Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa
File:                     DA481A0CB61811F0ABB14C31C4F9AE02.roa (raw, json)
Hash identifier:          8Rl96D5sYGpsjafaxGZ3JFZlqI400umySAUs5W9ShSc=
Subject key identifier:   A3:A5:05:56:44:E4:B5:61:A3:32:EE:94:D8:D6:43:86:15:E4:33:05
Certificate issuer:       /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD
Certificate serial:       0F5D
Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa
Signing time:             Sat 30 May 2026 18:21:08 +0000
ROA not before:           Sat 30 May 2026 18:21:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        103.139.152.0/24 maxlen: 24
                          2001:df0:8180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3933 (0xf5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD
        Validity
            Not Before: May 30 18:21:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1b2a94-e1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:9b:82:4c:fe:65:ef:57:0c:8e:e6:fd:59:
                    8a:fe:b0:2d:c6:1f:ea:2b:ee:c9:df:5a:3a:eb:0d:
                    56:af:ef:4c:a3:2e:39:fe:5f:94:71:35:7c:26:e3:
                    d0:39:7a:ba:7d:4a:46:0a:e2:ff:52:9a:2a:a7:d1:
                    97:b7:1c:06:5a:ce:9a:cd:8a:00:94:57:e5:e5:3f:
                    a0:ae:59:68:47:4f:28:a1:9d:a6:21:7e:e6:be:5e:
                    68:51:cd:b9:99:7c:cc:ad:eb:6a:22:a8:df:5f:36:
                    44:0e:de:b4:fd:67:f8:7e:44:2d:43:4b:f3:67:e2:
                    1a:a9:54:3f:54:d5:6b:3c:4e:29:37:63:1a:6f:62:
                    94:b3:c8:cf:2a:37:ee:f9:da:5e:57:95:87:c4:9d:
                    7c:26:16:93:57:8f:27:b3:5b:dc:d4:d5:96:c7:4b:
                    e7:d5:9a:ea:f5:70:06:95:55:83:c1:4a:e7:a1:e3:
                    1e:41:15:3d:20:71:16:f4:d8:67:49:ea:86:3f:86:
                    2f:19:c6:c9:0f:48:13:54:ed:00:81:6b:8a:ab:ff:
                    b1:88:a8:fc:4f:1e:c7:c7:b2:8f:fa:0a:9e:69:7a:
                    24:80:f4:52:35:d7:8f:12:ca:70:29:a5:f5:30:49:
                    5a:de:8e:f3:33:d1:f4:29:15:a0:cd:26:3e:33:92:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A5:05:56:44:E4:B5:61:A3:32:EE:94:D8:D6:43:86:15:E4:33:05
            X509v3 Authority Key Identifier:
                keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.152.0/24
                IPv6:
                  2001:df0:8180::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:1d:cd:fc:56:4c:30:02:c6:22:c0:69:18:40:75:9c:93:
         75:6d:7e:75:00:0b:b3:e3:8a:95:41:e9:bb:f6:e5:b1:54:16:
         8a:2d:e9:2b:8a:4e:3e:d8:80:a2:34:7c:66:c6:ca:7b:3d:c2:
         57:a2:ef:88:6c:07:72:3a:7e:ed:38:63:ed:dc:52:54:0f:f3:
         bc:1b:3d:5a:50:55:c2:91:33:a8:67:26:c9:eb:e8:9c:04:3d:
         11:6e:0b:93:1a:80:98:4b:70:20:36:c4:cf:f6:7a:e4:37:34:
         32:08:bc:76:05:76:9c:59:92:21:f4:6c:9b:88:b6:d9:45:1a:
         65:8b:26:e6:62:00:d3:87:c4:67:ed:20:7a:6f:ad:58:87:35:
         f9:51:f4:5f:00:e6:f9:c6:f1:42:0f:73:87:f7:9c:50:d6:8f:
         77:58:54:58:42:12:de:c1:a3:3c:0b:72:33:c4:21:c1:1c:64:
         06:c1:70:49:e6:15:47:82:aa:ff:32:aa:c8:25:8c:20:c6:6f:
         ce:6c:e7:c1:cb:1a:5c:50:33:87:0b:d9:5b:7d:78:8d:40:b6:
         cc:a2:5d:2f:f4:9e:f2:a0:db:da:be:21:60:39:9f:00:84:47:
         3b:54:cd:f4:36:88:b6:ab:14:48:15:b7:9e:74:cf:a3:66:cd:
         f4:82:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:42 2026 by rpki-client