Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa
File:                     10E905682CCE11F1BB1925E192833773.roa (raw, json)
Hash identifier:          HkIXrKm45gEIaL69eK9NolITOExBggdE2/CFBbaKfNc=
Subject key identifier:   07:5A:A7:10:08:FD:0B:0A:52:1B:32:90:88:BF:81:FF:4E:A5:30:76
Certificate issuer:       /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial:       0FAC
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa
Signing time:             Wed 12 Aug 2026 17:35:24 +0000
ROA not before:           Wed 12 Aug 2026 17:35:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149299
IP address blocks:        103.5.0.0/22 maxlen: 22
                          103.5.0.0/23 maxlen: 23
                          103.5.0.0/24 maxlen: 24
                          103.5.1.0/24 maxlen: 24
                          103.5.2.0/23 maxlen: 23
                          103.5.2.0/24 maxlen: 24
                          103.5.3.0/24 maxlen: 24
                          126.209.88.0/22 maxlen: 22
                          126.209.88.0/23 maxlen: 23
                          126.209.88.0/24 maxlen: 24
                          126.209.89.0/24 maxlen: 24
                          126.209.90.0/24 maxlen: 24
                          126.209.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
                          rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 17:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4012 (0xfac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
        Validity
            Not Before: Aug 12 17:35:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7caedc-49f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:ff:c3:87:62:10:0f:7c:b2:bb:d2:98:72:
                    b9:26:56:9d:eb:cf:6b:b8:3c:4d:41:24:fa:fe:19:
                    37:44:1f:3f:75:e0:c5:87:44:b3:39:00:b5:23:16:
                    1b:f3:ca:8e:7f:27:38:a0:ec:13:f9:e8:48:93:fc:
                    e8:30:6e:26:76:c5:ca:71:d7:07:3b:fb:9a:fc:a3:
                    73:9a:dc:10:fa:84:cb:08:50:70:41:0b:95:74:11:
                    80:4d:f8:70:4b:55:9b:db:c9:6c:16:05:e9:e9:81:
                    8d:83:ca:d5:01:a3:a9:6e:ed:52:80:5a:e7:f1:0c:
                    eb:e5:53:e6:c7:42:e3:e6:c5:f9:aa:d0:ad:7e:c6:
                    24:e3:01:98:fe:9c:3b:dc:65:fc:52:66:6b:25:91:
                    f4:c2:ea:74:b6:24:d3:bf:e0:b5:49:47:dc:8a:88:
                    df:13:67:c5:d6:08:45:b1:f8:d7:59:d9:a9:6c:31:
                    90:15:cc:dc:ee:77:20:dc:3b:a5:3f:48:93:aa:93:
                    d9:b3:a8:cd:26:70:fa:53:20:80:83:b6:11:90:f4:
                    b7:0b:26:f8:12:df:48:ae:a7:ed:63:9b:74:10:20:
                    34:7b:79:49:9e:5f:5e:8e:52:36:d2:14:dc:97:b7:
                    1c:4b:24:87:a4:af:d1:01:2b:a1:4a:e3:1e:46:92:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:A7:10:08:FD:0B:0A:52:1B:32:90:88:BF:81:FF:4E:A5:30:76
            X509v3 Authority Key Identifier:
                keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.0.0/22
                  126.209.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:69:bc:e3:7d:7a:b9:3f:37:83:d0:fd:67:c1:03:a3:d1:
         fe:2f:fd:ca:67:07:0a:7f:af:51:85:d7:87:99:58:2e:2c:b3:
         ce:98:f4:d1:0b:ae:9e:bd:88:cb:34:75:9a:98:87:7d:bb:70:
         a2:e2:ca:75:b3:fb:f3:0b:a6:85:31:a7:d3:15:14:69:aa:00:
         f2:1d:00:5c:26:ae:66:1a:f8:c2:41:2c:19:23:6c:40:bd:2c:
         4b:6d:45:33:bd:03:50:da:bf:13:fd:c7:6b:08:9a:58:da:8d:
         0f:69:3c:5a:1a:c3:bc:0b:67:47:14:21:6f:4e:32:18:d4:0e:
         7c:9e:36:78:16:18:37:5d:15:12:42:49:07:70:09:8a:93:65:
         af:b3:d6:6f:3f:35:f4:38:40:47:15:04:d7:7b:4a:0f:53:9c:
         c3:77:6b:23:82:dc:29:b3:1a:93:13:d9:ee:04:10:5e:80:bc:
         56:b0:8c:a8:5d:24:a7:ed:ab:93:65:1d:c2:a0:11:03:b2:0c:
         e3:8b:c9:28:d6:cb:42:ef:5b:6b:cb:80:1b:8d:6a:ee:bd:4b:
         bd:63:97:4e:5f:a0:e8:10:f5:f0:9f:fa:3f:dd:5b:1d:df:48:
         40:1c:7c:6f:d7:f6:79:ed:92:d9:e7:5f:a8:06:d3:1d:83:0f:
         92:ba:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 09:04:22 2026 by rpki-client