Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/547E78ACA11911F1AA6D5C983C11F970.roa
File:                     547E78ACA11911F1AA6D5C983C11F970.roa (raw, json)
Hash identifier:          uSyq8GtigHdGR1YUbl2ZFJ4spXwNSbS2qhInIUnXVGY=
Subject key identifier:   F8:00:0D:E0:02:D3:77:90:8C:34:77:6F:62:61:45:3C:9D:EB:7F:04
Certificate issuer:       /CN=A9138A44/serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D
Certificate serial:       03
Authority key identifier: 83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/547E78ACA11911F1AA6D5C983C11F970.roa
Signing time:             Wed 26 Aug 2026 06:42:39 +0000
ROA not before:           Wed 26 Aug 2026 06:42:39 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136490
IP address blocks:        103.90.50.0/24 maxlen: 24
                          2001:df0:d100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl
                          rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A44, serialNumber=83941F7141D6D9CC20DC32F0FE573838C5A4768D
        Validity
            Not Before: Aug 26 06:42:39 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a8e8adf-d33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:2f:c5:5e:de:55:fe:b6:14:dc:2e:01:0a:
                    93:fd:05:c0:6c:bb:1c:a8:ba:8e:94:9a:20:38:60:
                    3a:11:71:86:25:d3:ac:72:b5:e9:0c:17:4b:3e:4e:
                    4c:a8:d1:8c:f3:f1:ad:79:88:a1:26:55:87:41:f5:
                    d8:7e:c4:cc:82:75:39:ec:f2:4b:bd:99:bf:36:9c:
                    b4:b2:fd:35:1e:e3:d9:d1:3b:c1:dd:cb:c1:cf:d0:
                    c6:f4:1f:90:4e:e3:96:6c:92:8f:ce:9a:63:03:a1:
                    b0:f2:ac:5c:82:c8:a6:83:e0:1b:41:e6:37:a6:0c:
                    6d:1b:83:04:1a:c3:38:d5:c1:4c:d1:ea:ad:01:c1:
                    f0:fa:04:7a:74:2c:77:36:8d:f8:e5:60:b2:13:53:
                    1c:f2:28:24:5a:fb:48:a9:60:38:2e:d9:6f:a3:24:
                    80:9f:2a:5c:a0:cb:5a:c7:4c:29:8a:d0:ef:20:89:
                    55:ea:c7:e4:38:48:64:89:0b:dc:22:dc:22:4e:47:
                    0c:2d:ea:8b:e4:dc:6b:4d:42:84:90:f8:89:83:67:
                    ca:67:b8:92:42:51:cd:03:fb:3b:29:63:4c:94:65:
                    21:bf:3e:2d:40:75:a5:87:c5:71:02:5f:32:5c:c6:
                    a3:66:ae:68:18:1c:66:55:1e:92:d3:8c:e8:d5:23:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:0D:E0:02:D3:77:90:8C:34:77:6F:62:61:45:3C:9D:EB:7F:04
            X509v3 Authority Key Identifier:
                keyid:83:94:1F:71:41:D6:D9:CC:20:DC:32:F0:FE:57:38:38:C5:A4:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/g5QfcUHW2cwg3DLw_lc4OMWkdo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g5QfcUHW2cwg3DLw_lc4OMWkdo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/7710230CA10511F180CEB6EF3511F970/547E78ACA11911F1AA6D5C983C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.50.0/24
                IPv6:
                  2001:df0:d100::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:9c:ec:c8:52:8a:5b:af:8f:18:dc:88:02:e0:9f:1a:de:
         ea:6c:f4:dc:97:c0:39:db:a5:de:82:ae:de:7f:9c:10:75:a6:
         6e:2f:63:20:00:0e:72:7b:1f:a6:ec:25:75:a6:bc:b2:46:4e:
         5c:7e:8c:85:72:53:5c:3f:3e:d1:22:26:ae:12:c3:01:bb:1f:
         be:c6:9c:90:ff:e2:0b:d5:31:d7:38:fa:27:3d:ce:b8:34:1e:
         06:a6:c6:89:52:c8:2d:41:fe:9b:1d:31:da:79:35:56:7a:3e:
         90:bd:da:62:17:35:15:2a:82:a0:d9:a0:8f:72:dd:75:04:17:
         13:45:c8:fc:d5:68:4b:07:76:32:b3:a2:c1:19:1a:0b:d5:a3:
         6c:f3:45:db:45:7f:e7:31:a9:ba:00:bf:df:0a:2c:4c:97:74:
         11:65:55:f5:8a:49:ef:bb:ea:dc:92:fd:2f:a6:a0:f4:6b:d4:
         a0:c3:89:63:bc:7e:6b:02:b0:87:bb:eb:de:58:35:ca:05:fd:
         3b:2c:2b:4f:ba:c8:07:b9:0a:10:3b:e2:78:5a:01:32:75:a7:
         1e:0f:ea:75:02:02:e1:70:17:92:a6:b9:41:1d:8a:e4:5e:da:
         b6:f0:95:43:71:4f:81:6d:05:39:4c:7c:2b:da:03:ae:d2:4f:
         53:8e:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:40:29 2026 by rpki-client