Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa
File:                     C6375A0C4E6E11F18914D768AA833773.roa (raw, json)
Hash identifier:          /1UyuPUM1xDbazsd1pJkX9pI7B422aslxkLoZr/hz8E=
Subject key identifier:   63:55:FE:23:E2:8C:E2:43:B7:A5:46:D2:9D:CF:EA:22:0B:4E:3C:32
Certificate issuer:       /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial:       09B6
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa
Signing time:             Wed 13 May 2026 01:55:11 +0000
ROA not before:           Wed 13 May 2026 01:55:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     56081
IP address blocks:        103.5.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
        Validity
            Not Before: May 13 01:55:11 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a03d9fe-c9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:d7:65:09:53:a0:4f:68:ae:11:6c:9b:2e:
                    1e:5a:78:cf:bb:b7:e8:77:d7:91:bd:51:51:ac:a8:
                    bb:a0:83:d1:52:93:d1:89:c4:aa:a2:fa:60:e9:48:
                    03:ee:b3:4b:36:4c:6c:fb:fb:53:25:25:4b:4c:65:
                    a5:b0:a1:46:93:50:ed:f6:42:42:2e:99:3e:2f:6c:
                    fe:71:21:5d:2d:9a:c7:d1:c9:45:ce:20:68:70:6c:
                    cb:4a:c6:17:9f:f9:a5:eb:70:52:98:a6:2c:c3:30:
                    eb:99:76:b9:09:1c:50:38:19:10:d6:43:b3:b3:dc:
                    fc:c5:c4:e1:26:7a:6f:1f:61:81:66:66:20:3c:c5:
                    f5:21:2d:40:8d:ce:e4:8d:9c:4f:6b:e1:8f:a2:4c:
                    78:91:32:69:06:20:3d:77:8d:06:c4:a3:c8:94:77:
                    dd:53:e9:ac:c5:d2:d3:08:53:17:53:db:04:15:f4:
                    64:ee:64:d4:35:13:b1:23:d8:39:c5:9a:87:89:5d:
                    6d:31:bf:e7:77:66:81:da:a4:fd:65:ff:94:a4:e2:
                    b5:0c:1a:4d:b5:72:33:8d:31:95:19:13:8b:b9:93:
                    7f:a9:3d:85:6b:b0:bb:c8:98:3e:b2:17:08:f8:84:
                    8a:19:67:bb:5b:dd:df:7e:94:c0:18:e1:6d:1a:2d:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:FE:23:E2:8C:E2:43:B7:A5:46:D2:9D:CF:EA:22:0B:4E:3C:32
            X509v3 Authority Key Identifier:
                keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/C6375A0C4E6E11F18914D768AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:08:94:66:a3:bc:8c:82:cf:45:93:16:90:0c:89:59:57:
         db:e8:db:07:48:af:66:45:dc:18:50:ef:87:14:4d:e4:d8:0f:
         f8:e2:7d:7d:92:0f:e7:f4:99:02:7e:2c:51:56:6d:dc:8a:ce:
         37:70:f6:23:d3:17:84:93:1e:f8:19:18:6c:28:e3:bb:e9:cb:
         c2:4d:87:da:0b:5e:7f:a5:ef:f0:cb:0b:35:de:d1:d4:6a:a8:
         44:a1:f6:d6:15:c2:32:47:a4:12:e6:7c:fd:93:46:61:f4:f0:
         53:1f:5a:fa:a6:3f:06:a8:f9:35:5f:a7:6b:83:6d:ab:ec:cf:
         5b:da:0a:88:ba:7a:45:2a:f2:7a:0c:52:11:51:13:ca:4b:1a:
         cd:04:2d:ea:46:3c:70:21:66:8c:1b:4a:2e:15:07:d0:b7:05:
         17:20:7d:8a:cc:94:f5:f9:5b:c0:51:f8:b1:03:a2:b1:14:91:
         9e:5e:25:91:b5:1b:e2:4c:5e:f6:5a:01:f3:ae:89:c0:ae:b8:
         32:cf:97:bb:39:e6:17:ee:02:00:ec:5b:35:91:c0:ef:85:2d:
         f3:65:c3:42:da:50:d9:a6:c1:c6:b3:11:24:62:74:a1:36:9f:
         e0:69:4c:d8:fd:25:96:18:9c:34:0e:d8:39:3a:5f:34:b5:00:
         0f:47:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:13 2026 by rpki-client