Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa
File:                     E5C4974689CF11EAA39AF441C4F9AE02.roa (raw, json)
Hash identifier:          IRbA2qv5Q9PCpzmTQD2wXuc1UqDUPOEjncg/wUZE3hc=
Subject key identifier:   74:6D:19:BF:D9:DB:E8:64:DD:E9:E0:41:C8:84:93:3A:AC:AB:F4:28
Certificate issuer:       /CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
Certificate serial:       0A6D
Authority key identifier: 5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa
Signing time:             Sat 02 May 2026 20:24:34 +0000
ROA not before:           Sat 02 May 2026 20:24:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140585
IP address blocks:        103.150.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE285, serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
        Validity
            Not Before: May  2 20:24:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f65d82-c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:ff:ef:42:e7:37:de:f1:91:a8:65:66:00:
                    4d:11:5b:2b:06:82:a2:db:2d:1b:0e:da:d8:71:f0:
                    65:fb:70:3f:20:6f:71:28:51:c5:f0:4a:c6:98:be:
                    58:78:5e:f9:da:dc:86:35:e5:45:9f:08:4a:5b:45:
                    65:5a:fc:55:a4:f9:ed:01:db:25:33:29:63:41:fb:
                    5b:88:d9:e2:96:8a:2b:61:1b:ce:25:8b:0d:3a:91:
                    b6:7b:5b:67:15:b5:f5:03:0c:48:9d:5a:9a:d9:cd:
                    7d:b5:15:98:56:b4:82:90:4f:48:3c:78:e6:66:51:
                    c0:6c:82:0c:1f:27:66:b9:bc:a9:35:1d:66:ae:4c:
                    ca:5b:4a:f1:2b:68:60:9a:fd:d8:98:9f:6a:d2:0a:
                    e7:40:a8:71:c6:f0:1f:05:7d:29:20:2a:e7:56:7f:
                    07:65:7e:c2:e3:04:3d:2c:bb:17:fb:77:bb:9c:18:
                    34:a2:4f:82:ec:7e:84:9f:82:8c:d3:dc:76:a4:e6:
                    27:a1:cc:47:a0:bd:2e:11:a8:a6:c4:95:91:4d:56:
                    55:e5:59:5a:3d:77:c6:ad:fa:75:8a:d7:35:64:00:
                    a8:be:bd:e0:4a:dd:28:9b:f4:43:9c:75:97:40:47:
                    f9:8b:85:7e:5e:a6:89:38:ab:ff:25:1d:bb:de:c4:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6D:19:BF:D9:DB:E8:64:DD:E9:E0:41:C8:84:93:3A:AC:AB:F4:28
            X509v3 Authority Key Identifier:
                keyid:5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:55:e0:62:71:7f:62:6d:c0:72:d8:b6:6f:8e:1b:2b:71:71:
         c0:dc:65:28:d6:2b:69:f4:a1:d7:39:73:d2:5c:ce:85:fa:80:
         ed:2c:d6:53:4a:2f:72:c7:88:30:48:bf:d9:a7:0e:f2:4d:7d:
         ed:69:6b:a1:05:e5:4e:c0:06:b5:e5:b0:f6:17:7a:bf:0b:a3:
         d1:4c:63:78:fa:c1:e8:3a:42:5e:66:ec:83:50:13:04:43:fa:
         96:20:63:6d:e3:cd:a0:27:29:e0:2d:fa:66:fb:e0:4b:ca:ca:
         85:94:2f:bf:c8:ce:27:ab:7b:a1:5a:fc:7b:97:5b:81:52:91:
         57:66:3e:fc:c4:76:35:79:1a:e2:24:5c:df:c8:2d:33:0a:8d:
         26:fa:b5:3d:2d:c4:e0:e3:41:71:2c:27:26:8a:b2:41:46:57:
         03:c5:2d:5b:56:d4:80:bc:8b:1a:e0:a1:57:ae:85:3e:e7:d1:
         e7:d9:4e:bb:57:ce:e2:47:09:f3:af:cd:a0:bb:e1:3a:88:39:
         af:06:fa:57:8c:ce:b4:91:92:1d:76:7a:e5:18:dc:52:2f:54:
         ff:b9:45:38:18:89:3d:2f:5d:af:6a:99:b1:5d:02:f9:0e:ff:
         05:8c:a0:5e:35:7d:e2:f3:b6:89:4d:b0:b2:84:7e:a8:22:88:
         f3:42:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:27:11 2026 by rpki-client