Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa
File:                     51C3E830926B11F09CB88A3FC4F9AE02.roa (raw, json)
Hash identifier:          qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=
Subject key identifier:   47:65:F0:52:50:66:63:E3:D0:A2:77:A1:98:D8:73:97:A2:33:4D:A4
Certificate issuer:       /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial:       1332
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa
Signing time:             Mon 04 May 2026 17:20:42 +0000
ROA not before:           Mon 04 May 2026 17:20:42 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154207
IP address blocks:        103.114.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
                          rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4914 (0x1332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
        Validity
            Not Before: May  4 17:20:42 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f8d56a-0a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:f8:44:40:55:b4:2b:e5:51:35:14:eb:96:
                    ff:1e:76:29:5e:0c:a3:b3:99:53:3e:4d:ea:76:57:
                    2e:c6:e0:b8:4c:2b:f0:83:ca:3f:7c:32:35:aa:f4:
                    42:14:41:bd:34:93:15:81:6e:67:b8:5d:a4:56:38:
                    74:ec:ba:f9:18:f2:85:bd:a9:a3:a3:1d:66:b5:6e:
                    0d:e2:c1:35:5b:9a:ab:0f:08:a3:2b:d2:d7:c6:85:
                    2d:a4:f6:a5:21:8c:c6:f2:e7:37:92:56:56:50:3e:
                    4d:41:d4:15:4c:0e:3b:32:34:20:ba:1c:18:8f:a3:
                    5a:0f:d3:27:4f:c8:66:e1:43:9d:db:e9:b0:cb:03:
                    8a:f6:0a:ef:2e:e3:cb:5c:81:8c:0d:e3:f5:e4:7d:
                    39:f8:0a:5e:42:d8:b2:d6:67:ee:d2:a2:e9:2c:07:
                    7a:7e:64:7e:40:34:d3:4f:db:49:62:a5:7c:58:b6:
                    8e:fd:09:76:50:09:7d:e2:3f:3e:4a:6b:86:35:50:
                    43:8d:e0:c0:0b:9f:4e:aa:3e:6c:92:f4:db:aa:ef:
                    4d:58:45:41:0f:97:75:ac:77:af:6f:9b:75:ae:09:
                    17:48:3f:77:dd:f8:42:f6:a5:0d:c0:6e:e5:79:10:
                    46:fb:0f:a2:6f:ab:7e:83:43:0b:b3:2a:29:3b:03:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:F0:52:50:66:63:E3:D0:A2:77:A1:98:D8:73:97:A2:33:4D:A4
            X509v3 Authority Key Identifier:
                keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:7b:68:eb:b7:57:5c:04:df:0b:b0:16:a7:76:07:7f:95:
         ce:bd:eb:52:fb:a5:a7:52:3e:1f:ff:72:84:10:2e:f9:42:0a:
         b9:73:ae:73:4f:5a:d3:71:eb:ba:3a:11:3b:ac:42:ee:94:f7:
         5a:9e:e3:0c:6f:0e:a7:8a:26:ba:37:79:2d:b6:e9:92:b9:a4:
         5a:49:99:e6:c6:38:ce:2d:4d:31:52:59:68:50:b4:72:b9:74:
         f2:c7:fd:da:b0:fc:2d:d3:22:25:b7:58:0f:08:c2:63:ac:42:
         34:49:f6:37:bf:88:c1:67:8c:b5:a4:88:8a:c8:1b:d8:1b:1e:
         05:6d:a9:3b:f5:3d:a5:db:01:c0:fc:4b:b6:1a:a2:c0:91:ea:
         e9:7c:42:b2:53:47:7a:fc:52:70:18:38:17:43:14:ff:d3:6e:
         1f:41:e5:32:58:56:ed:9e:65:3b:42:5f:23:1d:f8:91:98:19:
         9e:17:56:3c:e3:4b:48:0c:09:06:8c:60:1e:b7:60:72:ab:ac:
         31:b6:f9:39:ae:dd:48:c0:be:a3:c6:cc:d2:bd:7a:42:91:03:
         62:57:d8:22:11:a1:94:8f:f6:7a:45:17:e6:6b:62:71:95:44:
         bf:0f:c7:ab:4f:3a:9f:37:0c:f2:3f:fa:91:56:d2:02:02:f8:
         4a:d4:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:25 2026 by rpki-client