Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/E86C4B1E04AE11EC92C8D079C4F9AE02.roa
File:                     E86C4B1E04AE11EC92C8D079C4F9AE02.roa (raw, json)
Hash identifier:          L/ZZApSsPeBxREHLOWMSsVqSabeT9EMIVRRd1XUEbrY=
Subject key identifier:   67:F0:EB:2D:72:A6:29:C5:EA:0B:6B:BC:9C:DF:F3:F7:F4:50:38:3B
Certificate issuer:       /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Certificate serial:       0609
Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/E86C4B1E04AE11EC92C8D079C4F9AE02.roa
Signing time:             Mon 10 Aug 2026 22:44:41 +0000
ROA not before:           Mon 10 Aug 2026 22:44:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139588
IP address blocks:        103.142.5.0/24 maxlen: 24
                          103.208.64.0/24 maxlen: 24
                          2001:df1:2280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
                          rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 22:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
        Validity
            Not Before: Aug 10 22:44:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7a5459-a7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:4b:64:d2:b7:df:88:5c:2d:e3:59:90:cf:
                    d9:78:1a:e0:35:c4:87:cd:d9:65:35:f9:2f:e5:59:
                    f2:9a:fa:28:18:e0:8b:05:3f:d4:b1:f3:5d:1d:17:
                    6d:53:dd:34:77:f7:f7:cf:44:fd:56:23:ee:52:3e:
                    2b:7e:45:a7:1e:ef:92:a3:61:21:d9:8f:24:1b:f8:
                    6e:5e:7e:3c:ad:51:d4:aa:ba:27:99:63:17:23:e8:
                    b3:2a:b6:10:29:2d:64:aa:8f:4b:5c:9e:c1:b2:3f:
                    6a:e9:72:1c:25:e3:e5:97:af:09:fb:2d:03:10:7e:
                    e6:da:56:c4:b9:ff:6a:69:ed:8c:73:cc:b8:e9:c7:
                    7f:20:73:81:67:02:40:cf:03:2e:39:89:3a:7c:3c:
                    2f:92:03:17:5f:73:1c:b1:58:bd:75:67:65:63:1b:
                    4c:38:11:80:dc:73:9a:cd:55:f2:d3:a7:ee:ad:cc:
                    dc:e8:df:b6:ed:5f:eb:a1:7f:ed:ab:7c:e8:90:07:
                    03:09:1f:26:e8:da:1e:6c:16:5c:a6:32:9a:2e:36:
                    c4:7f:3e:c5:0b:48:c6:a1:77:48:69:4f:ab:13:20:
                    56:e3:70:aa:9b:57:5a:e6:74:11:61:5f:df:b4:bd:
                    52:5d:82:d8:d4:86:c0:1b:72:03:03:01:42:94:10:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:EB:2D:72:A6:29:C5:EA:0B:6B:BC:9C:DF:F3:F7:F4:50:38:3B
            X509v3 Authority Key Identifier:
                keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/E86C4B1E04AE11EC92C8D079C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.5.0/24
                  103.208.64.0/24
                IPv6:
                  2001:df1:2280::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:de:ea:ea:ee:52:ba:f6:6b:bb:60:33:50:cc:43:d4:56:0d:
         4b:e7:65:d1:9c:eb:b3:71:d5:13:13:0d:4a:01:3d:dd:01:fc:
         49:1e:98:6c:e5:7c:1c:13:57:b5:0c:a1:32:09:e5:ad:1a:0d:
         40:cd:64:f4:30:1e:8d:ee:eb:b4:58:cb:88:75:76:8e:60:14:
         73:a7:1f:2d:e0:26:c5:ba:c9:cf:9d:87:9e:56:ed:ac:3f:c6:
         80:a1:f4:f7:4b:ce:ae:04:5e:f1:23:2f:d7:09:1d:95:3d:2e:
         fe:0c:e7:63:83:0a:35:2f:d1:13:ac:f2:6a:31:82:b5:8f:26:
         e3:42:20:c0:90:48:f8:5e:e0:b6:0e:7b:18:86:92:84:25:bf:
         63:e8:16:9b:10:59:18:26:d2:a6:0a:a5:cc:09:f3:33:be:93:
         3d:b0:74:72:34:91:36:52:b0:55:77:23:65:0b:78:07:e4:93:
         7b:78:1c:00:9d:66:73:34:9e:79:a6:0f:f2:9c:3e:3c:c6:f6:
         11:b1:d9:77:67:b3:75:a1:d7:28:85:e0:d0:b9:cc:12:7b:ae:
         71:90:30:ba:8f:e2:4f:58:57:7b:d9:3e:8d:ad:4d:a5:c0:b4:
         74:57:8b:40:20:46:8a:1a:31:61:72:4b:2a:44:6b:8d:6e:08:
         02:1b:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:47 2026 by rpki-client