Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
File:                     7D20FF46F3E511EBB8BBF720C4F9AE02.roa (raw, json)
Hash identifier:          V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=
Subject key identifier:   CB:61:5C:55:7C:EC:A8:67:4E:C5:93:8A:F9:7C:A1:EB:E8:3C:18:B6
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       05F8
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
Signing time:             Mon 04 May 2026 23:29:01 +0000
ROA not before:           Mon 04 May 2026 23:29:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136500
IP address blocks:        103.90.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: May  4 23:29:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f92bbd-0e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:3e:89:8b:02:98:d2:25:b3:b3:10:84:93:
                    36:bf:88:74:2c:0e:ba:bf:0a:03:3e:b5:17:ee:05:
                    00:6c:28:74:3b:06:62:23:83:97:f8:24:14:eb:8d:
                    7f:ce:48:73:2f:5d:d9:45:25:02:1e:a2:ce:20:19:
                    46:d3:43:ad:96:5e:aa:e1:13:ea:ed:69:ca:03:70:
                    0c:52:ff:09:c7:31:4a:71:99:4b:6b:6a:29:55:86:
                    1c:4a:d2:24:9b:ac:d4:42:f5:97:f6:fe:0d:e2:fa:
                    c1:78:22:73:f7:00:48:b5:7f:1e:ae:98:17:93:c9:
                    a9:68:59:5b:03:f3:03:99:59:39:67:7d:a0:c3:eb:
                    84:69:c6:97:03:3d:53:37:2d:ce:6e:e4:6f:29:ae:
                    42:41:1a:a6:fe:78:0c:6b:4f:b0:1a:05:d8:f0:d4:
                    01:b8:b6:81:4f:c1:a3:e1:4b:f3:8f:1c:5a:5c:eb:
                    cb:5e:83:ae:4b:69:93:ca:cb:f6:76:6d:78:09:cc:
                    4b:07:46:48:7d:ae:86:d8:73:4f:2d:1d:0f:ca:f8:
                    51:cb:b3:25:ae:3f:5c:57:1c:2e:dc:5a:1d:08:18:
                    af:74:e4:a8:20:6f:43:c3:41:84:33:d7:ed:a5:5a:
                    46:0f:6c:66:79:0d:16:e7:73:5a:1a:0c:4b:b5:c1:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:61:5C:55:7C:EC:A8:67:4E:C5:93:8A:F9:7C:A1:EB:E8:3C:18:B6
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:14:5d:ed:7c:94:6f:be:ba:97:3c:30:9c:32:1c:90:fb:1c:
         f7:22:85:16:28:d6:e0:7e:56:db:20:1f:c7:4a:90:c4:62:5c:
         51:a5:a7:7d:36:af:8e:4b:48:c7:32:ef:0c:2a:39:57:25:eb:
         a4:05:a8:ea:8b:7b:08:e6:4f:88:1c:05:38:cc:c5:ce:80:13:
         79:ea:2b:bf:00:27:6a:10:cc:02:bd:d9:92:95:1a:0d:51:64:
         3c:87:ff:15:9e:52:39:0d:25:ce:30:5d:dc:30:b6:4a:98:b7:
         16:da:88:ac:1e:af:75:64:c4:b6:e9:13:0f:e8:7a:06:28:2e:
         48:6f:5a:aa:c4:5d:d2:31:e0:a1:20:d9:72:17:d8:12:27:d8:
         00:05:b7:30:63:04:60:32:1c:6e:34:16:2b:de:2c:af:3c:87:
         93:e8:ab:01:cc:18:8e:58:e5:2a:6b:03:1a:79:dc:95:60:01:
         7e:0f:88:9d:d1:57:0f:7d:f1:33:be:75:4d:22:9b:2f:4b:bf:
         59:e2:01:ae:f0:d9:a7:e2:1a:09:4a:6a:51:7f:a3:d1:3d:9c:
         7c:7d:09:80:30:6c:b0:b4:30:6f:b7:71:90:6b:3a:1b:e8:06:
         08:1e:03:87:2f:72:99:63:78:e2:2f:79:d8:34:94:2b:bf:7a:
         bd:d5:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:11 2026 by rpki-client