Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
File:                     E049FDF87A4511EBBB2D0A52C4F9AE02.roa (raw, json)
Hash identifier:          8pSbOUGcxd9kIRUOKnyb177dIko/tnYgGhNgiXbljP4=
Subject key identifier:   E2:7C:A9:2F:6F:DF:80:55:16:13:18:C4:3E:88:4E:62:3D:24:49:C1
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       107B
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
Signing time:             Thu 28 May 2026 17:22:22 +0000
ROA not before:           Thu 28 May 2026 17:22:22 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132825
IP address blocks:        103.113.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4219 (0x107b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 28 17:22:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1879ce-5b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:99:ca:75:87:3a:94:eb:80:7d:1d:4a:eb:
                    cb:22:95:16:c8:e7:0e:47:e4:b0:27:48:9e:c3:7c:
                    5f:c9:b4:23:53:45:c8:0f:ff:a2:99:ea:61:b3:a8:
                    d0:d1:51:37:07:30:dd:99:3a:f1:1d:4e:93:2d:82:
                    f9:c4:f4:07:bd:2f:f1:e7:65:77:33:60:47:8a:cb:
                    11:a6:ed:33:77:8b:bb:0b:e4:25:6e:0b:e7:a0:b7:
                    bd:89:cc:ae:a7:b0:15:3b:32:fc:b6:39:de:68:6e:
                    26:59:92:d0:37:93:12:8f:60:cd:7e:85:48:44:fd:
                    2f:75:ef:29:ee:38:00:f5:3d:2b:d2:40:1b:c2:ad:
                    06:2b:00:29:bc:6f:73:b5:fe:43:4e:38:de:a5:93:
                    70:b2:dd:f3:80:1f:fb:b4:bd:e8:aa:be:89:83:43:
                    6c:0b:d5:b9:e7:a6:23:41:b6:cd:79:e0:9f:83:a0:
                    d5:fc:b4:b6:aa:38:3a:2c:b9:d1:2e:1a:6b:f5:03:
                    11:02:3d:b4:b2:2b:1e:9b:97:f3:a3:0a:6c:6f:64:
                    8a:ea:5f:ef:0f:74:e3:54:ef:3b:af:ad:db:61:37:
                    38:75:7b:7e:d2:11:40:74:f6:f1:f2:22:ad:7b:9a:
                    ba:d1:8a:95:21:63:d0:bc:95:99:31:c2:bf:77:36:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:A9:2F:6F:DF:80:55:16:13:18:C4:3E:88:4E:62:3D:24:49:C1
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:f5:af:b8:56:70:24:27:6c:51:ff:32:7d:54:f0:74:53:f1:
         61:c5:91:94:44:e4:42:bc:8b:bd:94:28:9e:ed:2f:ba:3a:ed:
         38:3d:e3:0f:37:d5:6b:ba:47:38:31:f3:a8:e5:46:69:26:85:
         4d:78:70:5f:eb:da:34:e4:f1:8d:5b:ff:94:ae:94:90:75:1b:
         a7:bd:d5:c1:b6:72:f4:09:4a:87:de:b8:f4:f5:e1:ff:69:62:
         11:15:9f:2e:29:2c:43:2d:72:42:2b:2f:7a:1d:ff:48:b1:59:
         92:80:92:82:d1:ec:f4:63:3d:ac:2e:9c:9a:1f:22:bb:ae:bb:
         47:86:ec:38:a1:e7:56:30:d9:79:cc:ce:e4:76:25:4a:a0:31:
         ed:7d:97:02:42:15:5b:2a:17:1f:9b:36:e9:fc:88:ea:ad:6d:
         86:ee:03:47:c9:87:cc:49:b8:3f:01:82:40:dc:42:df:a7:ae:
         84:79:c5:6a:4c:12:14:78:f9:a8:65:c4:47:85:95:f8:2b:8f:
         f2:da:68:bf:cf:ae:28:5d:8e:85:af:5b:ff:db:d3:08:78:e9:
         2d:15:fd:4e:17:04:03:68:f4:2d:1e:98:e2:ee:55:a9:de:00:
         0e:72:4e:b0:73:ef:0d:15:58:d1:b6:5c:bf:af:26:fd:0b:cc:
         28:d0:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:14:36 2026 by rpki-client