Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/5ACD46A25B5011F1A484689580EE528E.roa
File:                     5ACD46A25B5011F1A484689580EE528E.roa (raw, json)
Hash identifier:          /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=
Subject key identifier:   D0:AB:92:B5:BB:85:2B:1A:BD:7C:7F:02:EE:C6:A4:18:B3:8F:03:0E
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       06
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/5ACD46A25B5011F1A484689580EE528E.roa
Signing time:             Fri 29 May 2026 11:20:11 +0000
ROA not before:           Fri 29 May 2026 11:20:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     63889
IP address blocks:        103.127.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: May 29 11:20:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a19766a-355a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:5f:63:28:0d:c0:9c:b8:ee:ec:44:cb:c3:
                    7e:ae:f2:24:47:17:59:69:d8:66:8c:12:eb:0f:35:
                    fe:14:dc:e4:7a:88:7e:16:6f:8b:89:de:30:b3:77:
                    da:f0:79:1b:7b:38:e0:2e:92:b7:4f:ef:7d:66:5f:
                    b3:39:06:92:d4:18:53:6d:6e:f3:b4:cd:ed:75:46:
                    12:b3:0e:ce:18:4b:2f:0e:8f:4a:83:1d:2b:05:3f:
                    1e:52:bd:82:3f:da:85:55:42:c0:16:35:68:c2:10:
                    37:9f:c5:67:08:b3:d8:c5:87:db:da:11:6d:a7:65:
                    16:f9:43:7b:89:69:23:4f:99:d2:32:de:d6:51:7c:
                    d7:c7:22:ad:ee:99:0c:6e:4f:41:56:41:d0:65:86:
                    b6:e1:0f:2d:f7:46:09:3e:85:68:41:c6:ba:9b:14:
                    50:ae:fa:29:82:a7:56:92:2e:bb:6d:e1:cd:31:db:
                    52:cd:f0:8e:af:99:25:dd:e3:f8:df:88:82:4a:f9:
                    07:84:86:3d:56:16:60:5f:d2:e5:05:47:b8:f0:0b:
                    a3:aa:37:4d:9e:3a:84:fd:56:42:85:b3:29:a3:7c:
                    04:a8:4b:19:9d:ee:fb:d2:80:b4:11:58:93:51:66:
                    23:ae:f1:d3:17:91:e4:c4:6d:23:18:63:ce:9a:a9:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AB:92:B5:BB:85:2B:1A:BD:7C:7F:02:EE:C6:A4:18:B3:8F:03:0E
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/5ACD46A25B5011F1A484689580EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:d1:37:6f:95:3e:c1:2b:e4:de:4d:63:6b:96:75:b1:69:bd:
         ac:6f:42:24:9c:eb:1c:3a:de:13:66:aa:d2:0b:1b:1b:9b:ae:
         12:10:92:99:f2:a3:35:0f:d2:da:d6:68:44:04:39:d3:46:b2:
         55:ff:17:d4:90:82:e3:69:07:c7:37:5e:db:f1:7e:dc:e6:fd:
         a9:86:b5:29:a4:69:1c:68:81:a6:30:7d:92:76:57:32:11:08:
         12:e6:39:72:af:98:d5:be:c3:3f:fc:16:a4:6d:6b:1b:65:d6:
         33:5c:bb:91:dc:b2:62:a5:98:ff:ea:f4:67:a2:7e:ee:29:e9:
         fa:5e:6e:08:6f:bc:b1:40:3f:1f:9b:87:c9:db:6f:b7:68:b0:
         56:9b:ca:5b:97:88:94:f9:e3:45:6e:25:12:f8:8e:48:5c:4c:
         a2:34:b9:04:b4:05:8b:cf:bb:14:fd:0e:ca:71:80:c1:4d:d2:
         ea:3b:bf:da:63:bd:f4:93:4b:2e:eb:f6:e3:1c:2a:f1:10:17:
         bb:c3:ef:95:c8:33:30:c8:81:53:d4:93:fd:cd:da:d1:68:63:
         b5:ea:e4:a0:de:80:89:ec:68:45:68:56:20:c2:21:8f:fd:ac:
         e2:f4:9f:e3:b3:87:d9:70:83:f6:83:c4:79:30:df:fa:34:50:
         8f:f2:11:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:46 2026 by rpki-client