             Fri 29 May 2026 11:20:07 +0000
ROA not before:           Fri 29 May 2026 11:20:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     13444
IP address blocks:        103.127.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: May 29 11:20:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a197666-7238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:df:26:50:da:dc:fd:a5:ee:a7:2b:ce:fd:
                    6e:54:99:64:99:21:ff:90:5b:63:9a:de:77:9c:3b:
                    c2:a6:66:d9:df:3f:96:dd:fc:9a:6a:61:27:0b:2c:
                    68:9c:93:cc:aa:13:b8:88:92:26:f0:95:35:0a:70:
                    fd:ba:00:82:3e:7c:df:92:c6:f5:c9:c1:6b:51:8e:
                    8d:7c:01:71:98:da:37:24:bc:0c:b9:fc:89:0b:d5:
                    92:80:45:28:f2:39:16:75:5d:f4:42:a2:f6:5b:ac:
                    4e:db:e6:28:8c:ef:53:16:38:4a:1a:50:91:7c:65:
                    87:0f:85:0b:a8:e5:21:dd:0f:d2:47:6a:1c:b3:c7:
                    b1:fa:fd:9c:5d:08:02:90:33:04:79:e4:73:a7:b9:
                    c2:45:3d:a5:16:60:bd:28:44:d0:d3:fd:88:b9:42:
                    b7:f3:fc:71:80:e1:80:aa:bb:13:9e:d0:77:4c:ff:
                    dd:bc:1b:7b:d6:fa:99:7e:a4:08:c9:71:54:c4:b8:
                    d4:c6:13:89:c7:a9:a9:10:4a:c8:7c:21:b0:1b:5c:
                    33:20:b4:9a:d4:0a:92:86:b0:db:93:06:97:52:2c:
                    15:d4:5d:a0:2a:2c:e4:36:83:8f:d6:06:32:b7:a6:
                    cf:67:c0:b6:52:ec:a7:68:67:74:67:22:e0:44:7e:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:F5:BA:15:04:54:02:E5:B7:37:F3:35:C7:BF:E8:8B:74:81:09
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/58722CCE5B5011F1A484689580EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:e6:a4:9b:64:87:c8:e1:8e:6c:8c:a0:a0:40:b8:4c:52:8f:
         09:c1:2d:34:0f:a4:fa:97:3c:27:14:d2:b6:7e:3f:ca:c7:6a:
         d8:0c:b5:2e:3a:bf:47:4a:74:e5:89:83:93:50:24:fb:36:c2:
         d5:fc:fd:25:2a:7a:b5:9a:b0:fd:41:48:77:63:38:92:c8:e3:
         4b:03:ed:a6:77:ac:6e:50:a2:a8:2f:a6:c5:8f:06:51:97:ca:
         12:aa:55:ff:11:a4:6b:d8:33:7b:d9:f6:dc:42:f1:23:99:7d:
         98:05:6e:1f:04:1a:37:5b:b1:2b:34:bb:dc:5f:c9:bb:79:6a:
         10:ef:a4:48:c4:61:70:44:a9:3c:8c:18:92:18:77:23:d7:66:
         3e:de:33:02:fc:aa:fd:3d:a2:9b:26:6b:ac:86:c9:45:b2:bd:
         51:8b:10:3c:82:b4:19:da:c8:01:1b:ae:d6:aa:8b:7c:0c:17:
         ea:a1:02:ab:6e:0e:0d:7c:84:04:d1:d8:bc:97:bf:55:c9:05:
         b0:fb:2d:27:a6:5a:a0:a2:b9:6d:1b:7c:c2:68:a4:31:14:ad:
         7e:33:71:36:a6:7a:1b:c5:48:ae:c5:c4:75:bf:2c:3c:96:c4:
         13:5f:9c:a1:cd:e7:5e:bc:70:57:f1:6c:9e:2e:a4:99:0c:41:
         ab:83:04:24
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NEZCNTExMC8GA1UEBRMoOTE4NTE2MUY0NkY1NkE4M0JEMThBNUJGMjQ5MDg0RDY4
MzRDQUMxNzAeFw0yNjA1MjkxMTIwMDZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMTk3NjY2LTcyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkd98mUNrc/aXupyvO/W5UmWSZIf+QW2Oa3necO8KmZtnfP5bd/JpqYScLLGic
k8yqE7iIkibwlTUKcP26AII+fN+SxvXJwWtRjo18AXGY2jckvAy5/IkL1ZKARSjy
ORZ1XfRCovZbrE7b5iiM71MWOEoaUJF8ZYcPhQuo5SHdD9JHahyzx7H6/ZxdCAKQ
MwR55HOnucJFPaUWYL0oRNDT/Yi5Qrfz/HGA4YCquxOe0HdM/928G3vW+pl+pAjJ
cVTEuNTGE4nHqakQSsh8IbAbXDMgtJrUCpKGsNuTBpdSLBXUXaAqLOQ2g4/WBjK3
ps9nwLZS7KdoZ3RnIuBEfuY9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgXb1uhUE
VALltzfzNce/6It0gQkwHwYDVR0jBBgwFoAUkYUWH0b1aoO9GKW/JJCE1oNMrBcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RkI1L0VGOTg3RUUyMDlE
MTExRTk5NTYwN0I1MkM0RjlBRTAyL2tZVVdIMGIxYW9POUdLV19KSkNFMW9OTXJC
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva1lVV0gwYjFhb085R0tXX0pKQ0Uxb05NckJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi81ODcyMkNDRTVC
NTAxMUYxQTQ4NDY4OTU4MEVFNTI4RS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnf/gwDQYJKoZIhvcNAQELBQADggEBALXmpJtkh8jhjmyMoKBAuExS
jwnBLTQPpPqXPCcU0rZ+P8rHatgMtS46v0dKdOWJg5NQJPs2wtX8/SUqerWasP1B
SHdjOJLI40sD7aZ3rG5QoqgvpsWPBlGXyhKqVf8RpGvYM3vZ9txC8SOZfZgFbh8E
GjdbsSs0u9xfybt5ahDvpEjEYXBEqTyMGJIYdyPXZj7eMwL8qv09opsma6yGyUWy
vVGLEDyCtBnayAEbrtaqi3wMF+qhAqtuDg18hATR2LyXv1XJBbD7LSemWqCiuW0b
fMJopDEUrX4zcTamehvFSK7FxHW/LDyWxBNfnKHN5168cFfxbJ4upJkMQauDBCQ=
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:46 2026 by rpki-client