Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59142EC05B5011F1A484689580EE528E.roa
File:                     59142EC05B5011F1A484689580EE528E.roa (raw, json)
Hash identifier:          /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=
Subject key identifier:   49:8B:5F:E2:96:7A:F3:0C:B1:49:17:57:44:9F:2F:51:3D:60:A0:0C
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       03
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59142EC05B5011F1A484689580EE528E.roa
Signing time:             Fri 29 May 2026 11:20:08 +0000
ROA not before:           Fri 29 May 2026 11:20:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136897
IP address blocks:        103.127.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: May 29 11:20:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a197667-529b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:7c:ae:4b:78:0b:d8:3d:ce:35:50:77:4c:
                    04:03:37:da:51:fe:a6:f3:79:6f:13:fe:fb:e4:e3:
                    e8:12:c4:97:f0:fb:df:36:75:48:c8:a2:ee:01:a8:
                    56:c4:d9:b8:12:a3:c5:5d:84:ff:46:57:f1:81:8d:
                    f9:1c:b7:3b:71:9e:13:1b:16:ae:70:94:d3:16:7b:
                    d9:79:42:91:16:d1:95:22:3d:ad:90:63:fc:26:1b:
                    69:a8:44:1d:79:d2:e2:08:8d:88:16:ec:8f:e5:87:
                    09:65:69:fb:a3:ba:1f:5e:d3:b1:45:7c:4b:ad:9f:
                    8a:de:5c:c0:fb:5f:68:bd:5c:ea:e7:c9:df:73:64:
                    06:dc:c7:3a:d6:a6:93:bb:b1:49:f5:0a:9c:e7:7a:
                    7b:64:78:3e:69:cf:f0:9c:5e:ac:d0:de:1e:e4:de:
                    88:7a:bb:8b:6e:74:bf:0a:c7:02:f8:cc:28:6b:1b:
                    1b:e7:cb:cc:22:31:30:e8:6b:89:7b:24:c8:e1:19:
                    d0:d1:a3:a3:11:fc:cc:19:15:0f:b8:25:e3:0f:02:
                    d2:0e:e2:f6:2c:62:6d:c0:c5:d3:2f:8a:14:85:e9:
                    91:92:72:a0:a6:9a:cf:39:1e:88:a0:90:6d:37:27:
                    a2:44:e4:93:e2:bb:fc:7f:57:eb:02:d7:1a:3e:a4:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8B:5F:E2:96:7A:F3:0C:B1:49:17:57:44:9F:2F:51:3D:60:A0:0C
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/59142EC05B5011F1A484689580EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:72:f8:5d:49:2a:ca:2d:bf:30:22:78:d3:cd:ec:98:2d:b2:
         1c:93:1d:a3:b0:b4:19:af:78:ab:46:d7:3a:7e:78:18:7c:3d:
         6d:00:b0:f7:6e:cc:ba:50:2c:d1:d0:16:d0:ff:6f:94:ca:50:
         95:69:ce:5f:7c:c0:9f:7e:c3:0a:25:0f:48:8f:ad:46:a4:6e:
         fa:cd:22:13:a2:91:c6:71:dc:bc:c4:ae:0a:c1:7d:c3:35:cf:
         2d:92:10:83:22:85:fa:d9:42:6c:51:0a:0d:5e:07:4d:5e:90:
         20:92:e5:67:0f:7b:79:13:0e:c1:38:ad:98:e7:1b:a9:96:10:
         bb:54:ff:70:b3:fe:16:1f:82:0b:38:8b:e3:32:b9:a2:3b:72:
         84:ed:8e:50:d5:ef:e8:0c:5e:03:d5:61:6d:aa:6b:41:47:b5:
         d3:9a:fb:bc:a1:38:fc:39:0d:c0:72:2d:71:8e:18:c1:96:6a:
         7c:02:22:95:e6:a8:c2:e4:14:56:18:f3:eb:2c:87:74:33:33:
         e7:aa:42:13:b9:05:d9:90:6a:0a:dd:b5:d5:47:ac:87:62:2a:
         a4:44:9d:48:b8:4a:b5:2e:c8:b8:17:22:27:7d:cd:fa:81:b3:
         07:7f:b7:49:65:0a:c0:e1:93:23:e4:5e:a8:e8:fa:a7:98:32:
         79:a5:54:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:40:01 2026 by rpki-client