Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
File:                     5D98833C77EC11EEA06F373BC4F9AE02.roa (raw, json)
Hash identifier:          CsyZRvBZjt0dHAYffGH8YRNAMUomFdDHqloAHzosLdk=
Subject key identifier:   40:A9:1D:EC:FE:65:13:A9:07:D6:EF:9F:F9:20:AA:23:7E:96:95:C8
Certificate issuer:       /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial:       021A
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 04:52:12 +0000
ROA not before:           Wed 05 Aug 2026 04:52:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        103.190.124.0/24 maxlen: 24
                          103.190.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
                          rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 02:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
        Validity
            Not Before: Aug  5 04:52:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72c17c-7dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:05:2c:17:89:1a:fa:d4:2b:8a:d2:b9:92:
                    f1:27:89:32:20:97:b3:a6:37:43:bd:a6:36:34:a7:
                    4f:dd:b3:1e:45:68:9d:e3:d5:ca:e4:6b:b2:55:2b:
                    09:7c:bd:ec:a0:c4:ac:02:1f:c9:01:43:27:c8:b9:
                    ae:16:32:74:af:46:85:ed:2a:ed:6e:ce:36:a9:08:
                    dd:c5:9c:c8:1d:8b:fe:5c:5d:16:f6:2f:9e:db:84:
                    f3:bd:a2:f5:c8:6c:46:1c:f6:de:ad:84:58:34:2c:
                    77:c8:68:db:ea:08:ac:2e:5b:02:b7:cd:e4:36:29:
                    3e:93:ef:46:66:82:d4:77:6a:89:e2:6f:47:56:d1:
                    c6:6e:f4:83:9c:8a:6a:23:f0:e4:9e:17:b2:f8:be:
                    20:d2:65:57:b0:c3:a5:de:ca:c7:75:23:9e:73:41:
                    73:fb:3e:a4:b7:d0:ec:2a:2a:3b:63:ed:e5:94:6f:
                    99:fe:ef:27:b9:cd:88:11:bb:6e:fd:9a:9d:f7:6d:
                    da:e5:57:17:c1:83:c6:1b:5a:59:7d:a2:ad:c3:e9:
                    e3:b8:f4:8f:68:9b:2a:20:a6:c6:3d:3e:94:ae:55:
                    7d:b1:f8:d7:29:c7:65:cb:7b:1b:27:4f:e2:c5:10:
                    6e:39:fe:c9:f0:91:8c:ee:35:d8:f3:17:88:6f:c0:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A9:1D:EC:FE:65:13:A9:07:D6:EF:9F:F9:20:AA:23:7E:96:95:C8
            X509v3 Authority Key Identifier:
                keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:5e:ea:a9:e7:00:49:61:5e:ab:1c:c0:8e:c6:0c:c0:42:
         77:9c:16:d2:4b:21:30:3e:cf:fd:8b:79:89:ab:76:c9:c2:ca:
         0d:e3:f1:06:0c:ea:b6:3f:70:5e:8c:93:ae:f6:27:bc:32:10:
         25:18:40:ec:2d:2c:88:f4:c2:a0:77:b2:40:93:02:f9:29:07:
         da:81:3e:cc:0d:b1:e9:94:5d:81:e2:ec:c2:ad:75:5d:02:92:
         ef:a5:d1:08:aa:ab:5e:62:b4:6d:dd:e3:da:a4:5f:a3:8e:d1:
         aa:b9:76:89:44:d4:50:02:b5:a0:99:e5:de:7a:37:d2:55:37:
         e6:a4:9f:7f:77:39:17:d4:a5:8c:09:fe:ba:6d:3b:15:f4:ad:
         c6:03:cb:88:2c:51:e2:5f:5f:47:2a:e3:e8:99:b5:8f:46:e1:
         87:b2:28:a4:94:60:f0:86:3d:b1:4d:ac:e0:ac:66:e0:27:31:
         11:72:68:59:e6:d2:96:d7:0b:cf:82:11:c4:b3:6d:13:ce:34:
         e0:40:5e:54:2d:e1:a2:c9:14:7c:5a:e1:2d:96:8b:88:59:ec:
         b2:86:cd:43:77:df:47:b7:b8:66:55:3e:0b:e0:f7:f2:0c:1d:
         2d:84:5c:de:f6:1f:38:66:6e:80:b6:5f:94:b3:98:f8:d1:87:
         6f:24:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:40:22 2026 by rpki-client