Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
File:                     13F5D28685B111ECB675B552C4F9AE02.roa (raw, json)
Hash identifier:          89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=
Subject key identifier:   73:FB:4D:4B:4C:FE:06:6D:6F:79:8D:A4:88:45:3F:EC:E4:30:8C:3E
Certificate issuer:       /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial:       0484
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:48 +0000
ROA not before:           Fri 03 Apr 2026 00:31:48 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134732
IP address blocks:        103.181.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
        Validity
            Not Before: Apr  3 00:31:48 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0a74-4da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:67:34:0a:c8:e1:06:df:12:3f:98:85:96:
                    6e:aa:ef:0e:e4:ba:b3:4e:aa:f8:4a:42:82:b8:f9:
                    58:4d:d3:df:51:9b:48:0f:27:06:63:4e:d0:56:d4:
                    e6:2f:61:94:68:af:83:9f:35:27:bc:b2:ca:d9:6f:
                    e8:2f:64:b1:d6:cd:5a:72:e7:62:f7:68:ca:7c:eb:
                    40:6b:31:ac:ce:23:4c:84:12:53:f0:db:cd:ad:15:
                    d2:d5:43:36:ea:09:3e:1e:6b:72:fc:53:4b:00:48:
                    eb:34:cd:be:dc:c5:4a:52:ea:a8:90:45:82:24:77:
                    12:c1:30:e2:6d:8b:f6:9a:2b:7e:0a:3d:76:15:4d:
                    e1:99:a7:ea:f5:97:93:c5:59:53:3d:db:93:6a:18:
                    36:0e:fd:01:43:89:32:53:8c:db:b5:ae:e4:37:c7:
                    ea:33:80:10:89:2b:0f:a9:70:f8:d1:55:82:62:f2:
                    d1:5d:20:ad:35:17:91:97:60:05:22:e2:49:9e:a1:
                    40:3a:09:8f:a1:ea:89:73:80:c6:94:02:70:96:91:
                    ff:f3:41:be:f7:f3:69:29:b1:29:64:15:be:72:de:
                    9d:08:e6:db:9d:aa:ff:4d:82:1b:18:84:85:bf:a2:
                    a5:0c:de:1f:26:83:14:e4:8b:82:2f:6e:fb:c6:5f:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:4D:4B:4C:FE:06:6D:6F:79:8D:A4:88:45:3F:EC:E4:30:8C:3E
            X509v3 Authority Key Identifier:
                keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:d6:a6:43:80:e1:da:0e:30:28:af:a2:d6:d8:6d:04:e8:
         da:b9:0b:e2:c2:37:28:6b:88:b2:9b:24:b7:b7:8b:91:2b:5a:
         a2:9b:d4:9a:b0:f1:7c:02:8d:93:a4:24:9d:13:c0:96:07:57:
         5d:f9:e1:03:e8:ed:6f:b0:d1:b8:ec:5c:18:59:40:e6:d5:5f:
         5b:08:20:aa:0d:ef:54:b3:89:61:32:f3:fb:ca:3c:f4:11:2f:
         9a:9d:c8:da:33:04:f3:41:26:f7:98:b4:9a:fa:7d:b5:a3:62:
         e4:4a:8e:2f:df:e3:94:2e:ab:99:e0:c5:98:be:9b:2b:e1:b0:
         ec:98:1a:7d:82:be:34:4c:43:2a:b4:0f:0b:27:0f:bb:b7:08:
         17:61:dc:4e:93:96:c4:86:38:af:10:60:08:b5:ae:c7:59:b9:
         87:ff:d0:9d:9b:86:9b:ee:44:42:b9:13:01:1a:80:11:cf:40:
         08:93:af:cc:81:68:8d:61:23:64:12:62:d1:7e:23:5d:16:c0:
         d1:c2:30:02:87:1e:28:f6:21:3e:4d:3e:db:d7:c8:02:a8:02:
         b6:c2:72:ac:ac:6c:ac:4d:65:f2:f4:f8:d9:c5:ac:3c:9f:2b:
         14:f3:55:b3:87:91:a2:0e:54:ef:08:32:db:99:ba:02:2b:a2:
         8e:f3:33:a3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx
RTQ5RUNCOTMwHhcNMjYwNDAzMDAzMTQ4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMGE3NC00ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSJnNArI4QbfEj+YhZZuqu8O5LqzTqr4SkKCuPlYTdPfUZtIDycGY07QVtTm
L2GUaK+DnzUnvLLK2W/oL2Sx1s1acudi92jKfOtAazGsziNMhBJT8NvNrRXS1UM2
6gk+Hmty/FNLAEjrNM2+3MVKUuqokEWCJHcSwTDibYv2mit+Cj12FU3hmafq9ZeT
xVlTPduTahg2Dv0BQ4kyU4zbta7kN8fqM4AQiSsPqXD40VWCYvLRXSCtNReRl2AF
IuJJnqFAOgmPoeqJc4DGlAJwlpH/80G+9/NpKbEpZBW+ct6dCObbnar/TYIbGISF
v6KlDN4fJoMU5IuCL277xl+lnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHP7TUtM
/gZtb3mNpIhFP+zkMIw+MB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1
QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZDMzAvMTEyQUYxQUM4NUFEMTFFQ0IzNkY0MTREQzRGOUFFMDIvMTNGNUQyODY4
NUIxMTFFQ0I2NzVCNTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7UqMA0GCSqGSIb3DQEBCwUAA4IBAQB6cNamQ4Dh2g4wKK+i1tht
BOjauQviwjcoa4iymyS3t4uRK1qim9SasPF8Ao2TpCSdE8CWB1dd+eED6O1vsNG4
7FwYWUDm1V9bCCCqDe9Us4lhMvP7yjz0ES+ancjaMwTzQSb3mLSa+n21o2LkSo4v
3+OULquZ4MWYvpsr4bDsmBp9gr40TEMqtA8LJw+7twgXYdxOk5bEhjivEGAIta7H
WbmH/9Cdm4ab7kRCuRMBGoARz0AIk6/MgWiNYSNkEmLRfiNdFsDRwjAChx4o9iE+
TT7b18gCqAK2wnKsrGysTWXy9PjZxaw8nysU81Wzh5GiDlTvCDLbmboCK6KO8zOj
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:51:40 2026 by rpki-client