Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/17894A68318411F0BC1DD041C4F9AE02.roa
File:                     17894A68318411F0BC1DD041C4F9AE02.roa (raw, json)
Hash identifier:          8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=
Subject key identifier:   5F:36:AF:D9:A7:8D:22:0D:12:26:CC:D6:DB:D7:C7:B2:E5:13:A6:B4
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       0105
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/17894A68318411F0BC1DD041C4F9AE02.roa
Signing time:             Sun 03 May 2026 07:39:24 +0000
ROA not before:           Sun 03 May 2026 07:39:24 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     35876
IP address blocks:        103.117.136.0/22 maxlen: 24
                          103.121.92.0/22 maxlen: 24
                          103.186.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: May  3 07:39:24 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f6fbac-fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:b6:17:26:29:b7:a2:00:bb:b7:ec:bb:2a:
                    84:0a:e5:e3:c1:04:39:83:4d:12:67:82:29:c4:63:
                    a8:d2:dd:54:3d:00:5b:96:5b:89:f8:6b:a8:d5:16:
                    2b:8e:da:62:c5:d5:31:0d:17:73:50:4f:e6:2b:3f:
                    ef:2d:c4:d2:2c:0f:4a:24:0c:00:9d:7a:59:97:f8:
                    3b:5b:97:4c:24:1b:58:9d:f9:ec:a2:8d:4d:90:4d:
                    40:5a:9b:9d:76:ef:5b:23:78:09:04:10:43:64:69:
                    57:85:5a:ad:3e:82:ff:10:bf:30:25:20:e7:2c:e9:
                    e3:af:cf:42:89:89:d9:3a:45:c6:d8:ab:56:46:fa:
                    41:16:67:f4:36:a2:71:ec:9d:83:e8:29:89:15:b8:
                    36:38:a6:eb:98:66:a7:65:75:1b:9b:bf:b4:ec:43:
                    a2:04:a2:33:b6:1b:39:cf:a0:c6:93:24:e2:29:2d:
                    48:fb:e3:ca:b8:a2:3c:2f:d1:58:4d:62:0c:cb:ed:
                    1b:e1:99:5b:07:74:68:fd:fb:c4:10:9b:64:d8:e4:
                    18:65:b3:64:5f:8e:e1:c5:46:ee:6b:42:61:e3:48:
                    9b:3f:5d:70:8d:c3:4c:b5:69:56:a1:02:fa:20:b3:
                    12:2a:10:e9:63:af:84:d9:20:d4:02:07:22:c6:30:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:36:AF:D9:A7:8D:22:0D:12:26:CC:D6:DB:D7:C7:B2:E5:13:A6:B4
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/17894A68318411F0BC1DD041C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.136.0/22
                  103.121.92.0/22
                  103.186.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:bd:98:af:28:0c:84:88:3f:9d:12:a6:15:82:57:c5:e6:a1:
         e4:45:a3:82:90:19:a3:2c:68:a8:8b:92:2a:36:cc:dd:14:7d:
         0e:1a:77:3d:84:6a:5a:3d:fb:ad:0c:40:a4:64:61:2a:a2:0b:
         0a:d1:bf:30:66:9f:cf:13:5d:95:c3:b2:2a:bd:dc:7b:ad:f9:
         1d:ae:56:f5:01:25:91:de:ca:d2:c8:ac:16:2d:48:b4:33:5c:
         79:91:bd:ab:bb:1e:c9:47:0f:7a:0f:ac:b8:bc:09:6c:d2:44:
         bf:7d:a9:39:88:0c:ec:64:fa:f6:7b:ec:b1:8f:e3:0e:18:07:
         41:59:90:e1:b9:8c:4d:88:e2:a6:e9:f7:07:12:d8:18:1e:c1:
         1d:b6:bd:d4:91:c5:85:29:3d:46:97:a3:a4:c0:fa:cc:f4:9e:
         54:87:f2:e9:be:44:08:38:5f:eb:c6:4a:1f:08:31:53:07:07:
         68:fc:78:f4:93:f9:27:b1:ff:71:58:f4:b2:d7:df:f0:10:13:
         3a:01:d1:43:ea:a6:66:f7:75:66:62:76:d7:9e:1a:a6:3a:7d:
         ec:5b:74:02:4f:ab:c0:7e:fd:c3:06:6c:c8:9a:f1:37:c9:b9:
         34:12:8b:c2:df:42:9c:e9:fe:27:20:f3:8d:d5:40:bf:f3:f9:
         72:ce:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:07:46 2026 by rpki-client