Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
File:                     5F47B232DF0711F0899AA5EF5C6F56BC.roa (raw, json)
Hash identifier:          /0f34LCnWb23oByUJiqNEjaQp20XxftvAB7EUuuGkmc=
Subject key identifier:   3C:4C:DE:61:63:83:BA:E4:A3:9E:97:43:11:E3:AB:59:47:DA:5D:BB
Certificate issuer:       /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial:       0C2B
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
Signing time:             Tue 06 Oct 2026 19:38:00 +0000
ROA not before:           Tue 06 Oct 2026 19:38:00 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9371
IP address blocks:        58.84.5.0/24 maxlen: 24
                          103.197.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
                          rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
        Validity
            Not Before: Oct  6 19:38:00 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac54e18-6871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:2f:a9:52:59:8f:cf:f4:21:93:9a:d3:ce:
                    73:7b:c5:4b:2b:9a:d3:83:2b:57:84:9f:3d:00:94:
                    68:40:1b:14:9b:69:78:d2:72:fd:fe:94:d1:c6:2a:
                    7f:b5:df:41:33:51:9b:5f:3e:fc:51:00:cb:f0:dd:
                    1b:f9:6c:1d:c8:1d:9a:8b:62:05:22:54:39:60:19:
                    dc:8e:2b:49:1f:5c:e0:44:91:3a:36:a7:38:f4:f4:
                    73:b1:b6:6c:1d:cb:cb:5a:0a:b7:da:4f:f3:e1:50:
                    78:b9:47:ee:48:ea:b7:aa:37:9d:c4:32:3e:5f:33:
                    a4:7f:98:aa:75:b6:df:9c:55:90:e2:b2:4e:7f:8c:
                    43:44:58:ca:2d:7f:91:6e:0b:4b:cf:ff:20:60:68:
                    7c:23:4a:6d:e8:41:9d:75:89:ad:bf:d0:f1:88:38:
                    8d:6f:4f:ae:62:38:bb:3c:1d:5b:27:9a:ad:b3:a6:
                    8c:60:f1:06:14:c9:34:8a:a0:c2:d7:20:c8:41:93:
                    3a:f6:ea:6f:bb:02:cb:db:8e:a7:27:00:df:3c:be:
                    cd:4b:fb:ba:0e:ab:42:69:d4:31:f1:5e:5c:6e:bb:
                    1a:98:cf:89:ef:38:82:cd:b5:8f:53:3f:ab:2e:41:
                    b7:ed:46:0f:9b:81:2a:d7:b8:3b:be:10:c3:98:56:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:DE:61:63:83:BA:E4:A3:9E:97:43:11:E3:AB:59:47:DA:5D:BB
            X509v3 Authority Key Identifier:
                keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.5.0/24
                  103.197.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:92:33:f6:e6:b1:63:c1:2b:86:ec:6f:23:e4:50:29:34:69:
         ed:a8:7c:ca:d7:3c:f8:49:dd:6e:fb:db:51:20:2a:ad:a6:b8:
         cf:55:62:42:e4:8e:e2:5e:82:21:12:21:fc:a4:73:a8:aa:7a:
         66:7a:53:73:49:a8:3c:1a:9f:aa:3d:29:64:2b:c0:be:04:c4:
         6d:fa:0f:b0:6e:43:52:65:66:3f:14:85:3b:ad:3c:be:36:e4:
         ac:55:a1:cd:97:c5:ed:dc:cd:fe:17:28:ef:12:9f:ad:6a:f4:
         9f:27:33:38:1d:89:8d:5a:aa:d4:89:6f:8e:0e:a1:1b:5d:90:
         89:d0:55:ce:26:de:a2:0d:e3:cf:ba:d4:ba:49:53:a8:1c:b5:
         0e:1c:76:30:9f:58:11:69:17:63:9a:d2:01:a1:3d:22:73:c0:
         d1:88:9f:96:98:d2:6b:6e:d4:2f:15:1f:dd:9b:5c:87:eb:e7:
         7b:32:ff:e9:89:f1:8b:89:6a:9c:cf:cd:bf:8b:73:cb:1d:ff:
         7b:25:09:06:56:39:07:90:8c:b9:1f:4e:68:59:2b:96:8d:cf:
         43:18:51:84:f5:70:54:98:c5:44:12:98:67:7c:e6:bf:e5:7d:
         8d:d1:7a:8d:08:fa:a0:cf:89:3b:b9:68:48:0b:01:ca:f9:36:
         63:03:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:50 2026 by rpki-client