Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa
File:                     5E6EBAF64D0611F09396603CC4F9AE02.roa (raw, json)
Hash identifier:          EQ/dGxeAiZ6vHXkroDIcnJlL4m1F5+KIqXhx9EpVY3I=
Subject key identifier:   8A:FE:67:E3:C5:B4:5D:69:52:CB:C7:D9:66:4D:B7:D0:61:BE:96:3D
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       DF
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:20:11 +0000
ROA not before:           Thu 19 Jun 2025 12:10:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141159
IP address blocks:        103.117.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 06:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: Jun 19 12:10:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5aaab-b8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:56:b7:98:d3:15:28:d1:e3:ba:86:ba:61:
                    3e:59:a2:ef:30:47:3d:1d:71:2d:07:e3:55:48:e5:
                    be:5f:41:b2:24:1d:49:b7:52:e7:7d:fd:2b:16:00:
                    af:1c:d2:7f:ae:5d:df:2c:f1:73:0c:00:b4:57:1d:
                    ce:0e:d4:61:43:cf:0e:26:ba:9e:b5:63:c8:e3:30:
                    e2:a8:a8:60:43:d8:fb:1e:ef:b3:db:cd:0a:17:4a:
                    f2:d0:9a:6d:f4:ee:78:d9:e8:0f:cb:26:d4:4e:f6:
                    ef:62:03:f2:f9:c5:27:48:91:02:76:b3:a1:ca:5d:
                    d5:e5:c3:44:eb:75:95:f4:b0:15:26:2d:3c:28:5d:
                    06:7e:32:ff:cd:55:a2:02:7e:c5:d2:00:b7:a5:1b:
                    57:c0:f4:07:1d:6f:95:19:a6:04:86:e6:38:40:69:
                    58:8b:bb:43:03:d1:2a:b9:40:5f:d6:74:17:a6:11:
                    41:18:52:50:8c:6c:4e:6f:4b:7f:4a:82:8f:74:9b:
                    91:d5:70:28:f1:63:ad:1c:7b:2b:36:b9:2b:ea:eb:
                    ff:9e:dc:e2:41:4c:fd:ef:db:bc:c7:8e:1a:9c:97:
                    23:ae:4e:59:f7:c3:e7:f4:33:00:de:85:d4:f4:a9:
                    0b:f2:be:e8:90:a5:17:83:aa:35:d9:93:4a:e8:8c:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:67:E3:C5:B4:5D:69:52:CB:C7:D9:66:4D:B7:D0:61:BE:96:3D
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:ed:4f:c6:53:b6:1f:df:21:f3:c8:77:8f:9b:8f:e0:01:
         05:07:7c:60:44:9f:ed:4f:35:43:ad:08:e0:94:cb:00:01:25:
         6d:a8:d6:29:08:4d:c8:c9:28:06:36:ae:5e:f1:d9:1c:56:19:
         b6:dd:e6:c7:5e:a3:d5:42:c6:44:16:15:f2:a5:1b:85:35:6c:
         5b:27:db:f6:f2:1f:5d:50:eb:36:98:5b:97:b4:45:09:03:e4:
         1d:fe:12:be:24:0a:b3:a1:b8:07:27:7e:04:69:80:5e:39:ae:
         16:96:ca:fe:70:76:04:ed:34:6a:11:8d:2a:ef:05:54:f1:41:
         08:89:e6:4d:98:8a:15:5e:95:17:8e:bc:d4:de:45:44:4a:a3:
         dc:91:2a:78:03:43:2f:3f:2b:e5:ab:65:a1:23:38:b9:69:39:
         bb:05:74:80:2b:e5:a1:92:72:87:51:f9:a6:b1:7a:9f:de:9a:
         96:06:da:b1:5b:fb:df:2a:2c:95:35:1f:83:46:81:70:75:e9:
         42:aa:b0:5e:23:41:d0:b6:d8:0e:d3:7f:c9:86:37:34:b0:82:
         c8:ac:58:e0:0c:60:78:55:88:a1:70:06:26:dc:c8:e4:90:46:
         0f:41:b6:ac:26:66:10:86:4a:05:2b:0c:01:d4:3c:7c:1b:e3:
         06:e7:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:44:33 2026 by rpki-client