Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/7A54F40C4F8911F18D85090792833773.roa
File:                     7A54F40C4F8911F18D85090792833773.roa (raw, json)
Hash identifier:          iEFSKuawoMKJgN/7K/NIxyh+jdfFdnwDeUD4zCSp6Wk=
Subject key identifier:   BE:82:57:95:EF:AD:E2:A9:E4:0C:1F:26:1D:9E:B1:86:0A:B9:8B:C1
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       0989
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/7A54F40C4F8911F18D85090792833773.roa
Signing time:             Thu 14 May 2026 11:38:51 +0000
ROA not before:           Thu 14 May 2026 11:38:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139009
IP address blocks:        103.152.102.0/23 maxlen: 23
                          103.152.102.0/24 maxlen: 24
                          103.152.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: May 14 11:38:51 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a05b44b-04d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:6c:32:d0:99:e6:94:46:ad:b6:4d:39:3a:
                    ed:98:97:3e:3d:67:e8:62:ba:92:37:11:78:b0:87:
                    90:d0:7c:65:e5:b2:30:a3:0d:ff:83:92:e6:b8:90:
                    45:0f:db:62:dd:aa:de:13:db:bb:5f:d5:d7:40:cc:
                    aa:9b:d6:26:d7:51:c3:d2:83:26:f1:7f:88:de:59:
                    5d:3e:f3:98:cf:1c:f2:5f:92:93:b2:aa:d8:c5:ec:
                    75:c8:bd:1a:86:76:66:0f:dd:04:89:2a:b6:02:d9:
                    0d:54:cd:d4:9e:e6:3a:d7:00:20:97:6e:d9:ff:43:
                    75:1e:d8:92:cb:32:8e:88:bb:95:97:04:0e:b6:fe:
                    29:e6:bb:df:f7:2e:eb:98:f9:ab:50:92:8d:76:be:
                    1e:21:6a:65:ee:75:4d:17:e3:ad:34:04:ca:52:a0:
                    28:f6:29:9d:5a:2a:03:d9:d4:76:3d:46:bd:c6:74:
                    59:b0:1f:cd:b0:77:66:28:e1:a1:e4:a6:a3:28:27:
                    46:b1:4c:62:ca:be:5e:47:19:ad:a8:1f:32:72:24:
                    00:b1:ca:1b:b8:eb:a6:ef:5a:ef:e0:80:86:ac:76:
                    47:89:8e:b2:48:f0:77:a4:6d:19:e4:d6:8e:80:b1:
                    88:16:95:92:70:e1:a0:75:8a:93:e9:b6:d5:00:f5:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:57:95:EF:AD:E2:A9:E4:0C:1F:26:1D:9E:B1:86:0A:B9:8B:C1
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/7A54F40C4F8911F18D85090792833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:ec:30:15:fd:5a:3d:a3:ae:23:29:c0:06:20:df:6c:ba:
         f1:2e:d7:54:e1:7c:fb:d0:8b:2b:b2:d2:1b:4b:db:ad:93:82:
         4c:60:ad:49:23:10:70:05:93:e8:6d:db:4a:f4:e3:f3:15:47:
         7f:c9:86:a1:7b:b0:ef:ca:89:9d:ab:49:41:18:95:7a:d3:f8:
         e7:3a:2d:24:c9:20:c5:4c:e0:9a:16:e8:59:e8:68:6c:df:1f:
         ce:d7:10:27:84:43:56:d8:e9:35:73:85:0b:9b:ca:fd:06:53:
         d1:f9:e8:2e:85:f4:e9:d4:49:50:25:61:b5:be:b3:3b:88:c9:
         95:19:b7:c0:f2:59:94:2f:f4:8a:0a:c1:40:4a:e9:3b:40:29:
         df:1e:19:f8:3e:c5:9f:79:b0:2e:35:1d:f9:c8:77:f6:c1:dc:
         39:5a:66:ec:d2:6e:56:7d:b6:fd:e5:8c:53:49:83:15:7a:ee:
         30:6e:80:0e:f9:f2:89:0b:6b:fe:78:e6:84:1b:50:63:61:da:
         31:d2:0b:dd:30:84:15:fe:c5:85:fd:c4:e2:7d:10:c3:e1:8e:
         0c:4b:86:8e:9b:c2:21:c3:b0:ee:26:e8:5f:84:78:34:d0:b2:
         94:37:a9:cf:01:e8:64:3e:f7:49:55:c2:0c:83:f3:1e:dd:2d:
         16:ee:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:13:04 2026 by rpki-client