Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
File:                     F6CE4EEC56F911E997D5B40AC4F9AE02.roa (raw, json)
Hash identifier:          KmhukKmF5EOvpy7I16yjXo0PVUDB0PQfpBY9iUTxeeY=
Subject key identifier:   B8:90:AD:26:AA:60:84:A2:B9:D8:1D:96:DD:63:1B:FF:6B:10:77:DB
Certificate issuer:       /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Certificate serial:       1673
Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
Signing time:             Sat 04 Apr 2026 17:20:23 +0000
ROA not before:           Sat 04 Apr 2026 17:20:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137521
IP address blocks:        103.111.79.0/24 maxlen: 24
                          103.123.84.0/24 maxlen: 24
                          2001:df3:e0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
                          rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5747 (0x1673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
        Validity
            Not Before: Apr  4 17:20:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d14857-b593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:56:aa:47:d4:3a:af:32:84:3a:fe:1c:f1:
                    f4:4e:f7:ea:db:77:f9:6d:00:9a:8e:5c:5c:2e:5d:
                    5e:67:3b:66:73:5d:18:36:17:fd:0d:83:35:ba:e7:
                    29:9d:26:ff:3b:1e:e4:25:3c:23:31:b6:72:51:b7:
                    50:cd:a0:5d:d3:51:26:25:aa:54:0f:c3:2c:71:9c:
                    74:43:3e:aa:dc:d2:02:02:51:4a:3a:7d:af:26:9e:
                    54:fd:1c:cd:8c:c2:d5:dd:bc:49:0c:26:28:67:cf:
                    26:24:90:b1:c2:2b:32:a1:c2:6c:c2:7a:33:1c:04:
                    f3:6e:e2:70:5a:4f:60:71:45:68:ef:a9:ef:ec:c1:
                    de:07:9f:c5:12:bb:69:18:61:f9:f9:15:33:6f:d9:
                    31:be:58:63:95:74:27:6c:5f:4c:46:73:d6:45:65:
                    65:7b:0f:31:e9:ed:1b:5b:3f:45:74:79:e5:f2:f7:
                    16:36:ca:a9:bc:b8:f9:68:18:a6:15:d3:70:4b:ca:
                    13:ee:a4:da:7e:af:63:f7:e1:62:d7:6b:3f:e0:31:
                    62:ea:be:ba:06:d9:05:59:7c:99:3c:83:6d:de:a9:
                    39:03:a3:5c:f9:63:61:3f:fb:dc:e4:1b:19:6c:ef:
                    2a:8c:a8:52:41:cf:b7:d7:2d:62:a4:d4:83:f5:86:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:90:AD:26:AA:60:84:A2:B9:D8:1D:96:DD:63:1B:FF:6B:10:77:DB
            X509v3 Authority Key Identifier:
                keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.79.0/24
                  103.123.84.0/24
                IPv6:
                  2001:df3:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:db:47:a9:0a:a7:e2:f0:39:57:ce:8a:65:f7:ca:ce:41:
         af:18:66:3d:f0:72:4a:b1:ba:eb:7c:cf:2f:b6:90:4b:bd:0e:
         0a:f3:15:b3:4d:58:9c:72:4b:f6:04:bb:85:67:0c:ee:dc:e8:
         76:0d:0a:14:3d:27:83:65:c8:8f:9a:88:a8:87:34:9e:b6:23:
         73:50:05:07:83:5a:50:68:b7:5f:5d:9e:d5:5e:3c:85:1b:18:
         87:be:ed:35:20:8b:bb:ff:89:81:74:fb:b5:59:77:70:2d:c7:
         20:b5:aa:50:17:48:de:3e:98:18:4e:c1:67:47:af:ce:ba:de:
         cf:01:f7:ce:ad:a0:01:b5:2a:e4:9a:e1:6d:19:36:ab:79:ae:
         13:01:f1:53:2d:e4:eb:0c:a7:92:ed:78:6f:f4:0e:61:99:ac:
         c3:3c:17:0a:fc:27:e3:29:9b:51:9e:e5:a0:28:17:d5:4f:e1:
         ab:1f:db:87:bc:36:df:47:f8:45:4e:6b:d9:9e:f6:9b:20:dd:
         28:2d:3e:80:30:fa:9e:df:22:26:57:77:77:d4:b8:53:fb:e1:
         4d:ca:d1:70:30:48:58:31:29:68:f9:01:41:5e:7b:32:d6:2a:
         b3:38:a6:22:f6:69:07:b0:5b:58:44:06:e8:e3:18:f7:a2:37:
         f6:aa:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:31 2026 by rpki-client