Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa
File:                     CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (raw, json)
Hash identifier:          j33KzZlVrojMXd1vY1E25aYovbHBtbECzEeQK9fABXU=
Subject key identifier:   CB:C0:36:79:59:26:C5:86:FA:B0:53:70:09:6B:63:31:7C:58:90:96
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       0754
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa
Signing time:             Wed 08 Jul 2026 23:24:08 +0000
ROA not before:           Wed 08 Jul 2026 23:24:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152464
IP address blocks:        103.139.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Jul  8 23:24:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4edc18-2368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5d:88:5a:9c:a8:f8:fd:38:89:93:c9:75:ce:
                    46:5e:4a:e0:33:f7:ea:d6:a5:ce:29:20:8d:76:64:
                    f8:44:84:a1:a2:c6:97:e8:94:8f:de:7c:64:3a:f4:
                    54:f0:28:ef:4a:f2:3e:e4:44:11:de:18:9e:4d:28:
                    6f:ff:01:a4:36:3f:4a:ea:a7:b0:ac:e1:80:98:7c:
                    d7:18:ed:cd:5c:73:e5:3a:5a:6d:5f:77:b0:f3:c7:
                    a9:a2:a8:94:87:9e:ac:ca:1b:ea:4e:aa:f2:7c:d1:
                    d5:cf:70:d1:e4:25:f4:99:d4:c5:d1:48:b3:56:15:
                    c9:c6:d0:cd:29:fd:4e:a0:bd:c3:0d:b8:a6:cf:19:
                    93:bd:af:a8:9f:a1:fc:dc:49:2f:72:d4:a1:c0:3f:
                    14:97:2e:3f:18:f1:94:b0:3d:d5:0f:2c:f0:95:6a:
                    d2:25:53:b1:97:19:4c:47:ef:73:cc:bb:a8:f0:69:
                    1c:b5:35:59:82:6f:34:87:13:af:53:60:c9:48:34:
                    87:c0:d7:53:61:a2:b4:53:6b:ac:bd:a7:f5:4e:f2:
                    31:00:1e:9e:4c:2d:94:62:99:f3:a8:99:09:07:3e:
                    78:d6:d9:b8:9e:af:a5:b5:d1:6d:c3:eb:6f:94:d1:
                    84:3d:3f:e9:55:79:fb:1b:96:f0:15:ff:42:a3:08:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C0:36:79:59:26:C5:86:FA:B0:53:70:09:6B:63:31:7C:58:90:96
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:cc:20:c3:d7:44:3f:24:2c:d5:dd:e1:60:e2:94:8a:89:
         89:9a:0a:19:84:0e:90:de:6f:4b:5e:e0:84:01:84:66:0c:13:
         44:ce:e5:92:40:5b:6d:fd:7e:d6:f2:70:55:7b:37:e7:73:c7:
         53:a6:aa:1f:48:9a:f2:9c:86:dd:8d:b8:9a:71:a4:23:51:e3:
         9e:77:2d:bf:6c:17:4c:25:62:e7:11:ec:d4:ad:69:50:13:dc:
         5d:56:fa:72:72:11:84:fb:98:d2:1d:e6:22:99:fc:a2:36:01:
         8e:40:2d:fc:1d:40:7d:c2:15:fe:01:10:81:52:2c:84:3d:77:
         f3:6e:cd:ed:13:cc:93:f5:23:58:bc:09:a6:fc:77:d8:34:23:
         d1:bc:c7:de:9f:e8:bf:f6:c5:f9:29:15:e7:c9:4c:aa:d8:32:
         2e:9f:61:54:ba:b8:7c:92:47:12:6a:b2:a7:ff:db:1f:cc:ca:
         25:4a:c2:f0:36:49:5d:a5:e2:6b:3a:53:c6:e6:de:53:ea:61:
         36:28:92:50:8e:9a:94:c4:bc:7b:9f:88:96:88:a7:91:a0:a3:
         b2:f0:3c:90:92:13:3e:f1:2d:0b:94:64:ee:62:cc:42:23:55:
         07:dd:22:14:42:58:8d:10:1f:e7:43:18:9e:79:5e:b4:95:f3:
         c7:b6:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:13:02 2026 by rpki-client