Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
File:                     C53629FEEACE11EEA8513D34C4F9AE02.roa (raw, json)
Hash identifier:          ay4GIuiEnpuYZETBZhn2rjkhmfn883sJShryuS/KCcM=
Subject key identifier:   C0:8C:FF:8F:69:C1:FD:93:0A:79:0B:3D:55:15:B5:55:DE:6A:39:64
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0C50
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 19:38:05 +0000
ROA not before:           Tue 18 Aug 2026 19:38:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141351
IP address blocks:        103.116.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Aug 18 19:38:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a84b49d-086d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:d8:b7:78:60:e3:03:4d:cc:39:ed:40:43:
                    4e:9b:27:7d:53:5c:72:32:69:fd:d1:fa:95:b4:30:
                    de:a5:5c:35:03:12:3a:3c:cf:03:6d:29:60:10:d9:
                    d1:15:a0:9e:07:c6:1a:39:c0:cb:39:da:53:34:84:
                    39:d9:12:0a:40:77:23:c2:f5:1b:69:07:d6:46:d6:
                    a5:23:7e:ca:c7:b3:f9:4e:0c:1a:92:e5:98:c4:8c:
                    3e:e4:ed:0a:f6:4d:af:2d:87:f3:a8:93:08:29:2c:
                    37:f9:85:54:44:6b:7e:b9:91:5d:2b:76:a0:c1:6a:
                    63:73:d3:d0:70:c0:cf:fd:2c:90:6a:dc:2e:be:fe:
                    33:0f:f4:25:98:1f:72:ef:a0:f5:7b:3e:1a:1c:eb:
                    b2:f5:f5:b4:e4:7d:83:2c:a2:d3:f2:c1:a7:b0:47:
                    32:8e:a2:34:75:b8:15:d5:67:2e:d3:be:c3:e0:a6:
                    76:02:b0:de:0a:2a:e8:ae:e1:14:df:75:c0:f8:af:
                    ef:7c:f9:b7:4d:89:36:db:e7:09:aa:a9:b1:15:a4:
                    6f:e7:31:f5:3e:21:06:ef:18:d2:d7:36:34:5b:42:
                    ec:0e:35:e1:2a:60:a1:5a:40:32:ce:6f:d7:04:56:
                    cf:01:13:aa:5f:0f:4a:ff:e9:0c:af:b0:54:28:15:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:FF:8F:69:C1:FD:93:0A:79:0B:3D:55:15:B5:55:DE:6A:39:64
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:74:65:42:bc:df:9a:54:03:52:ec:75:7a:5a:6c:b5:d0:5e:
         a0:e6:e9:64:20:33:85:6e:78:52:63:8f:d7:15:b4:ca:0c:7c:
         87:50:ae:c4:f8:96:0d:e7:7b:c3:ed:23:58:3f:bb:98:d5:2f:
         7b:4f:15:fc:33:8d:2c:08:af:ff:43:a7:08:cd:bc:d4:7a:5d:
         eb:b3:dc:f1:85:26:5b:19:d5:81:df:7b:7e:b8:fb:90:b3:cd:
         51:ef:ba:8b:82:c6:e9:c6:06:8f:83:87:96:39:42:55:c3:ee:
         dd:e7:16:6f:00:6d:77:03:05:25:f7:04:e2:c5:80:5e:3c:ae:
         da:d2:5f:ad:cc:71:7b:8d:8e:61:82:e6:83:ae:43:e6:b2:b9:
         67:9a:06:7e:da:7f:75:fd:45:d7:a8:b2:20:64:8c:f7:92:be:
         ef:c5:30:83:11:d7:99:28:aa:73:46:0a:9e:e0:de:54:25:a8:
         d5:9c:77:c9:01:6e:f3:7a:85:54:6d:1f:f3:b7:97:41:df:87:
         c5:1d:9c:cb:ea:b7:c9:76:0e:85:4f:76:26:24:f5:63:1a:9b:
         d5:78:ca:1e:00:f3:9a:55:b5:fb:bb:58:e6:4e:94:8a:65:f8:
         d7:14:53:60:cf:5a:c4:57:a0:07:52:6d:d9:03:0f:87:3e:d1:
         bf:3a:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:34 2026 by rpki-client