Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa
File:                     54F537EC32CD11EFA6C5320EC4F9AE02.roa (raw, json)
Hash identifier:          smvDn1UuYrWpoJLZTEoGK78RPg/TRXPRT8W4UlM2oHA=
Subject key identifier:   5B:F6:F4:1F:EB:93:B3:09:35:8C:62:63:0F:FA:62:E5:47:64:DE:B8
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       0753
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa
Signing time:             Wed 08 Jul 2026 23:24:06 +0000
ROA not before:           Wed 08 Jul 2026 23:24:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139212
IP address blocks:        103.139.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Jul  8 23:24:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4edc16-8192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:f8:b2:86:1c:87:56:a3:3c:ee:1a:21:41:
                    8c:a7:fa:7b:fa:44:62:b7:38:ae:1b:f8:60:98:f1:
                    c5:ee:71:db:ff:62:d2:08:b0:54:91:4c:4d:99:d7:
                    c2:13:8a:fe:a5:aa:37:5d:c8:ad:45:57:dc:9f:1b:
                    e9:27:e8:a0:d1:e0:4b:d8:c0:da:37:88:25:4e:c3:
                    c6:0e:64:69:04:fb:21:ae:2e:bb:66:c6:fb:c6:c1:
                    a3:a2:6f:6e:fb:30:e1:55:ef:00:3a:56:23:ba:f0:
                    57:66:64:a3:21:6b:1d:29:a2:7b:40:f5:be:a7:bf:
                    1e:5b:8b:66:44:ca:15:70:11:b4:12:cf:d6:c2:89:
                    90:b9:e7:2b:c9:77:a4:55:80:c7:4e:45:6b:6f:f9:
                    4e:32:18:ff:79:80:8d:35:c9:bf:8b:43:6f:56:3b:
                    2d:de:69:66:c9:05:e4:12:5d:ae:06:08:09:34:cb:
                    9b:6e:85:87:a7:6a:9f:38:26:da:d4:3f:5e:2c:1c:
                    d7:d1:99:ac:4b:ae:c6:a2:b0:2a:0c:18:e3:24:3c:
                    02:f8:c1:97:f0:1c:c3:8d:d8:03:96:a8:2c:b4:9a:
                    a4:39:a8:78:42:9d:41:7b:76:32:38:8d:3a:40:21:
                    e4:96:ef:19:1c:6d:62:17:dd:7b:4c:40:17:cd:1e:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F6:F4:1F:EB:93:B3:09:35:8C:62:63:0F:FA:62:E5:47:64:DE:B8
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:7c:b4:9c:c4:88:59:df:b3:4b:4d:98:a0:9c:b3:a8:e9:
         90:31:e5:6d:95:79:bb:47:f5:76:ad:ac:f5:90:e3:5a:bb:ef:
         77:78:60:aa:0d:5b:d6:f2:de:db:7d:2b:1a:93:ce:0e:82:f8:
         9f:3e:bc:87:a4:c4:9e:8c:1b:9f:a2:e9:29:6d:bc:3f:bb:c4:
         76:a1:40:39:ee:35:40:bb:15:ce:e4:c4:14:e3:3b:d6:a1:e7:
         b9:e8:3f:6e:8c:0d:0b:23:53:c6:fd:e8:7d:36:3d:ea:7a:7b:
         86:f7:99:8b:e0:bc:a4:f1:89:b0:d9:f7:d0:f4:a4:a9:1a:3f:
         4f:90:ef:26:9b:e4:11:d6:a7:d3:90:7a:64:49:f3:05:f8:d8:
         5e:fb:d5:70:b5:ea:0b:5d:ec:66:36:2d:e2:2e:04:5e:a7:68:
         f2:25:d2:6a:51:24:9b:3f:6c:93:68:25:a5:c9:10:01:a3:e0:
         65:9e:6e:b6:9d:3f:b6:7d:4c:f9:42:6e:1e:42:8e:cf:ce:51:
         a1:a3:b9:44:d7:4d:95:b3:be:82:d5:b7:03:14:d6:5c:a2:2f:
         99:91:02:d0:b2:9e:1c:5c:84:a6:13:8e:bf:ce:57:45:81:79:
         f6:0e:59:23:a3:71:02:9f:e9:fc:8c:02:ca:3b:85:0f:a1:3b:
         30:7b:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:21:20 2026 by rpki-client