Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa
File:                     C5639A24E0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier:          4WRaKk2cTpYFo/oZ1tSpXVomBfLw7g63zvt2u39jxhQ=
Subject key identifier:   7E:CB:23:7D:63:FD:39:CE:C9:98:94:A5:AE:B0:F3:48:86:C5:F7:6A
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       08DD
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa
Signing time:             Sat 02 May 2026 21:25:42 +0000
ROA not before:           Sat 02 May 2026 21:25:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: May  2 21:25:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f66bd6-7b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:58:c2:ef:c5:a6:58:db:f6:f6:08:46:be:
                    49:28:e1:fc:b3:87:7f:19:c4:1f:4e:ee:9b:00:a1:
                    6a:d3:41:1e:db:34:4e:3b:65:2c:88:76:fc:03:be:
                    02:00:3d:c0:98:17:dc:c1:74:c7:98:79:dd:4b:02:
                    c4:a6:b6:eb:58:d2:a7:13:db:e7:0d:fb:e0:98:28:
                    47:d9:e7:72:9b:fc:db:18:61:1a:94:cf:1e:34:42:
                    d3:35:ca:d5:3b:9d:db:f8:44:03:e2:55:5f:20:20:
                    a0:01:06:8c:45:7c:17:a7:fd:33:c1:83:96:da:c0:
                    52:f6:ca:37:19:03:9c:cd:7c:c2:4e:e6:a0:86:7c:
                    09:cc:7a:10:2a:37:f9:f0:f5:f8:fc:d7:1d:36:ee:
                    4e:95:4e:69:b0:b6:7c:e8:e8:ad:4f:bc:52:7e:ce:
                    96:e0:34:d6:4f:74:d6:a0:2d:3a:eb:32:1d:41:4f:
                    61:f6:24:3a:db:16:99:f9:8e:fc:d4:23:e6:3e:65:
                    2d:40:86:4f:00:1a:34:a9:90:6c:6c:7c:52:11:29:
                    09:a3:0b:90:4b:9d:5d:2d:af:8a:c4:d4:ec:f7:ca:
                    65:78:03:e7:22:11:2c:b0:f3:89:f2:14:3c:c3:20:
                    5b:ea:59:20:cb:b7:b6:7a:48:58:a4:68:3b:0e:dc:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:23:7D:63:FD:39:CE:C9:98:94:A5:AE:B0:F3:48:86:C5:F7:6A
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:88:1f:97:65:36:98:df:f5:3c:e3:bd:ea:d1:4b:2f:51:19:
         6f:52:ce:65:58:4f:b3:39:86:79:dc:04:30:3a:37:48:58:c5:
         5f:b7:ed:c8:cb:98:12:b7:d7:94:1b:6c:e4:7e:a9:32:f2:63:
         31:fb:f7:9b:38:09:6f:85:32:b9:62:48:65:c1:b5:97:e7:fc:
         dc:07:93:25:5b:c2:0a:b0:85:6c:bc:04:ec:94:86:b8:f8:c2:
         e1:a5:0f:d3:d6:91:b5:b5:bc:d7:d8:7e:10:71:0a:af:d2:7f:
         05:11:7a:3a:df:ba:fb:91:cf:a8:bb:d6:7f:6e:fb:a9:cd:5b:
         42:f2:02:cf:12:d5:7e:ff:cb:c8:1a:6e:a1:56:c4:ad:ce:26:
         32:7a:81:76:24:fe:8e:3c:85:8c:5b:96:d4:57:85:af:27:11:
         82:82:bf:7c:03:74:cf:7d:8e:5b:42:75:2e:99:de:b6:3d:89:
         97:d3:1f:dd:80:38:75:bf:e7:c2:8c:64:63:dc:e1:7c:75:78:
         b4:7d:8b:a9:37:30:fc:b2:41:6f:d0:a1:fd:30:56:10:b3:a4:
         37:7c:a6:af:fe:de:04:a3:1a:ef:0c:dd:ba:d4:15:37:56:f1:
         b6:61:bd:44:2b:fd:f9:1c:63:ac:0a:59:7c:2f:ee:26:f6:cb:
         44:97:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:32 2026 by rpki-client