Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59ACBA1E5B5011F1A484689580EE528E.roa
File:                     59ACBA1E5B5011F1A484689580EE528E.roa (raw, json)
Hash identifier:          zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=
Subject key identifier:   FF:97:B4:D0:33:C7:B4:AD:5C:3F:9B:80:D5:CE:79:AE:BD:01:8F:07
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       04
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59ACBA1E5B5011F1A484689580EE528E.roa
Signing time:             Fri 29 May 2026 11:20:09 +0000
ROA not before:           Fri 29 May 2026 11:20:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138527
IP address blocks:        103.127.248.0/22 maxlen: 22
                          103.127.248.0/23 maxlen: 23
                          103.127.250.0/23 maxlen: 23
                          103.127.250.0/24 maxlen: 24
                          103.127.251.0/24 maxlen: 24
                          2404:2b40::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: May 29 11:20:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a197668-9ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:ea:fd:ea:27:f8:f8:fe:d5:ad:58:e7:52:
                    b9:06:00:17:51:87:88:4d:32:a2:9a:79:4e:00:ff:
                    c2:4e:2c:39:61:d9:8a:61:dd:62:50:4e:3e:20:54:
                    b9:7f:b4:31:ee:4d:aa:a2:e9:db:e9:7f:e2:f0:04:
                    ba:86:c2:13:3a:31:b2:17:bf:6c:40:ea:79:2d:e5:
                    af:ca:a4:a5:d5:01:7a:c3:10:73:e6:df:1e:b5:00:
                    7e:19:ac:55:db:e2:a9:5a:4c:da:0b:c3:20:8d:01:
                    4e:0f:0e:02:f4:27:68:c3:73:44:5f:ef:53:46:18:
                    ba:ec:51:83:5e:8e:28:34:54:9e:0a:bf:79:bb:c7:
                    a8:e3:c4:ad:90:03:21:87:9e:fd:a0:cc:5b:07:c9:
                    e9:70:e7:70:16:b4:aa:82:dc:15:f4:4b:38:5e:e7:
                    1c:50:b4:30:a6:0e:29:3a:f9:23:95:34:50:84:71:
                    c3:8b:c1:94:1e:02:7c:bc:cf:37:11:21:0d:71:e3:
                    c4:34:8f:b7:0e:07:1a:f2:69:81:b2:9b:33:ba:d3:
                    b1:5f:d4:6b:7e:0f:ea:b2:05:40:e5:56:3f:77:8a:
                    fb:68:e9:e5:b7:d8:66:6f:14:ee:ec:bf:61:08:bc:
                    91:ad:64:8b:37:2c:60:03:4e:7e:0e:93:ff:a3:e3:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:B4:D0:33:C7:B4:AD:5C:3F:9B:80:D5:CE:79:AE:BD:01:8F:07
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59ACBA1E5B5011F1A484689580EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.248.0/22
                IPv6:
                  2404:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:51:ba:c1:2c:f0:62:e8:d5:a5:14:35:bf:bf:34:54:95:
         fc:7b:65:d6:6d:14:d7:dc:59:cd:c2:c5:88:f3:30:ab:4a:46:
         3b:1b:d5:9a:53:9d:11:ff:25:67:65:06:41:2c:83:28:5f:55:
         d1:d9:a5:e2:7d:52:4d:55:0c:a0:e7:be:cc:c7:09:cd:89:fa:
         99:f8:b1:1d:0d:0e:b8:18:ce:32:3c:19:81:f0:eb:0b:f7:87:
         71:14:32:2a:5f:c7:09:46:2c:81:dd:05:d7:25:7e:15:ff:97:
         e8:9b:8d:31:62:66:af:26:63:41:77:32:3a:1e:c2:a6:d8:78:
         0f:49:52:69:25:b0:39:40:0d:29:9b:f7:94:9c:20:c8:e8:2e:
         e8:ba:a6:1a:66:5f:d5:f9:83:30:60:46:bc:b2:40:9f:15:a8:
         d6:59:31:9a:da:35:43:09:70:84:32:2d:17:41:63:24:76:c7:
         ec:85:38:86:10:f9:b4:80:bd:6e:c4:02:2c:7e:0d:f8:2e:85:
         69:9a:66:d9:87:e2:6d:7c:ab:35:af:b2:a4:37:41:d6:7c:ce:
         ad:c1:ee:5c:9a:0d:f1:d7:7a:07:06:03:b0:a2:a0:85:4c:89:
         e7:b5:38:f1:0d:4a:c6:3a:ae:1b:a3:e2:c9:99:1e:a6:7e:ad:
         bf:e2:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:48 2026 by rpki-client