Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa
File:                     C6375A0C4E6E11F18914D768AA833773.roa (raw, json)
Hash identifier:          LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=
Subject key identifier:   17:62:17:61:B0:A8:CB:14:D8:2D:B1:3A:D9:8C:C4:61:94:EE:AE:99
Certificate issuer:       /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial:       09BE
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa
Signing time:             Thu 14 May 2026 20:24:36 +0000
ROA not before:           Thu 14 May 2026 20:24:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56081
IP address blocks:        103.5.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
        Validity
            Not Before: May 14 20:24:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a062f84-3626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:a9:77:d5:73:d9:a3:05:90:47:93:3b:75:
                    a9:ac:a8:59:bd:9b:37:29:4b:27:6e:37:f9:0c:8c:
                    15:06:95:d2:29:9a:1f:d8:95:04:df:73:c9:99:ed:
                    05:5c:2b:d4:5a:19:96:66:61:80:d6:d2:36:93:6f:
                    08:92:05:28:f7:a7:a9:05:ec:ea:a9:82:80:14:52:
                    ce:ee:33:c3:82:d7:f3:43:fc:51:f0:70:52:08:08:
                    3e:d6:8a:49:33:3c:6c:db:bc:a9:e0:11:6d:6f:11:
                    fa:fa:5a:d4:e5:b2:1a:80:58:23:f1:4f:d4:c4:65:
                    20:29:57:49:74:ed:aa:de:8a:5f:88:68:2b:71:c8:
                    a7:c5:a1:15:99:85:9f:f2:c2:63:f9:06:f4:32:32:
                    54:ca:f3:35:c5:2a:e1:10:50:6f:24:f6:94:3c:31:
                    4b:98:0e:2a:0a:f7:38:2f:5c:2e:99:56:18:b9:de:
                    00:ce:dd:03:1e:b9:93:25:47:83:3f:dc:96:91:34:
                    91:1b:1c:83:1c:26:69:90:df:7a:77:d1:10:42:87:
                    71:67:75:3d:f9:e3:ce:6e:50:a7:fe:1c:bc:43:43:
                    ca:27:08:a7:44:df:7d:66:39:20:b4:fc:0f:fd:48:
                    e9:cd:09:67:1c:9e:a3:9e:16:9a:41:39:18:bf:6c:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:17:61:B0:A8:CB:14:D8:2D:B1:3A:D9:8C:C4:61:94:EE:AE:99
            X509v3 Authority Key Identifier:
                keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:20:fc:b9:26:91:ea:dd:7b:c9:16:b5:7d:3e:c3:b0:5e:
         ac:da:cc:c9:93:da:6e:4c:ce:97:72:d5:f4:e2:6a:e7:13:45:
         80:17:c2:08:47:1b:a9:08:f4:a7:32:7f:5b:77:b1:79:97:90:
         8e:96:5d:b5:7a:55:cb:c3:67:6e:cc:40:87:1f:9f:16:0e:67:
         0b:75:d7:ec:9b:7b:f3:73:5a:76:ea:cc:63:a0:3c:74:83:1f:
         ea:9d:6f:58:c2:f7:95:bc:1a:d1:dd:1e:ff:b7:02:36:13:ca:
         c6:d5:63:80:47:94:20:d7:41:6b:40:6d:e8:09:25:5c:72:9d:
         ef:45:49:e3:73:4d:16:e3:57:52:10:77:15:fa:e9:6b:4a:ea:
         0e:ab:54:ca:94:8e:80:cc:fa:7c:03:23:6f:de:ec:02:d5:67:
         55:2f:64:68:4e:55:26:fe:46:8a:52:9d:e7:17:c9:2c:69:cc:
         be:1d:b3:d9:66:0d:19:da:f9:5a:55:5a:4c:24:b6:0f:83:3a:
         6b:8d:3f:b0:46:c3:92:8a:87:99:3a:26:26:1c:b7:26:81:a4:
         f1:02:45:cc:aa:ae:e8:99:25:86:4c:9d:c5:5a:d7:92:d7:46:
         e1:f1:6b:3d:c3:ee:4d:f1:2c:17:0c:63:b1:98:e1:3d:75:4b:
         6c:64:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:53:45 2026 by rpki-client