Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
File:                     14AD3D427E9D11EC914D4A6DC4F9AE02.roa (raw, json)
Hash identifier:          acqTZFyzsES/Jw8lzPnjdR3O1fOEuCWSbHFZnsAZDc8=
Subject key identifier:   3E:B2:A6:56:41:15:2F:F6:37:1A:7C:46:E4:5E:03:6C:C3:8E:E4:4C
Certificate issuer:       /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial:       04E9
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
Signing time:             Wed 29 Jul 2026 00:48:45 +0000
ROA not before:           Wed 29 Jul 2026 00:48:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137956
IP address blocks:        103.118.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
        Validity
            Not Before: Jul 29 00:48:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a694ded-f3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:b1:91:f5:a7:ea:85:79:e9:19:10:96:ec:
                    2a:a6:0e:5d:3a:e5:42:c6:a0:1a:73:e1:75:1e:83:
                    96:96:1c:9c:35:20:67:2b:24:04:af:89:ae:e5:b6:
                    a3:31:d0:f9:56:d5:76:f0:d2:60:d7:16:34:19:43:
                    20:8e:0e:cf:ce:48:f2:63:5e:df:3e:d0:e2:42:d7:
                    46:90:65:88:7e:d0:ed:0b:34:3e:6a:b3:88:aa:f9:
                    6f:af:c6:af:0b:3a:98:99:ca:ba:d6:af:8d:e8:50:
                    b8:81:22:86:56:bc:85:1d:84:10:1c:00:47:92:7c:
                    4e:13:17:3a:56:1f:25:65:9e:c4:cb:ce:b5:28:13:
                    e6:b2:d7:bd:f0:b7:88:66:e4:71:b3:75:30:d2:62:
                    1b:52:10:46:da:92:3b:dc:75:bd:24:fa:f3:4e:1f:
                    d7:ef:ee:01:da:59:5d:92:af:eb:ee:22:16:00:bd:
                    31:d0:56:ce:7f:5b:df:3f:b0:53:96:bd:8c:13:63:
                    b8:3b:c6:42:1a:f7:32:08:88:7e:a5:0b:d0:af:76:
                    5e:62:61:35:d1:be:dd:90:5b:53:e9:9a:75:a8:12:
                    50:2d:23:b3:35:30:54:fc:7e:2e:4e:1e:c1:b9:58:
                    6f:63:e9:39:0d:60:b7:28:aa:b8:ce:b2:ca:b6:0f:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:A6:56:41:15:2F:F6:37:1A:7C:46:E4:5E:03:6C:C3:8E:E4:4C
            X509v3 Authority Key Identifier:
                keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:5e:dd:4d:b9:76:68:97:86:79:01:f8:4a:e1:f0:24:a3:
         af:fd:f0:fe:79:30:64:70:3c:44:cf:22:0e:15:c6:dd:8f:fb:
         3e:8c:08:73:d1:4e:e4:66:bd:c2:8a:6b:96:b3:c3:85:2d:02:
         65:20:23:22:9b:ec:7d:b9:f6:24:d9:9c:ff:e9:cc:bc:b5:ed:
         68:33:23:58:d3:2c:37:56:6b:68:9a:0e:85:5c:62:f0:74:cd:
         e1:58:d2:66:6a:a8:7f:6c:46:61:1f:31:52:ee:c0:aa:86:e6:
         d0:90:a2:73:2c:b2:e1:cc:b0:5e:f1:01:38:f4:f0:86:67:63:
         06:b1:31:b9:f1:8e:7b:45:d0:8d:b8:aa:e4:2b:2d:26:75:d1:
         ee:39:f7:4f:68:c6:f5:50:0a:e4:18:43:5e:7c:a5:d8:4d:6e:
         6a:27:32:a7:05:c2:70:0b:86:33:0f:e2:ca:6f:ae:4e:5e:23:
         aa:4b:7b:78:d8:ad:0b:8d:59:0c:0b:fd:90:53:89:eb:c1:a7:
         e9:5b:d5:b8:82:60:4b:f4:0e:68:3c:77:03:65:34:a6:12:52:
         e2:18:0e:5c:3d:d4:b9:00:8b:99:4a:90:5e:a0:b0:29:79:a1:
         d6:87:2b:ab:99:e1:37:e8:15:c9:d3:4a:ee:64:be:3b:c4:e8:
         93:bf:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:34 2026 by rpki-client