Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/5A8D0692503211F1BEABB131CA833773.roa
File:                     5A8D0692503211F1BEABB131CA833773.roa (raw, json)
Hash identifier:          gzUn6UIX1e2RuPX8o5zAVLw90XCDvs/HI5N1s4oHoBA=
Subject key identifier:   05:BE:4C:EF:B1:97:61:E8:9A:2D:25:D6:59:B1:70:17:0D:56:A1:90
Certificate issuer:       /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6
Certificate serial:       0F3E
Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/5A8D0692503211F1BEABB131CA833773.roa
Signing time:             Fri 15 May 2026 07:47:42 +0000
ROA not before:           Fri 15 May 2026 07:47:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     2497
IP address blocks:        103.140.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl
                          rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3902 (0xf3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E554, serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6
        Validity
            Not Before: May 15 07:47:42 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a06cf9e-6e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:23:47:b5:3f:21:72:9a:48:ee:11:e4:f1:
                    5c:89:22:1b:7d:3e:70:e8:4b:f4:37:71:2c:d4:9e:
                    7e:e1:36:2e:c8:74:47:d3:ee:e7:65:34:62:df:92:
                    78:57:8f:70:3c:3b:3e:cf:c3:3d:e5:43:50:a2:da:
                    ab:9c:dd:0a:4d:ed:8c:d6:d1:38:e3:bb:0e:9e:7c:
                    fb:08:01:e0:50:5f:57:48:87:7b:19:75:bb:60:b6:
                    e5:f0:86:a7:2b:15:81:5e:00:24:b9:98:ad:7c:2d:
                    f3:66:0a:a4:e5:8a:c0:ba:54:9d:c4:03:b8:09:1c:
                    8e:4c:cd:16:8e:c0:6a:b5:4d:b0:5c:60:d6:3c:8f:
                    5d:1e:5d:81:d4:14:de:f4:b5:d2:c8:17:9c:94:33:
                    31:03:5a:72:8d:91:d1:f1:1e:48:67:28:01:ca:0d:
                    25:bb:2c:a6:35:27:db:7e:05:f7:22:92:5a:2d:36:
                    ba:e0:53:c9:32:24:a2:e2:0e:db:2d:06:2f:04:ee:
                    bd:4c:0f:3b:a3:18:b4:ee:6b:89:4e:72:87:b9:c8:
                    73:22:11:a7:84:64:d9:14:29:6a:63:90:f2:6e:f1:
                    8a:ad:dc:66:7c:a3:67:36:c5:66:5a:13:84:b2:f8:
                    8b:bd:ee:87:ec:7d:9f:a9:0d:b3:5e:cd:e7:3a:55:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:4C:EF:B1:97:61:E8:9A:2D:25:D6:59:B1:70:17:0D:56:A1:90
            X509v3 Authority Key Identifier:
                keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/5A8D0692503211F1BEABB131CA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:07:24:b6:f9:fb:8f:04:a9:1b:df:52:f7:6a:e6:e5:58:19:
         12:04:fd:90:b8:87:01:7f:7b:be:7d:35:51:0e:0b:a1:4f:d7:
         7e:74:b2:7f:7e:b5:e3:cd:25:43:07:53:fe:fe:22:fe:58:28:
         8a:74:e5:a8:b1:64:6d:c9:8f:9b:15:33:64:9b:b7:0c:95:dc:
         ec:66:01:1f:7d:41:e0:d9:42:22:84:d7:6e:da:61:ab:16:84:
         2b:a7:64:78:7d:4c:ef:eb:d3:5c:05:e6:1e:f0:89:5a:36:d8:
         f0:6b:0b:4c:1d:49:45:80:f0:a4:b1:de:a8:be:2d:0e:ab:93:
         13:81:93:c3:09:32:26:6e:8a:f3:a2:06:7d:d5:48:b2:2e:90:
         08:b8:47:cf:d8:3c:1e:d8:0b:50:c4:51:4f:2d:b0:83:07:49:
         65:1a:cd:d3:70:b0:a3:b5:54:76:5f:0a:ed:2d:bb:62:c9:95:
         33:22:18:36:bf:1b:b3:86:c7:ad:fe:d9:6c:cf:f7:26:19:ec:
         e2:63:a6:33:f7:0a:05:a5:47:2e:d6:09:17:ad:5e:d1:9f:53:
         8f:6d:04:ec:64:f1:c0:dc:af:ea:a5:e6:a3:e2:20:c4:52:44:
         70:13:c0:e7:b8:ef:2d:94:db:58:1a:5f:7a:93:ba:98:85:01:
         50:b7:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:42 2026 by rpki-client