Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa
File:                     5295B96E705F11F1BD79389570A30FBC.roa (raw, json)
Hash identifier:          n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=
Subject key identifier:   80:0D:D8:F2:DF:BB:F7:A9:A3:FB:E5:45:97:30:4D:A4:F7:0B:22:C4
Certificate issuer:       /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial:       058C
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa
Signing time:             Thu 25 Jun 2026 06:30:14 +0000
ROA not before:           Thu 25 Jun 2026 06:30:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     963
IP address blocks:        103.147.224.0/23 maxlen: 24
                          103.231.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
        Validity
            Not Before: Jun 25 06:30:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a3ccaf5-e8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:27:f0:c5:67:fb:42:ee:2f:b4:ef:bf:96:
                    70:2a:1b:7d:0f:ee:44:81:7a:4a:e9:6e:4b:52:ca:
                    93:fa:f9:55:4e:4b:f8:20:7f:11:dd:bb:15:1b:99:
                    ab:a3:38:8e:18:5f:3d:da:47:b6:63:2b:3b:48:b9:
                    ae:34:04:9f:a5:18:8e:73:cb:53:f5:a6:cf:bd:6d:
                    25:c4:dd:34:14:84:18:b0:ea:34:45:fa:8c:c4:57:
                    9c:3e:55:6c:0a:9d:ae:ad:6e:9a:9f:6e:e2:b1:a4:
                    c3:81:ab:1f:b6:7b:58:4e:54:b0:f1:09:ec:ed:2f:
                    87:54:f7:b4:32:51:d2:72:4b:d3:66:a6:45:83:1f:
                    c1:cc:39:cb:7e:e7:78:53:ea:c2:25:e3:eb:06:f3:
                    c5:b5:87:4c:fb:3b:e0:7e:0d:c8:a6:c3:fd:88:d7:
                    a2:e7:8d:aa:39:91:7e:b6:d6:c2:ed:d2:81:77:21:
                    0a:ce:25:72:27:a6:c8:ca:36:86:de:c0:d7:50:a0:
                    f7:e1:61:51:b9:81:c5:03:7b:a1:fe:f6:bb:be:df:
                    b9:17:72:8d:bc:01:b6:ea:aa:aa:82:96:97:d2:5a:
                    40:90:e5:b8:1d:d0:b9:01:fd:d1:54:a5:0e:50:4a:
                    ef:f6:3b:5b:10:f9:7d:e1:42:f0:84:b4:64:2d:48:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0D:D8:F2:DF:BB:F7:A9:A3:FB:E5:45:97:30:4D:A4:F7:0B:22:C4
            X509v3 Authority Key Identifier:
                keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.224.0/23
                  103.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:26:94:cc:75:4c:b5:e1:ec:b6:a9:59:b2:63:17:27:e6:f2:
         b3:02:9e:69:32:23:61:fe:62:90:69:97:11:1a:01:0a:a0:db:
         dd:30:6f:c1:5d:c4:39:d1:17:19:10:24:82:81:c8:38:c8:dc:
         fe:af:fd:3a:67:64:12:38:6b:0c:ac:15:cf:9c:01:07:d4:a9:
         5d:83:21:10:d4:93:bf:69:5e:97:67:56:b0:56:4e:76:ea:a6:
         8f:09:ba:23:cc:50:6b:49:32:7f:db:d5:42:b2:76:0e:83:25:
         d2:f8:17:f3:29:ea:b5:33:12:c7:a1:91:91:6b:52:1a:76:91:
         9e:6c:bc:8d:01:20:64:65:90:b3:27:3f:26:ba:53:0b:88:48:
         18:fc:af:cc:4e:95:b5:0c:29:97:50:53:36:71:14:94:8f:ec:
         a1:b0:35:14:58:f7:7e:12:54:4f:ea:e4:3c:65:f5:1c:bd:99:
         9a:f6:7b:ce:0e:47:a6:5b:e3:97:54:73:dd:a1:71:56:b2:93:
         03:9b:ba:6a:d0:e9:f7:c7:ab:63:95:92:11:20:b1:5e:40:a2:
         f5:e4:da:86:53:c9:8f:12:dc:12:04:b2:2c:14:41:4a:0d:e1:
         50:06:c7:25:61:35:b1:28:1d:cb:2f:99:72:07:c5:88:cf:49:
         fc:57:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:37 2026 by rpki-client