Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/91F29F5E86DD11EFB3D7A929C4F9AE02.roa
File:                     91F29F5E86DD11EFB3D7A929C4F9AE02.roa (raw, json)
Hash identifier:          NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=
Subject key identifier:   8A:48:4F:1C:33:91:C5:DA:99:4F:B5:90:0D:D6:A8:98:5B:CC:6E:00
Certificate issuer:       /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Certificate serial:       012D
Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/91F29F5E86DD11EFB3D7A929C4F9AE02.roa
Signing time:             Thu 07 May 2026 05:38:45 +0000
ROA not before:           Thu 07 May 2026 05:38:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139032
IP address blocks:        103.142.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
                          rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
        Validity
            Not Before: May  7 05:38:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc2565-c33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:e7:61:a3:a8:9e:08:e1:92:bf:34:da:47:
                    60:42:1a:b2:5d:ab:83:e9:85:38:7e:ba:5a:28:cc:
                    3c:5e:20:6a:2a:e0:66:93:af:e1:09:c3:3b:c2:49:
                    87:f2:9a:50:3f:4a:da:38:d4:39:86:40:e2:3b:b5:
                    93:ca:28:09:e5:fa:4a:83:a6:f2:5d:76:4a:8d:22:
                    31:b0:b2:03:71:2a:05:26:ae:5f:1f:11:48:59:8a:
                    8c:a6:ce:9f:f7:9d:a9:7e:78:a4:69:ec:6c:93:d6:
                    40:03:a7:8c:73:98:fb:70:0f:4f:c9:38:c4:03:70:
                    8f:fc:08:cc:c5:25:c2:e3:60:6c:8b:f2:53:a7:3c:
                    71:b0:2c:ad:9c:b2:14:00:fc:06:b1:73:66:ee:fc:
                    12:7e:2b:af:d7:7f:cc:00:3a:5c:9a:0e:62:6d:65:
                    6b:36:37:16:22:58:52:d1:a2:38:0d:78:82:e7:b7:
                    21:83:33:93:24:61:00:a9:1b:86:ac:c6:e2:2c:17:
                    26:8b:1a:77:b5:cd:f2:f4:f8:29:f9:d5:59:d2:32:
                    d3:8f:50:a2:e2:dd:89:df:ae:c4:94:6c:ae:f5:84:
                    07:dd:a1:d8:7c:88:22:91:bc:5e:22:0b:d5:ac:02:
                    a1:c8:ca:d5:58:4f:58:72:8b:b0:f9:4f:ec:55:94:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:48:4F:1C:33:91:C5:DA:99:4F:B5:90:0D:D6:A8:98:5B:CC:6E:00
            X509v3 Authority Key Identifier:
                keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/91F29F5E86DD11EFB3D7A929C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:cd:6f:f5:d9:ac:0f:98:c3:7b:10:48:5f:43:e0:ff:1b:
         15:e0:00:63:b8:0a:00:dd:13:a5:a9:39:2c:21:3f:3b:99:50:
         2b:05:4a:d3:d4:b2:15:14:92:7c:60:52:cf:40:4a:83:45:80:
         0c:76:f6:9b:ec:b5:9c:7b:b3:95:45:10:1f:25:1f:85:60:7a:
         21:b0:9b:d5:5d:f8:3f:4d:08:b1:3a:e6:92:d9:31:a4:7b:d0:
         51:42:e2:31:2a:d8:32:1b:87:66:e3:c7:26:20:51:3d:da:95:
         cf:9f:08:af:43:91:ad:85:12:f0:ed:ea:fc:7b:de:a6:07:53:
         4e:17:f3:1b:fc:e9:dc:f4:ea:9b:be:fa:30:4d:04:42:2c:1d:
         91:5d:b7:e1:ec:c1:1b:41:8e:85:f5:93:86:89:46:c8:d7:83:
         77:e3:57:e4:fe:c8:f6:5a:12:b4:93:e5:08:2d:cf:cc:94:be:
         0a:1b:ad:a8:a8:18:5f:89:a1:c9:2e:4b:f7:59:0c:35:58:ef:
         f0:62:59:9e:ed:29:9e:11:ae:08:79:f6:fc:e4:a2:7e:2f:ba:
         6a:15:39:b0:fe:13:23:e6:50:68:ec:76:b0:b9:98:2b:b3:9b:
         66:5d:79:99:6f:7a:97:27:62:81:f5:df:e1:f0:db:51:6c:b5:
         13:28:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:34:27 2026 by rpki-client