Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1808A790318411F0BC1DD041C4F9AE02.roa
File:                     1808A790318411F0BC1DD041C4F9AE02.roa (raw, json)
Hash identifier:          ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=
Subject key identifier:   09:74:DD:7E:25:D7:0A:20:B0:5E:BC:1C:16:26:1A:3C:DE:72:CB:AC
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       0106
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1808A790318411F0BC1DD041C4F9AE02.roa
Signing time:             Sun 03 May 2026 07:39:26 +0000
ROA not before:           Sun 03 May 2026 07:39:26 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     36642
IP address blocks:        103.117.136.0/22 maxlen: 24
                          103.121.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: May  3 07:39:26 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f6fbae-ec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:03:47:2a:7e:8d:29:9b:3e:8f:a7:fc:7f:
                    ce:19:e4:c7:fc:f0:7d:c6:7f:02:4b:66:2d:d2:4a:
                    37:73:59:7b:a5:f6:f9:57:4a:b0:7f:4f:1f:01:30:
                    1f:e5:76:fc:ee:97:f7:99:55:74:ab:54:65:17:26:
                    f4:cb:96:fa:c0:1b:5e:22:2f:bb:e4:66:83:c5:0c:
                    80:49:70:ba:fc:74:0f:cf:82:6c:ca:5f:52:e2:00:
                    6d:55:d4:7c:0b:d3:7f:1a:a4:53:6a:29:74:ee:c5:
                    2a:2b:b9:34:a3:cd:e0:ca:c2:2b:7b:cc:f6:98:93:
                    80:68:bc:55:9a:44:bd:0e:ea:3b:9f:fc:3b:3b:71:
                    46:1b:ab:23:cd:8c:ff:21:0c:0c:be:7e:29:e1:22:
                    f2:c7:53:37:55:09:8e:ab:f1:92:fd:a5:35:71:18:
                    0e:6d:e2:a7:00:62:03:34:5a:7a:bd:45:b4:37:cf:
                    f2:54:da:9a:d2:aa:58:49:75:04:52:ec:76:43:cf:
                    6c:bd:cc:b2:81:f4:65:55:01:b0:10:21:d6:30:d3:
                    79:34:5a:7e:88:b7:d3:9c:c0:30:3e:8e:bb:f6:86:
                    37:90:c8:3d:b9:5d:b8:63:f9:50:63:59:26:d2:47:
                    fb:3f:1d:d0:68:bb:2c:5d:37:78:08:ad:06:bd:47:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:74:DD:7E:25:D7:0A:20:B0:5E:BC:1C:16:26:1A:3C:DE:72:CB:AC
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1808A790318411F0BC1DD041C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.136.0/22
                  103.121.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:57:57:db:c3:47:7c:9f:c0:94:dd:0b:45:16:ad:09:77:78:
         12:56:a1:b7:e6:c5:c9:a6:ce:f2:de:ed:76:46:6e:ad:44:0a:
         c7:01:04:94:81:26:2d:9a:3f:b4:92:85:50:10:52:14:fa:e8:
         49:2d:5f:61:6f:56:9f:f8:15:3a:c6:0b:ff:1c:06:36:70:aa:
         15:1d:fb:0a:1a:a4:e2:66:e0:03:c6:fa:e5:31:7d:29:f3:97:
         d5:a6:c0:1d:4c:94:fc:c8:68:2b:f5:90:57:f7:f4:de:47:65:
         e8:47:54:85:72:a0:54:dc:6a:f1:c2:fc:30:52:52:2e:a3:81:
         66:aa:d0:60:99:a9:95:f0:83:58:32:76:c5:7a:f4:fb:c4:ec:
         74:c1:62:d5:1a:87:80:5e:ec:0d:3a:56:52:db:70:6e:36:d1:
         14:9a:19:10:2d:05:2c:32:c7:47:b4:d5:af:aa:ef:15:ce:e9:
         62:8f:4b:b2:6e:63:19:1f:19:fb:73:43:f9:66:6e:2e:27:68:
         b2:c9:64:50:81:de:44:4f:4a:1e:d8:be:83:67:28:2b:49:db:
         d5:c1:4e:d7:f0:c5:9a:c2:48:f2:03:30:5d:bd:bd:02:56:f2:
         ce:d4:5c:c9:b2:95:a6:68:fe:56:3c:bc:8c:bb:ac:8d:8f:aa:
         15:02:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:07:45 2026 by rpki-client