Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
File:                     5915642864AB11EEBFD54F2EC4F9AE02.roa (raw, json)
Hash identifier:          rIqL842ksTXKO2fhExD42Yq0dnrl1cNwx4ESowKkH4A=
Subject key identifier:   C9:E6:CB:8C:03:AD:D3:AC:4D:45:3C:45:DB:1B:62:68:48:73:9E:50
Certificate issuer:       /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial:       0F59
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 06:23:54 +0000
ROA not before:           Tue 31 Mar 2026 06:23:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151627
IP address blocks:        103.5.0.0/22 maxlen: 22
                          103.5.0.0/23 maxlen: 23
                          103.5.0.0/24 maxlen: 24
                          103.5.1.0/24 maxlen: 24
                          103.5.2.0/23 maxlen: 23
                          103.5.2.0/24 maxlen: 24
                          103.5.3.0/24 maxlen: 24
                          126.209.88.0/22 maxlen: 22
                          126.209.88.0/23 maxlen: 23
                          126.209.88.0/24 maxlen: 24
                          126.209.89.0/24 maxlen: 24
                          126.209.90.0/24 maxlen: 24
                          126.209.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
                          rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3929 (0xf59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
        Validity
            Not Before: Mar 31 06:23:54 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69cb687a-c5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:89:2a:e8:6a:4b:13:2f:2e:88:15:28:7a:
                    23:de:4a:e9:1a:6e:44:5e:bf:07:b8:f4:29:11:21:
                    1f:cd:f5:94:86:e9:f9:0b:19:88:db:95:f3:e0:a9:
                    f3:7d:58:4a:8a:13:f1:3b:09:34:c8:b3:05:29:46:
                    dc:88:0c:52:f4:b1:f1:9c:cf:fc:fd:bf:c5:be:b2:
                    f9:dd:7d:42:c5:11:42:e0:4d:d0:ff:4e:f9:4e:7a:
                    d1:27:80:ed:20:0b:f3:d1:d4:d3:6b:6c:6b:40:b6:
                    5d:7f:24:0b:13:10:5a:22:51:b3:ae:db:97:3b:41:
                    63:80:dc:c7:5e:54:53:b2:c2:8b:e2:81:a0:e5:b6:
                    54:90:10:f0:33:6f:92:b6:9d:22:b2:07:bd:68:6e:
                    55:2c:99:cf:a9:c5:a0:2c:2e:64:3b:8e:12:6f:52:
                    98:f2:92:31:c6:47:50:ad:9c:b5:78:54:19:a1:bc:
                    6f:6b:25:ed:cb:09:e8:a9:b5:1e:97:2b:6b:88:ad:
                    96:ef:2c:b2:47:b7:b0:72:a1:7a:95:0d:9d:7a:41:
                    e6:bf:5e:68:10:ff:ff:0f:64:08:2b:b0:b1:d8:60:
                    80:98:f9:8a:ad:24:85:a0:5d:80:b8:16:39:a0:10:
                    22:3c:62:b7:21:93:32:bf:39:c8:6e:52:b5:66:a1:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:CB:8C:03:AD:D3:AC:4D:45:3C:45:DB:1B:62:68:48:73:9E:50
            X509v3 Authority Key Identifier:
                keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.0.0/22
                  126.209.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:ce:c4:68:bd:b5:e4:b4:41:13:27:e7:69:d8:d9:19:dd:
         79:ce:73:53:ad:18:a0:ab:d3:8f:2a:14:93:be:c3:ac:ba:3d:
         79:1d:89:b9:32:ae:81:3f:b1:0f:3c:9d:0d:15:64:46:a8:83:
         26:e8:3a:97:53:1a:66:6d:47:b7:ed:d6:c4:05:6c:94:1d:f7:
         aa:36:40:6b:fd:6e:6e:aa:47:3c:4c:da:78:89:96:7d:5b:0e:
         a3:e4:dc:fa:d8:fb:ac:f8:eb:eb:e8:fb:30:3e:46:eb:ea:a7:
         64:e0:96:88:d4:03:da:d1:31:89:48:58:fe:ac:ed:a6:ea:46:
         91:50:87:31:e5:66:0f:31:a8:70:f0:a5:e6:eb:a3:9d:c0:a7:
         dd:d6:c5:db:6a:35:b9:a4:3b:41:99:32:12:29:01:13:0e:bd:
         aa:f8:f7:07:01:f0:fe:37:72:a5:87:19:a0:7c:72:2b:2c:ba:
         24:b2:88:f8:90:99:23:40:b2:18:1e:69:c1:a2:7f:bd:2d:88:
         d3:55:9f:e2:f2:1f:a4:12:5f:96:50:6f:50:fe:30:ae:9b:0a:
         27:83:48:02:18:f6:d8:36:43:85:09:ff:92:c7:0a:b9:db:3e:
         43:b7:2c:f2:44:ef:09:b2:04:a4:ad:33:21:89:d3:97:fd:81:
         72:1f:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:57 2026 by rpki-client