Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
File:                     0E49D1E024CC11EFB113A27BC4F9AE02.roa (raw, json)
Hash identifier:          mkuK3/zOIjE0ZIsB5lxarb1tf0lmRsGK9KZrJ6m+pQc=
Subject key identifier:   C2:BC:12:0A:59:86:67:09:E0:99:35:B6:92:DC:6E:49:F3:A8:47:72
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       01FA
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa
Signing time:             Wed 21 Oct 2026 04:52:00 +0000
ROA not before:           Wed 21 Oct 2026 04:52:00 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137268
IP address blocks:        103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 21 04:52:00 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ad844f0-196f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:10:2e:a9:90:5e:f7:48:34:dc:17:29:56:
                    b5:4e:cc:ab:21:63:08:92:57:42:ac:41:09:3c:1a:
                    83:2c:ab:ab:90:c5:4b:c6:52:52:5a:f3:b9:9d:d7:
                    99:dd:2a:03:0e:a0:9e:3e:10:9f:c3:b0:1e:fc:0e:
                    fb:6b:b9:ab:1f:7b:68:0d:10:92:f1:51:60:50:e1:
                    1f:dc:55:27:77:1c:a1:1b:34:06:7b:8d:2e:44:53:
                    e2:36:bf:1e:d6:57:cd:f2:00:34:4f:0b:19:84:13:
                    db:23:a3:ee:f8:29:2a:db:1b:04:22:8f:88:3e:cf:
                    3d:48:b6:d0:54:2e:45:90:0f:8a:f2:6b:84:bb:b7:
                    e8:6d:a4:3a:f2:8a:2f:1f:67:4e:3e:27:18:29:a5:
                    db:b2:f6:e3:91:ff:04:e4:93:d6:61:18:7a:c9:18:
                    7d:e5:5e:9a:cf:77:a0:18:b8:de:de:27:fb:6f:e6:
                    0a:d8:5c:74:30:44:f8:24:5d:e4:1a:26:91:c1:0b:
                    2f:c9:9f:54:e7:11:48:24:ee:dc:d5:f7:12:6e:63:
                    09:39:81:f0:6d:58:9a:1e:e5:33:1a:71:c7:f3:9e:
                    ea:61:84:d5:21:4a:9e:b9:f1:ce:eb:5a:bb:56:4f:
                    b0:e7:e1:65:f7:ef:32:d3:6a:1e:e4:9a:48:90:e9:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:12:0A:59:86:67:09:E0:99:35:B6:92:DC:6E:49:F3:A8:47:72
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/0E49D1E024CC11EFB113A27BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:9c:6d:32:72:8a:7e:2b:44:4e:a9:1d:26:bd:d9:f1:2d:
         26:52:7d:32:1b:4c:8a:93:5d:5a:e8:e2:b4:e5:28:19:5c:74:
         fe:a0:29:9f:b8:11:7d:fb:db:57:c1:ad:5f:20:dd:74:29:44:
         da:48:98:f3:71:73:ef:a7:b0:ec:50:38:a1:3b:30:a4:8e:ec:
         16:3c:32:5c:4f:ea:a0:17:a6:41:a4:5b:cc:ef:76:c7:81:4a:
         3d:e7:26:20:9b:70:7e:80:f2:d8:83:3c:bf:6a:d1:94:ff:53:
         92:2b:bc:ab:90:41:cb:a3:36:6c:b3:38:cf:7f:da:04:3e:94:
         c6:28:b9:41:3a:fe:f8:29:45:6b:26:b0:5b:0c:d2:80:d3:2a:
         8b:c0:c4:15:2e:fd:60:26:77:84:c1:b8:b4:47:42:f3:59:9c:
         54:3d:5a:e0:b4:5e:4b:c4:cd:7c:5e:a7:47:75:a8:7f:dc:1f:
         25:75:d1:85:96:69:7b:c8:a7:7e:38:db:75:b5:cf:60:2e:02:
         4d:f4:25:c4:ca:47:43:ee:95:06:bf:63:4a:9f:85:a7:54:32:
         ee:e8:47:6d:81:b5:f0:fb:84:e0:b0:fe:1f:ac:36:e4:fe:fe:
         8a:d6:f1:b8:6d:75:76:d8:cb:8e:bf:a6:39:b0:89:5c:1b:9a:
         66:32:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:45:36 2026 by rpki-client