Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa
File:                     56AD05C0D8F711F09DAB56B975D3641D.roa (raw, json)
Hash identifier:          6GOomTQthZ+KrQw+RXFQOYpc/6H0zxAQ+hBCBHNginE=
Subject key identifier:   35:1C:F4:A2:73:FF:81:C3:AC:18:55:34:EB:AE:C3:FC:4B:C3:6F:B6
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       0906
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa
Signing time:             Thu 14 May 2026 09:59:24 +0000
ROA not before:           Thu 14 May 2026 09:59:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140962
IP address blocks:        103.153.210.0/23 maxlen: 24
                          2406:4bc0::/32 maxlen: 32
                          2406:4bc0::/48 maxlen: 48
                          2406:4bc0:1::/48 maxlen: 48
                          2406:4bc0:2::/48 maxlen: 48
                          2406:4bc0:3::/48 maxlen: 48
                          2406:4bc0:4::/48 maxlen: 48
                          2406:4bc0:5::/48 maxlen: 48
                          2406:4bc0:6::/48 maxlen: 48
                          2406:4bc0:7::/48 maxlen: 48
                          2406:4bc0:8::/48 maxlen: 48
                          2406:4bc0:9::/48 maxlen: 48
                          2406:4bc0:a::/48 maxlen: 48
                          2406:4bc0:b::/48 maxlen: 48
                          2406:4bc0:c::/48 maxlen: 48
                          2406:4bc0:d::/48 maxlen: 48
                          2406:4bc0:e::/48 maxlen: 48
                          2406:4bc0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310 (0x906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: May 14 09:59:24 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a059cfc-b6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:e1:16:c7:6b:27:bc:66:89:39:31:09:c1:
                    91:ca:d2:2c:c9:6a:81:5c:ee:59:25:65:97:c9:92:
                    d3:5b:08:2a:ff:85:f7:64:07:ca:52:b3:c3:4b:02:
                    21:68:a4:39:de:5e:88:28:68:4f:77:39:06:64:91:
                    20:61:ec:d2:70:9c:f2:d3:8c:42:f2:7c:21:76:66:
                    a9:a0:3a:03:54:fc:41:2b:5f:9c:dc:3d:c6:e8:74:
                    34:09:83:9f:69:7f:41:9f:04:a4:ec:b1:d5:bd:5a:
                    97:0d:3a:24:ad:0a:55:48:99:77:30:31:09:ae:aa:
                    3b:16:73:71:56:63:0e:fd:ea:f6:ee:d5:ac:87:be:
                    4f:5f:bf:ce:7c:5a:23:ab:5b:94:2a:73:09:b6:5d:
                    5c:07:8e:b6:05:f6:c7:c4:28:40:5c:e5:bf:ba:74:
                    ca:17:a7:a7:fe:d7:87:0f:3b:08:f6:16:6d:08:d0:
                    c7:2d:3f:eb:d5:9f:2c:c2:79:df:65:7a:2f:30:56:
                    7d:c5:13:2d:3a:31:63:df:89:21:b2:c6:3b:60:27:
                    f8:03:4d:40:21:0a:ff:8c:77:8f:e3:2c:23:a9:47:
                    1b:35:a0:b8:1b:85:67:ab:ac:68:bd:c5:74:6e:0a:
                    69:18:62:f0:7f:b7:bf:9f:16:a0:b4:9c:68:ae:15:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:F4:A2:73:FF:81:C3:AC:18:55:34:EB:AE:C3:FC:4B:C3:6F:B6
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.210.0/23
                IPv6:
                  2406:4bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:a3:93:be:ad:ed:ab:cd:9d:a8:79:2f:29:60:81:46:d9:
         2b:0c:43:6f:e3:69:b4:66:ed:42:5f:4a:de:a0:fb:79:5c:8b:
         65:6f:d2:d6:e6:08:54:20:57:ef:f5:cb:75:85:4b:42:0a:8a:
         22:58:99:e5:af:7e:0b:ae:ec:e2:eb:f7:83:09:b3:bd:7a:dc:
         a3:51:04:2b:fe:e0:f2:94:b7:7d:08:aa:fc:3b:71:d5:6c:6b:
         c9:18:ea:97:74:14:4d:5f:2e:da:88:e6:34:fb:b6:3a:e6:92:
         d7:7d:36:eb:51:9c:36:11:1b:79:8a:c0:da:ee:e8:94:aa:95:
         8a:30:37:4b:96:4e:5f:a9:66:01:98:5c:83:29:16:e5:c0:1f:
         aa:4c:6f:26:42:28:8d:f6:7e:c1:47:4c:70:0f:8d:41:75:fd:
         4c:11:5c:37:47:e9:88:03:45:5f:96:9f:f7:cf:6f:71:63:85:
         22:0f:39:79:76:c5:2e:ac:06:43:a9:20:32:6b:3c:d6:b8:3a:
         32:21:f6:6b:8e:94:dd:e6:79:a7:41:da:83:9f:31:5c:0d:20:
         cb:81:65:46:c5:f0:21:ef:5c:5a:c9:a0:80:7c:1e:61:b7:c4:
         d0:c8:47:78:56:17:3f:60:48:03:82:ac:58:a0:7e:a1:e1:47:
         c4:d8:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:31 2026 by rpki-client