Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa
File:                     5CB1666C177711EEAB396D1CC4F9AE02.roa (raw, json)
Hash identifier:          JUt39muYmeNv/u+aov4ihdZ44u9U8v+STPTANHBtFY0=
Subject key identifier:   67:63:40:54:32:A7:A7:4C:BE:72:98:EF:6B:E0:F8:2D:C6:E0:7E:B7
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       0251
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:52:56 +0000
ROA not before:           Fri 07 Aug 2026 02:52:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.229.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Aug  7 02:52:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a754888-ac7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:70:80:7a:ae:10:9c:d2:4b:85:24:b0:b5:
                    a2:b1:5f:11:67:09:b6:54:11:79:ad:6b:5c:04:fe:
                    5b:39:a7:23:2e:f9:b4:96:52:c3:c1:bb:8a:fa:f9:
                    36:a8:74:05:8f:3f:18:46:99:ff:c3:f0:6c:33:d7:
                    5a:b1:65:6f:85:d9:fa:9c:1a:75:67:c6:61:ab:37:
                    81:7b:d3:d1:02:bf:4e:62:76:67:1f:5c:16:ef:6b:
                    0c:68:4b:6c:bf:b6:c6:0c:bf:2a:64:9b:aa:c1:b0:
                    d9:73:71:c2:05:bc:82:40:64:31:7d:c8:49:1a:51:
                    b5:80:96:d2:c6:51:14:a9:3e:7f:82:b1:7d:8d:73:
                    99:4b:c3:65:35:43:9e:bd:ac:8f:ff:60:c1:db:7a:
                    b5:26:91:1a:d0:23:1b:b6:d7:8e:56:7f:8a:13:4a:
                    53:26:07:51:ac:c3:24:86:10:ea:11:2c:bb:04:12:
                    05:05:d0:35:3a:26:6a:7e:46:1c:a1:57:3a:c8:96:
                    69:06:80:4d:78:90:86:20:dd:01:96:00:f7:57:23:
                    05:24:20:ca:8d:5c:d0:b6:78:24:e7:59:f1:8f:71:
                    af:e8:49:29:76:d3:0c:6e:43:07:0c:63:47:08:de:
                    5a:72:04:ef:7b:33:57:c1:df:7c:fc:d3:cc:2d:b3:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:40:54:32:A7:A7:4C:BE:72:98:EF:6B:E0:F8:2D:C6:E0:7E:B7
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5CB1666C177711EEAB396D1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:fa:41:c4:96:db:69:61:d0:b4:62:6f:31:00:65:fa:c8:84:
         c8:9c:22:d0:29:79:c0:f2:94:7e:c8:c9:36:ca:c1:0c:bd:51:
         66:a3:1b:aa:36:89:ab:59:e5:23:b1:6a:e8:d8:c3:3b:c8:34:
         6c:e5:f7:a7:cb:cd:e7:26:6f:d2:ba:45:c5:69:0b:29:c4:5c:
         f8:cc:93:41:60:95:bf:37:2d:a7:1c:4c:ed:03:bd:93:d4:1b:
         46:7f:dc:ee:ed:e6:d9:73:bd:1f:58:8e:35:ee:7b:d3:ae:54:
         f5:7a:24:d3:50:97:c6:eb:3d:9a:d1:ef:68:93:1f:c9:98:4b:
         fc:ab:89:0c:05:ec:be:45:35:9f:17:20:85:ef:4b:2b:b5:e4:
         57:de:23:a2:71:24:b7:a0:ce:da:fa:41:8d:b5:50:ac:c1:b3:
         bc:9b:52:ae:dd:96:ac:eb:f9:9c:07:dd:c6:91:bd:2f:74:b9:
         37:49:3f:c3:87:28:3f:af:31:b8:42:8e:c3:d5:20:46:3c:d7:
         7c:5c:c9:0d:44:40:a9:f9:19:44:a9:12:b7:fa:14:56:06:6a:
         7c:2d:ba:84:be:be:50:18:93:19:c6:37:ce:f6:8d:a3:a6:b6:
         11:b0:ab:05:8d:48:7a:16:1e:2a:76:3d:d3:fd:ec:03:ea:03:
         59:89:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:02 2026 by rpki-client