Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F9C0DF84BC4111F09D031660C4F9AE02.roa
File:                     F9C0DF84BC4111F09D031660C4F9AE02.roa (raw, json)
Hash identifier:          H7MTLgBvJqkX/zlXhQ1M+AoAUBypYzZNCTAi5k1DtyM=
Subject key identifier:   11:C8:21:39:9B:D8:A2:01:94:B9:3C:FD:94:43:CB:55:72:F9:AA:82
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0444
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F9C0DF84BC4111F09D031660C4F9AE02.roa
Signing time:             Sat 27 Jun 2026 01:32:44 +0000
ROA not before:           Sat 27 Jun 2026 01:32:44 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        103.243.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 01:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jun 27 01:32:44 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3f283c-aa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:41:89:99:a4:48:ae:75:17:40:54:92:fa:
                    6d:2c:a5:e3:bb:c8:77:96:03:76:40:ff:c5:f5:2a:
                    a0:98:00:91:64:11:20:65:48:08:20:1f:b0:ac:1f:
                    ce:d7:b5:9c:97:e5:ee:4f:d9:89:cc:76:ad:d2:09:
                    81:56:89:46:56:18:82:06:3b:a7:ed:21:aa:41:fd:
                    f7:11:70:b8:ca:80:4d:78:5f:ff:dd:08:84:a8:65:
                    62:d0:1b:1f:c3:41:34:54:19:2b:13:e0:d5:f6:a1:
                    0e:89:88:24:91:94:2c:89:85:5c:d9:4d:70:a2:14:
                    5a:5a:81:49:f1:0f:83:2c:16:e4:ab:93:6b:4a:c3:
                    e0:e0:84:cc:32:69:e8:06:ba:ef:dd:7e:d7:6a:26:
                    53:7e:f4:02:07:36:da:1e:54:c9:d4:bb:7f:ec:bb:
                    c6:88:47:19:29:c7:43:20:a9:00:1a:0f:e5:10:92:
                    22:d9:e1:34:47:3d:62:af:92:e3:a9:36:bd:29:82:
                    db:58:f0:06:90:4d:11:4e:1b:2c:48:b6:db:0d:f7:
                    bd:3f:78:7c:0d:f5:6f:90:51:70:42:ed:83:cc:a8:
                    f3:ed:2a:51:cd:26:09:15:11:bc:b4:ba:5d:81:70:
                    ad:19:de:19:ae:8b:92:e2:e3:48:cf:09:65:b8:16:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C8:21:39:9B:D8:A2:01:94:B9:3C:FD:94:43:CB:55:72:F9:AA:82
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/F9C0DF84BC4111F09D031660C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:98:e5:7e:a6:2f:b2:e9:86:e5:c6:cd:8f:45:32:f6:fb:51:
         3a:fd:21:1d:50:54:6f:c2:40:58:3a:0f:bf:10:24:4d:e3:c5:
         82:9c:30:e0:74:e4:fa:29:20:c5:7c:85:9f:38:f3:ee:56:a0:
         07:e2:6e:e8:ac:1e:39:bd:bb:d8:66:f0:27:09:d9:5a:53:e2:
         5a:3a:cb:b7:fa:9c:fb:40:34:9b:77:70:b2:56:bc:5d:d1:ea:
         4c:ac:10:b8:cf:dc:18:f7:e7:20:b1:57:b8:f5:68:e5:71:16:
         cd:5c:d4:c5:62:21:13:76:ad:0c:fd:03:9d:21:44:f5:0b:82:
         59:dd:88:af:95:0b:a7:7a:ef:62:59:26:02:68:33:23:a7:c6:
         af:7b:29:3b:58:3e:85:6a:f0:e3:5c:11:73:ca:94:fa:98:e7:
         9f:ae:d2:92:cc:4f:f8:02:84:ed:8c:3b:85:00:a3:99:ef:9a:
         73:5d:1a:dd:aa:51:d1:ff:b5:9a:a6:9e:fb:95:9d:bf:59:37:
         6c:18:8e:4a:3a:ee:01:55:1f:32:5a:3c:b4:8a:94:f1:60:95:
         b1:e8:f6:e9:73:e9:e0:32:e1:cb:d6:5d:a3:d7:a9:a4:5d:98:
         82:6c:d3:e8:7f:6b:48:d3:5f:7e:1a:0c:e1:dd:d7:8c:6e:f4:
         99:f2:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:32:54 2026 by rpki-client