Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa
File:                     F1EA8F4657E911F1ACD7923C93833773.roa (raw, json)
Hash identifier:          b2g3vvCNprXLdIUH0FMdJtJtg+dTI2rxJUInOjIfhIE=
Subject key identifier:   B0:A1:F4:CB:31:33:40:EA:DD:48:6B:4E:2C:4D:4D:2E:9E:6B:98:52
Certificate issuer:       /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial:       040F
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa
Signing time:             Mon 25 May 2026 03:29:32 +0000
ROA not before:           Mon 25 May 2026 03:29:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149981
IP address blocks:        123.108.74.0/24 maxlen: 24
                          2407:2440:21::/48 maxlen: 48
                          2407:2440:26::/48 maxlen: 48
                          2407:2440:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 09:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
        Validity
            Not Before: May 25 03:29:32 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a13c21c-110f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:d2:9a:55:ba:0a:63:ee:00:df:a1:ab:7c:
                    ab:c5:bb:80:9b:a1:63:d2:77:6a:7a:96:36:da:33:
                    5f:80:ec:79:c7:8d:af:6a:27:3f:89:8b:25:72:9b:
                    b4:23:42:ca:92:67:89:c2:3c:60:f7:48:e6:47:4d:
                    e2:f4:bd:ea:5b:31:25:0e:d7:00:37:3e:2a:04:1e:
                    47:bc:46:02:1f:6d:19:45:ee:f0:1e:65:5a:e4:ca:
                    25:43:1a:fb:59:14:0e:57:23:c2:e7:f6:06:90:28:
                    cb:9d:e0:3d:77:29:56:ac:82:26:c0:08:d2:6a:49:
                    32:5a:df:25:8f:56:cd:4c:d2:bb:e5:f2:c2:35:1c:
                    af:09:61:8d:9d:54:83:bc:ba:a3:8c:df:3a:68:79:
                    c8:6e:66:4e:e0:a6:f1:e1:61:7a:85:86:51:3e:05:
                    ea:a5:d4:61:de:97:eb:7d:81:e4:f8:2a:7a:ac:c1:
                    bf:58:a4:ff:4c:14:62:17:5b:df:5e:94:f3:b8:9d:
                    5b:11:ab:de:7c:c9:f6:cf:4e:2d:b0:cd:49:3d:cd:
                    f0:be:57:f0:4b:5c:36:fb:1e:ea:84:6d:57:3a:3b:
                    b1:da:23:e0:b6:58:22:5e:8e:c6:ff:13:a9:69:2a:
                    b5:39:de:93:94:0a:39:f5:24:b9:fc:f9:57:68:ba:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A1:F4:CB:31:33:40:EA:DD:48:6B:4E:2C:4D:4D:2E:9E:6B:98:52
            X509v3 Authority Key Identifier:
                keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.74.0/24
                IPv6:
                  2407:2440:21::/48
                  2407:2440:26::/48
                  2407:2440:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:df:75:5d:b8:a8:ce:aa:57:01:f2:37:47:01:75:a1:f7:67:
         8c:b4:1b:c2:cb:f8:6f:ee:7a:99:fd:81:1a:0b:45:45:33:a5:
         26:50:e6:47:12:a2:a1:d0:7c:c8:bc:94:ad:da:21:d0:ad:46:
         a7:48:3d:5b:2e:e0:7d:e7:3e:c4:76:03:63:2a:ce:87:49:20:
         88:ac:02:93:9d:2d:07:5e:92:88:6f:36:4d:55:88:55:50:22:
         8f:55:ed:00:2c:9b:0a:01:0a:81:54:17:85:02:fa:d2:4d:f8:
         4e:af:ed:12:d3:c2:f2:85:98:eb:a9:44:a0:72:06:00:fb:45:
         0b:ce:48:b2:05:f1:0d:69:0d:b0:e6:91:0d:b2:75:4c:a9:40:
         60:e5:2a:f1:e7:07:2e:2b:1b:67:97:e3:63:48:81:87:2c:e0:
         ba:3b:22:fa:c5:7f:86:cb:a7:f3:64:3d:d9:eb:2b:2e:d8:68:
         45:4b:8e:73:1a:31:0a:26:4d:53:d5:18:ab:77:c2:c3:15:02:
         32:0a:c7:d7:b0:a3:ef:80:04:9f:92:a9:8b:d3:7e:34:0f:8a:
         df:25:9b:39:3f:4e:ad:f8:45:fb:18:fb:52:5b:e5:c6:6e:0d:
         e5:11:2d:86:e5:6f:78:00:af:82:01:81:11:16:f0:b1:46:12:
         5e:82:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client