Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa
File:                     099A56FE2FB311F09E3A9373C4F9AE02.roa (raw, json)
Hash identifier:          qvpf3tPeZUwo+lZY0cw/+448QOLDPYiAWRZZeAUm0FA=
Subject key identifier:   41:09:5C:5C:B7:EF:88:19:0C:4B:E3:F6:DB:E7:51:11:75:0A:E8:8C
Certificate issuer:       /CN=A91DBB66/serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Certificate serial:       BE
Authority key identifier: E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa
Signing time:             Tue 05 May 2026 07:40:36 +0000
ROA not before:           Tue 05 May 2026 07:40:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     131294
IP address blocks:        103.10.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
                          rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBB66, serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
        Validity
            Not Before: May  5 07:40:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f99ef4-4aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:a1:9e:e2:17:ae:2a:67:61:1a:c8:54:19:
                    c2:e9:c1:d8:51:48:e0:6d:c7:4e:04:90:7f:d9:ce:
                    29:12:c4:53:6f:dc:84:97:07:bb:af:65:df:b2:0c:
                    7b:c8:0e:e3:63:61:67:87:16:b7:97:2f:7a:95:2e:
                    c9:19:8b:e3:d1:5b:68:c2:36:2e:33:3d:65:3e:86:
                    e8:a8:20:9f:e0:26:4a:1b:98:15:57:5d:a1:f1:f3:
                    52:13:0d:06:56:40:34:84:77:53:10:e1:9a:37:8b:
                    c6:8c:4c:c2:96:da:f4:fc:0e:b3:4d:59:94:30:26:
                    f7:33:59:31:62:56:38:13:f7:ea:04:76:16:70:20:
                    d4:7c:00:07:02:1a:d0:ea:3d:97:ed:47:c6:07:fd:
                    4c:3d:b1:b8:9d:8b:63:ec:a0:9a:79:e4:65:8e:cc:
                    06:eb:92:9a:69:76:72:a3:fb:da:ad:71:ec:6c:a8:
                    20:db:90:18:71:42:9b:84:39:28:71:81:ce:ea:ad:
                    d0:cb:ed:d5:aa:09:6e:03:a7:74:71:4b:1d:53:1e:
                    8f:97:22:3e:a4:b5:10:ef:c8:43:67:40:c8:ba:5d:
                    4b:40:e4:ac:d5:2f:04:93:25:b3:7b:e0:76:22:55:
                    c5:33:44:df:c5:f0:9a:d3:d1:5a:cd:c3:10:8d:5e:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:5C:5C:B7:EF:88:19:0C:4B:E3:F6:DB:E7:51:11:75:0A:E8:8C
            X509v3 Authority Key Identifier:
                keyid:E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:cb:b1:00:5c:80:16:39:ac:5f:01:96:ae:8c:b7:ee:49:ae:
         9c:40:3e:37:15:6e:22:3b:b2:51:3d:d4:c8:6c:11:36:a0:79:
         8e:d8:22:0c:8e:30:a6:83:ad:f8:c5:27:af:88:8d:90:b4:39:
         07:ad:91:bb:78:5f:c7:64:08:2a:a9:b5:ed:18:42:04:5c:c5:
         22:9e:a6:dd:d6:67:68:e3:6a:36:20:41:69:c1:4d:f4:36:bd:
         43:87:81:db:c2:f0:66:e5:e9:eb:c4:60:e2:5d:2b:64:a9:4f:
         65:a5:81:45:1c:ac:cb:b6:e9:1d:7b:95:df:76:7a:4a:2e:e9:
         eb:ab:7c:a6:62:19:2c:2f:27:bd:65:10:af:5b:4b:7f:fc:a8:
         b9:82:b9:ec:86:4f:39:d4:ff:84:64:7f:6a:2a:67:73:18:70:
         d6:d0:4b:1e:6e:ff:75:62:f3:98:64:f0:ac:f6:06:54:92:a8:
         a1:bb:d2:f9:8b:fa:09:68:f6:8f:3d:be:4e:69:f0:70:fe:8a:
         27:d3:11:0c:7d:1e:ce:c7:8b:76:67:ad:6f:3b:fc:55:90:0a:
         1f:dc:08:c9:e8:7c:d2:8b:e7:b0:e5:aa:b4:8c:c7:86:93:e7:
         5c:84:c2:1b:fd:65:ff:7e:e1:20:0c:75:36:b9:24:9a:d3:dd:
         47:3d:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:29 2026 by rpki-client