Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
File:                     51C204DAEA9011EFB8B82081C4F9AE02.roa (raw, json)
Hash identifier:          M7rxsuOrH2kuk/pXICO7DXTzFRaUh4fgHJe4Gm7Q1vM=
Subject key identifier:   2B:54:01:19:03:0E:CE:C5:19:99:B1:A9:EF:FD:D5:DA:8D:C6:C7:5A
Certificate issuer:       /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial:       0265
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
Signing time:             Fri 19 Jun 2026 02:32:06 +0000
ROA not before:           Fri 19 Jun 2026 02:32:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136609
IP address blocks:        103.93.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
        Validity
            Not Before: Jun 19 02:32:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a34aa26-a41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:c7:7c:5e:45:f6:7b:e0:e9:ad:3a:fb:a9:
                    5c:33:00:db:ea:c2:98:61:ba:39:2d:d8:2a:72:d0:
                    bf:17:37:9f:62:33:92:19:6a:d6:fd:d9:b6:c7:b4:
                    eb:a8:d6:30:52:22:cd:77:49:84:68:42:28:f2:ac:
                    63:dc:d0:ca:89:92:ae:bd:a1:bf:9f:c9:87:13:1b:
                    d2:ff:f5:eb:f7:ea:3f:fb:6d:ad:34:28:01:9a:e2:
                    0f:b1:9f:dd:1c:8b:59:ca:0b:b8:85:45:c6:a3:19:
                    db:7a:25:57:b1:4c:80:2e:a7:15:28:82:cb:34:a5:
                    50:07:6a:65:a0:bc:d6:63:73:7d:a4:75:dc:b3:5e:
                    cb:a1:13:c8:5c:d5:40:c0:af:9f:ca:f5:81:3e:e3:
                    10:28:4e:13:a1:e8:d2:12:15:9b:a8:f1:0f:29:0d:
                    0d:52:54:6d:df:a7:4c:a9:d3:ec:8d:d6:63:9f:9e:
                    7e:9c:0c:ee:1b:5b:77:8c:9e:5d:61:fe:37:46:ae:
                    ac:bf:63:d7:5d:56:7c:f5:26:fb:64:4a:97:d3:9b:
                    d4:1e:e1:c4:e5:3d:27:32:17:8c:36:10:de:48:78:
                    fb:6b:2e:67:af:bf:e7:e2:59:f1:4d:70:9f:9d:9a:
                    2f:16:97:25:eb:b4:99:43:c9:ab:46:82:9d:ed:4c:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:54:01:19:03:0E:CE:C5:19:99:B1:A9:EF:FD:D5:DA:8D:C6:C7:5A
            X509v3 Authority Key Identifier:
                keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d5:4e:c4:4e:ee:29:f7:83:35:5d:d8:28:5a:e7:20:6c:4a:
         6f:60:f2:b8:d6:98:38:ea:a1:ae:46:dc:98:a6:eb:2c:48:5f:
         c2:19:88:44:b3:fe:52:79:86:00:8b:c8:a9:44:bd:01:1d:3e:
         f6:a5:b6:03:3e:43:97:c5:94:21:0c:76:43:f7:0c:dd:42:b0:
         3c:70:fa:68:18:0a:24:43:2e:23:a7:80:94:cd:75:39:75:13:
         6b:d2:9d:eb:31:a3:88:41:45:2c:59:c9:19:d7:70:8e:c5:c7:
         e6:fc:63:e2:5e:34:86:2a:44:f0:4c:f6:d8:b8:00:69:10:e3:
         ce:b4:ad:76:ee:24:d5:13:90:d9:70:66:d0:f4:93:7b:9c:36:
         ee:ae:e2:69:a6:55:31:e5:49:7b:b5:6e:24:cd:8e:5b:1b:73:
         94:69:ca:ed:c0:56:78:d6:b3:b7:dc:c5:2f:11:38:e9:c0:fa:
         1f:4c:af:e6:c8:cc:07:8d:7f:48:c6:d1:c0:9e:59:36:1c:05:
         fa:68:93:e9:34:f5:62:1b:f6:3f:54:b9:18:37:50:7e:52:2a:
         34:a9:d4:d1:df:27:56:18:87:48:cf:16:75:be:1d:c1:fa:cc:
         6e:04:c9:1a:de:91:7f:23:3d:a2:45:0e:1a:98:b8:4c:fe:86:
         74:2b:f8:92
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG
ODlFMTNBNzAwHhcNMjYwNjE5MDIzMjA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM0YWEyNi1hNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwrHfF5F9nvg6a06+6lcMwDb6sKYYbo5LdgqctC/FzefYjOSGWrW/dm2x7Tr
qNYwUiLNd0mEaEIo8qxj3NDKiZKuvaG/n8mHExvS//Xr9+o/+22tNCgBmuIPsZ/d
HItZygu4hUXGoxnbeiVXsUyALqcVKILLNKVQB2ploLzWY3N9pHXcs17LoRPIXNVA
wK+fyvWBPuMQKE4ToejSEhWbqPEPKQ0NUlRt36dMqdPsjdZjn55+nAzuG1t3jJ5d
Yf43Rq6sv2PXXVZ89Sb7ZEqX05vUHuHE5T0nMheMNhDeSHj7ay5nr7/n4lnxTXCf
nZovFpcl67SZQ8mrRoKd7UyPJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCtUARkD
Ds7FGZmxqe/91dqNxsdaMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5
RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFFMzAvNUNBNTA1MkNDOUQ3MTFFRDkyQTEzODJDQzRGOUFFMDIvNTFDMjA0REFF
QTkwMTFFRkI4QjgyMDgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ13vMA0GCSqGSIb3DQEBCwUAA4IBAQCH1U7ETu4p94M1XdgoWucg
bEpvYPK41pg46qGuRtyYpussSF/CGYhEs/5SeYYAi8ipRL0BHT72pbYDPkOXxZQh
DHZD9wzdQrA8cPpoGAokQy4jp4CUzXU5dRNr0p3rMaOIQUUsWckZ13COxcfm/GPi
XjSGKkTwTPbYuABpEOPOtK127iTVE5DZcGbQ9JN7nDburuJpplUx5Ul7tW4kzY5b
G3OUacrtwFZ41rO33MUvETjpwPofTK/myMwHjX9IxtHAnlk2HAX6aJPpNPViG/Y/
VLkYN1B+Uio0qdTR3ydWGIdIzxZ1vh3B+sxuBMka3pF/Iz2iRQ4amLhM/oZ0K/iS
-----END CERTIFICATE-----
Generated at Wed Jun 24 12:36:01 2026 by rpki-client