Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
File:                     507C31C21D7211EFA095B25AC4F9AE02.roa (raw, json)
Hash identifier:          iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=
Subject key identifier:   32:FC:3A:69:CA:4D:93:49:CF:D6:C0:AA:8D:34:EA:7B:A8:52:03:D1
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       0189
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
Signing time:             Sat 23 May 2026 05:36:22 +0000
ROA not before:           Sat 23 May 2026 05:36:22 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17559
IP address blocks:        203.14.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: May 23 05:36:22 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a113cd5-f02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:63:45:2a:bc:0b:8c:16:5e:18:7c:60:18:
                    4d:30:db:0f:95:84:f0:ad:24:09:e6:6d:11:38:70:
                    81:52:95:b5:d5:6e:8e:cc:fd:9d:59:a6:4a:ad:85:
                    53:e9:5d:e1:8e:8c:0b:d5:f8:df:ed:e9:41:dc:af:
                    fe:76:26:2c:7f:8c:76:3a:e8:a3:c7:78:9b:35:84:
                    84:33:61:b8:f3:f9:cd:3c:94:d3:bc:1f:1b:e9:b1:
                    70:52:fd:5d:fe:0f:54:6e:5e:29:ba:8b:93:0d:ba:
                    2b:7a:56:3d:4f:d7:53:e0:a3:d4:bb:cf:83:cb:98:
                    b2:0e:61:8e:af:c3:8e:8f:ef:2d:9a:4c:fd:a9:d2:
                    58:e5:b8:ff:53:97:49:ac:49:05:b1:a4:44:c6:1f:
                    11:8e:10:49:d3:3c:26:e7:24:4f:50:94:31:79:02:
                    7c:78:db:1c:3e:ce:57:06:9e:9c:e2:a7:46:a3:19:
                    db:55:48:89:bf:30:7a:63:ab:c6:3d:60:7f:89:d5:
                    82:66:54:88:92:70:7a:d6:e9:1a:05:fa:2c:86:ad:
                    db:db:dc:37:fc:c9:82:01:19:a4:96:ee:25:c9:6a:
                    e2:69:6e:ea:d4:f1:fb:5e:b3:ce:8c:e4:4a:c5:bc:
                    52:67:57:4b:85:a9:73:77:93:61:f5:40:be:57:f8:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:3A:69:CA:4D:93:49:CF:D6:C0:AA:8D:34:EA:7B:A8:52:03:D1
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:88:19:f1:b1:95:15:a0:9a:ef:11:a1:23:83:fc:93:90:8e:
         8f:81:d7:96:ac:92:65:81:94:13:2c:97:36:e3:17:92:c2:8e:
         b9:c5:d2:b9:0a:14:1a:5b:4b:2c:6b:69:b7:b7:a3:f1:fa:94:
         77:66:95:73:af:8e:c3:d8:80:78:be:b9:83:e8:d8:93:c7:9c:
         a0:d4:e5:0c:8e:5c:4a:af:98:fb:f8:e9:ff:7a:c6:1d:a2:f7:
         2f:0a:95:97:44:ff:32:38:45:2a:db:2c:58:ea:9f:39:83:a1:
         5c:bb:a9:fe:3a:11:77:28:cf:c2:35:8c:63:18:56:20:10:e9:
         84:5e:74:71:fc:6d:dc:b8:5d:70:7a:b8:10:aa:c9:8b:4e:95:
         e5:8a:4c:5b:4a:f4:7b:15:77:47:8f:c5:05:02:f9:ce:2d:96:
         5b:c7:a2:dd:4b:fe:9f:00:6c:c7:11:a3:13:f8:41:34:73:86:
         d1:4a:7b:1a:96:c5:bc:31:b3:8b:72:73:32:17:b5:34:4d:53:
         24:a8:14:d6:a6:67:85:1e:b2:cf:ab:01:9f:a2:03:f8:4d:7f:
         f0:26:01:a7:45:90:32:ae:76:d6:e9:b1:ef:40:84:93:1c:8c:
         cb:f9:70:eb:6a:d2:49:51:b2:16:0f:29:d4:62:00:e2:34:07:
         7e:da:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:10 2026 by rpki-client