Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/05287CD492B611F0841D2F21C4F9AE02.roa
File:                     05287CD492B611F0841D2F21C4F9AE02.roa (raw, json)
Hash identifier:          LF2bKi2VQJjX8hqIZIkNiAJIYK/BhThU4HGuIaSHpaw=
Subject key identifier:   96:A0:7C:ED:49:7A:B1:D4:4A:6E:BC:E7:CB:1A:B3:B9:A3:7A:5B:97
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       C5
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/05287CD492B611F0841D2F21C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 20:39:51 +0000
ROA not before:           Thu 06 Aug 2026 20:39:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58945
IP address blocks:        103.214.159.0/24 maxlen: 24
                          144.48.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Aug  6 20:39:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a74f117-22b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:21:ce:48:9c:ab:0d:51:3f:a0:89:9c:03:
                    c1:55:6e:2e:d3:69:75:58:c3:c7:94:7f:a2:f3:a2:
                    6a:77:9f:cb:26:b6:98:51:db:b3:ca:19:2f:8c:3b:
                    e2:3a:22:cb:98:bb:39:dd:ba:7f:31:f9:78:21:8f:
                    f7:ec:39:80:48:d5:9e:a4:1b:1c:d9:53:f4:3f:73:
                    99:93:14:90:22:13:9d:4e:f9:60:5f:a8:65:83:53:
                    3b:98:0f:32:47:b3:e6:6e:2e:89:59:82:77:c3:ed:
                    5f:72:07:90:16:61:03:83:6d:23:c8:8e:16:4a:a0:
                    d7:e4:08:4d:fd:b8:8a:49:24:ac:67:19:03:21:87:
                    3c:f9:d2:21:cf:53:62:32:98:ce:f9:f5:a3:9e:09:
                    68:a7:5c:5e:16:16:09:ea:f4:81:13:8a:d9:03:dc:
                    fe:07:69:24:55:6c:66:dc:47:90:7c:23:ad:2b:b5:
                    72:b3:48:dc:e8:a6:e1:05:d1:8d:09:89:b3:84:aa:
                    31:01:84:6d:6c:90:06:27:ba:fd:c5:c4:40:1e:5b:
                    42:fa:d8:ed:f6:ca:11:fa:98:26:2a:73:0d:44:7e:
                    ad:9f:be:41:33:f5:36:76:2e:df:8c:df:95:d6:6d:
                    13:29:b3:7d:0c:c2:2c:7a:5e:7d:8b:79:f2:3f:2a:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A0:7C:ED:49:7A:B1:D4:4A:6E:BC:E7:CB:1A:B3:B9:A3:7A:5B:97
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/05287CD492B611F0841D2F21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.159.0/24
                  144.48.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:d9:5b:d9:fb:15:f6:41:da:13:9c:4c:07:0c:0b:88:eb:
         b5:ee:5f:dc:9a:db:50:a7:5a:51:bb:7d:20:79:1a:e9:d5:58:
         06:4b:12:f2:59:1c:0b:54:4f:c2:7e:1b:f2:b9:87:39:34:cf:
         3a:8b:50:96:b1:62:8d:c9:33:71:c4:18:4b:11:0e:94:14:2c:
         a2:ee:40:8d:80:c3:19:2e:cc:b8:45:95:86:c8:de:6a:34:5e:
         36:ab:49:09:d1:84:7a:ce:ac:54:99:21:b2:eb:54:dd:37:85:
         16:fd:b6:33:9c:20:83:e1:c0:e7:d6:fd:70:5a:4a:bd:ef:c7:
         4e:c9:ab:e2:37:45:f0:d5:86:ac:68:ad:2c:dd:76:04:a6:b3:
         ac:80:1b:7b:c7:a3:3d:03:8e:8c:8e:ee:11:99:01:03:eb:2e:
         c2:85:23:4e:f6:e6:f4:c2:f0:e6:d5:b9:24:60:6e:d1:d7:fe:
         e8:10:c8:e3:a7:b3:25:71:4d:7d:4f:14:93:f9:29:24:6c:97:
         5c:dc:ed:c6:f4:04:32:7e:1f:6f:2c:4f:98:b9:a9:19:08:f5:
         0c:d7:df:36:86:ba:a8:28:7d:de:5c:f5:11:f6:c2:64:01:55:
         76:31:71:5c:27:0f:87:01:26:4b:7d:f5:8f:0e:cd:4b:f8:8d:
         c3:8a:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:44 2026 by rpki-client