Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa
File:                     D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (raw, json)
Hash identifier:          /G73OwPiJ4psw5bo/s2zcxLqBezCIO5fx7Hz2BP5DNA=
Subject key identifier:   06:14:2E:E3:CA:BB:7C:12:85:F6:FE:41:A1:6B:8E:51:FC:FF:87:9C
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       019E
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa
Signing time:             Wed 19 Aug 2026 05:55:20 +0000
ROA not before:           Wed 19 Aug 2026 05:55:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     62610
IP address blocks:        45.121.212.0/24 maxlen: 24
                          45.121.213.0/24 maxlen: 24
                          45.121.214.0/24 maxlen: 24
                          103.62.52.0/24 maxlen: 24
                          103.62.53.0/24 maxlen: 24
                          103.62.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Aug 19 05:55:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a854548-12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:05:46:a6:30:c1:ab:d9:0e:0b:a9:8a:53:
                    09:77:66:9c:4f:40:f6:c7:e0:c8:19:22:8b:d9:34:
                    18:16:69:8e:53:30:32:dc:9a:c1:29:77:5d:07:91:
                    fd:9e:40:22:c6:95:d0:dc:2e:54:88:f8:63:5e:38:
                    f3:98:5d:41:55:fa:fd:b6:d6:17:b2:5c:50:2d:f1:
                    ea:c6:92:7b:7c:95:99:c6:e4:cc:07:7d:5b:3d:81:
                    80:21:bb:ce:f2:82:68:6f:27:d6:56:a7:87:f7:0c:
                    4d:3c:d6:1c:e1:f6:31:8d:85:b3:25:44:c1:34:7f:
                    13:20:2e:19:61:92:62:ba:c9:21:96:72:0d:51:42:
                    05:ef:9e:c8:ac:c1:95:8c:4a:d4:69:a8:d0:38:9c:
                    10:7f:41:ff:45:a3:74:8d:9e:d1:c1:6e:a7:85:f6:
                    06:b7:0d:4b:e0:ad:22:8c:a5:6d:cb:f1:85:61:4a:
                    d9:bf:29:18:84:1f:5e:8c:fb:41:b5:9f:be:3a:67:
                    9a:58:82:66:46:ea:ca:59:1e:e2:d1:5d:c3:a1:79:
                    13:ce:22:a5:bd:36:aa:2e:58:56:d3:89:e9:6f:35:
                    98:41:f5:52:1b:28:69:5a:f1:2d:c5:2f:9e:dd:ea:
                    89:21:12:c2:63:bd:c7:d5:2c:83:39:5f:f6:7e:87:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:14:2E:E3:CA:BB:7C:12:85:F6:FE:41:A1:6B:8E:51:FC:FF:87:9C
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.212.0-45.121.214.255
                  103.62.52.0-103.62.54.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:b8:ae:05:37:4e:ae:0a:4f:8c:56:26:59:69:cb:53:9c:
         ad:69:85:4c:be:7b:a1:e5:da:01:5f:bc:2d:88:40:b6:20:63:
         91:30:8c:ed:e8:3b:a9:62:0b:39:6f:73:23:f2:6b:91:27:e2:
         81:92:05:82:a0:36:74:4a:7b:56:74:e3:77:c5:4f:17:dd:c6:
         a7:f1:00:c9:85:9e:be:60:4f:09:59:df:0c:9a:59:4e:5d:4b:
         49:4c:d1:50:e9:c6:78:bc:33:0b:e6:38:7e:a2:f8:c1:a8:3d:
         18:97:50:fa:b2:f1:0b:c6:c9:50:e1:ac:fd:0d:02:b7:68:e4:
         36:3e:ad:be:eb:01:73:4e:7a:c8:b8:1a:d1:5a:e0:19:a8:0c:
         65:22:a9:90:b8:7c:8a:ca:74:55:41:f3:b0:75:d7:19:4e:fc:
         0b:07:91:5f:5f:8a:60:26:9e:e1:10:1f:a8:88:e1:3b:c5:e7:
         f9:02:1a:d4:e7:11:9a:14:9d:2c:30:84:b3:d9:55:4a:8e:53:
         7e:be:b8:3b:84:56:50:16:35:91:78:4e:0c:b9:d2:f9:87:4a:
         48:3a:0a:8f:8e:2d:f2:ab:a4:a1:50:6d:76:62:a9:37:bd:04:
         ae:e6:46:e7:01:11:80:82:15:34:d4:c9:32:96:9c:36:81:7f:
         b0:c4:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:04 2026 by rpki-client