Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa
File:                     5C5BA8365D6A11F081971E0DC4F9AE02.roa (raw, json)
Hash identifier:          yCQh77GfzAA6MVXcrT8cCRDK8VNTk64KsqKB1im8Bxs=
Subject key identifier:   24:EA:ED:9B:4C:D6:5A:6D:1C:C0:62:44:1D:74:95:D3:7E:1B:78:D0
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       BE
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 09:34:30 +0000
ROA not before:           Wed 01 Jul 2026 09:34:30 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     6984
IP address blocks:        103.22.236.0/22 maxlen: 22
                          103.22.236.0/23 maxlen: 23
                          103.22.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 07:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Jul  1 09:34:30 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44df26-518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:fc:d3:dc:7a:fb:7d:3f:49:23:57:29:1e:
                    17:47:55:40:03:38:31:58:6d:76:0f:1a:4b:92:e5:
                    c4:a2:68:95:91:a4:b4:3a:9a:13:3a:ab:e3:f5:85:
                    2f:30:25:a1:62:4e:af:5c:50:80:81:2c:f6:8a:2e:
                    c8:0a:5b:7a:29:06:a4:2c:e7:ed:8f:97:f5:c5:54:
                    99:af:b2:39:c4:46:2a:45:aa:4e:50:b3:a1:29:ef:
                    86:13:f4:97:34:2a:13:82:e2:cd:0d:38:06:5a:26:
                    fa:78:c0:07:26:19:97:1c:d0:c7:81:b5:ff:97:11:
                    13:96:f6:e1:8e:a6:b7:1d:1b:69:7e:9a:45:6c:fb:
                    f2:40:ce:a6:e1:08:52:e3:6a:f6:b6:ee:70:99:dc:
                    81:57:f7:03:17:c0:5b:e5:31:42:19:7b:72:6e:d6:
                    fe:66:a5:a0:b1:fa:1f:3f:d1:67:ac:18:b8:74:6b:
                    fc:11:98:92:dc:0f:c4:a2:89:31:96:9b:1c:3d:ca:
                    26:4f:89:92:23:43:1c:94:5c:42:b9:51:1b:d2:66:
                    5b:5c:75:1f:33:12:87:3f:f9:10:43:dc:85:09:a3:
                    a8:c9:80:a2:fd:d6:c0:b4:e4:7f:3f:d9:ed:34:5c:
                    19:ac:e3:0c:47:23:13:79:0a:95:7d:6b:e9:2b:4d:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EA:ED:9B:4C:D6:5A:6D:1C:C0:62:44:1D:74:95:D3:7E:1B:78:D0
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:47:db:49:8b:6b:85:04:58:65:6f:57:e8:c7:f1:59:74:
         ec:32:5f:a2:d8:f7:89:2d:04:19:93:a9:92:c3:10:26:ca:15:
         68:d6:73:03:2c:d3:df:f6:54:b0:b4:d2:a2:db:84:55:2a:aa:
         9e:f1:e5:5c:64:37:98:dd:55:08:02:7e:2f:94:82:53:36:73:
         10:47:41:c0:88:5a:bd:3d:f4:56:16:5a:e8:d9:47:f3:34:3d:
         72:43:a5:79:df:90:cd:fe:1b:58:12:2d:10:01:ca:48:86:35:
         ec:4a:43:63:7d:2b:3f:87:6f:6c:c8:81:cf:28:72:55:34:aa:
         20:87:51:c7:45:82:a3:f6:ee:be:f7:f9:bf:ad:34:18:14:0a:
         59:8c:54:6f:ba:62:e1:fe:0b:76:a1:4a:6c:b7:79:86:46:39:
         35:0d:27:e4:fb:dd:dc:72:e6:9e:38:af:c8:c0:07:22:29:f8:
         c4:d0:b7:5b:3b:0c:e6:14:44:9c:62:19:18:0a:7b:e3:a6:50:
         f0:23:cb:b5:f0:c9:9b:01:38:ca:83:f3:01:25:fd:a4:4b:6a:
         f8:af:e0:c0:dc:32:4e:f1:1a:74:c2:45:34:50:35:bd:b3:39:
         af:f5:58:56:3d:12:5c:a7:a8:14:d0:a2:ee:bc:70:6b:10:1e:
         97:96:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:49:11 2026 by rpki-client