Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/28C454FCB41211EF8D2EC946C4F9AE02.roa
File:                     28C454FCB41211EF8D2EC946C4F9AE02.roa (raw, json)
Hash identifier:          OVcfnxD6CMvVurhACrOK00amhdxUOIGPBugGO8sY/mg=
Subject key identifier:   7E:6C:D8:D9:34:EC:7D:97:ED:81:5E:BF:35:E1:E8:32:88:80:7B:C5
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       012A
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/28C454FCB41211EF8D2EC946C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 20:24:02 +0000
ROA not before:           Thu 18 Jun 2026 20:24:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140712
IP address blocks:        103.152.26.0/23 maxlen: 23
                          103.152.26.0/24 maxlen: 24
                          103.152.27.0/24 maxlen: 24
                          2001:df3:f280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Jun 18 20:24:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a3453e1-3ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:db:cc:91:5b:80:42:51:0d:ed:f2:2a:06:
                    39:96:d7:45:4a:96:b3:59:6a:29:b6:df:34:31:16:
                    d0:1b:1a:9a:89:17:9c:2e:da:11:41:da:ad:22:6d:
                    a1:cd:dc:90:7f:39:73:51:94:b8:98:5c:e4:9c:5c:
                    07:09:f1:5a:d6:7d:8c:ef:6d:cc:00:69:b6:fc:b5:
                    a0:93:68:3d:a7:2e:b1:08:e4:64:ec:71:00:94:77:
                    5d:53:33:c1:48:b4:95:3d:e9:92:57:1a:9f:55:2c:
                    93:de:1d:73:54:17:47:4d:02:de:4f:94:7e:7d:4f:
                    c0:86:f1:ac:1a:62:28:49:3b:a0:5a:d9:e8:78:75:
                    60:4f:2c:73:8d:e9:86:95:31:2f:22:21:26:e4:0e:
                    51:c9:96:76:df:9c:22:1c:bb:69:ea:4d:ef:60:38:
                    55:a9:cd:5e:37:f9:e8:34:36:16:3e:1d:42:18:46:
                    07:7b:af:f4:87:bf:0f:2e:55:d6:29:3a:bc:f9:73:
                    ff:19:e1:32:2a:8e:9a:17:b7:2e:cf:72:5e:f8:92:
                    f8:73:3b:05:e7:0b:e7:ed:df:b1:15:0d:a6:c0:89:
                    34:18:94:a8:24:bf:a2:e8:63:b9:f1:e2:91:2e:67:
                    4c:74:e8:95:82:71:23:7d:d2:64:84:07:2b:e5:9e:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:D8:D9:34:EC:7D:97:ED:81:5E:BF:35:E1:E8:32:88:80:7B:C5
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/28C454FCB41211EF8D2EC946C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.26.0/23
                IPv6:
                  2001:df3:f280::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:fe:6e:3b:d8:69:96:16:18:e9:f5:c8:58:45:03:a8:14:
         15:54:39:93:08:61:f8:41:83:62:0c:fd:6d:7a:7e:e4:8e:40:
         85:4e:9b:51:cc:d5:df:fb:c4:c3:09:ff:52:8b:59:c4:d9:e5:
         01:48:66:92:04:a0:a8:83:58:a4:0d:80:23:4c:fa:f2:00:64:
         b3:d0:7d:c3:69:59:2e:5a:b5:97:5b:a8:3e:55:1b:ca:06:33:
         78:a7:0e:4b:14:83:08:04:98:a5:46:5e:84:96:77:8c:9b:6a:
         f5:5f:6e:57:f7:93:13:56:6a:a6:a4:7f:2d:36:1d:54:a1:4c:
         20:52:ee:1a:fd:70:1f:e5:aa:26:ed:21:22:98:a8:f0:ed:df:
         4c:90:d5:43:6a:c7:14:f5:ba:9c:4d:e1:db:65:2e:24:24:79:
         04:a2:cc:a2:85:06:86:d1:bf:4e:dd:d3:e2:47:b7:f6:48:be:
         f9:14:49:8a:1e:62:9c:ab:3b:d3:b1:a5:b4:5d:d9:ba:ca:28:
         dc:ba:c0:81:7d:f7:11:21:63:8e:17:cf:7c:f0:1c:7e:44:24:
         8f:2f:da:a0:d9:24:9f:1f:de:b6:96:66:56:44:e6:d7:b7:7d:
         df:2f:f8:9c:5e:b5:c6:77:c1:f2:f8:5b:32:8f:21:cd:ad:d2:
         ff:44:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:35:52 2026 by rpki-client