Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa
File:                     5CBE3872145C11F0BFD6B347C4F9AE02.roa (raw, json)
Hash identifier:          tSLdp80FVd5ixH2uZT2QMYA1+OsbaeZKHwPMzoQDX+g=
Subject key identifier:   38:42:88:4D:02:F3:C8:DB:EF:F6:40:2A:78:B0:EF:B5:BD:CA:58:35
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       0282
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa
Signing time:             Wed 23 Sep 2026 02:51:38 +0000
ROA not before:           Wed 23 Sep 2026 02:51:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55501
IP address blocks:        103.155.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
        Validity
            Not Before: Sep 23 02:51:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ab33eba-9490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:9f:b7:23:f7:6a:1e:fe:df:01:60:15:e0:
                    16:8c:c7:e2:9a:76:0e:91:7a:65:87:11:c1:86:bb:
                    4d:8f:fc:0f:35:95:59:af:f4:69:31:06:01:58:f7:
                    16:43:f1:f2:26:48:3e:1f:1b:58:c8:11:e3:f9:3f:
                    c1:2f:e0:66:40:78:42:c1:11:81:87:f3:35:b2:35:
                    df:c5:67:7e:66:db:d2:41:fd:39:5a:64:a7:b0:ad:
                    07:2e:dd:9d:ac:63:15:be:24:74:5b:32:ff:41:10:
                    cb:17:6c:c4:49:ed:62:52:c6:2f:76:72:88:be:18:
                    c3:45:20:e5:28:37:52:fe:12:fa:12:1f:22:e3:45:
                    be:99:ce:6e:b4:f2:e6:7f:53:b6:0f:27:a8:e4:a4:
                    99:93:90:d9:6c:0a:87:f0:70:f2:e8:62:fb:90:61:
                    da:e4:ec:b6:e4:c0:26:b6:13:1b:de:40:c0:8f:bb:
                    35:81:6b:61:c1:e4:f0:16:a7:b5:60:70:66:8f:f6:
                    5f:2d:51:c8:52:8a:ed:25:63:f1:fe:54:91:24:31:
                    13:b8:26:8f:97:d7:b9:c9:1c:08:1f:9f:ea:53:f1:
                    37:fe:c7:27:d4:4e:df:b1:aa:12:0b:14:fb:b0:18:
                    d3:72:d0:98:b5:2b:15:42:89:14:8f:82:2d:58:22:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:88:4D:02:F3:C8:DB:EF:F6:40:2A:78:B0:EF:B5:BD:CA:58:35
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:67:ec:29:b8:08:62:b1:4a:ba:f1:77:ad:ed:75:8d:b0:99:
         7a:42:63:c1:65:34:64:59:a9:58:c8:b0:88:57:59:03:f2:97:
         cd:1c:da:d4:49:55:4c:7c:59:48:62:ba:f2:ab:f6:1c:ad:ca:
         c8:ae:06:03:32:f6:ae:fd:17:d1:65:69:b9:da:67:a1:40:34:
         2c:4b:06:74:6b:fc:a4:fa:5e:9c:d8:2a:ef:4a:5e:30:c5:53:
         57:d7:77:8c:14:76:c0:18:1c:8b:15:fa:ee:79:0a:49:5d:ea:
         a2:6d:81:92:26:e8:88:7e:fb:47:60:e7:c6:27:ad:ee:a9:2b:
         db:3a:3a:27:da:f2:ea:58:cb:e1:52:9e:d1:cc:00:6c:52:04:
         e3:94:f0:59:0f:b9:f4:93:67:dd:57:1b:9f:c0:9e:3f:a5:79:
         47:1d:69:1b:de:11:9b:30:3b:ba:62:4a:5c:f8:c1:1d:20:44:
         4a:57:63:b0:fe:a6:86:74:67:62:ef:66:ef:89:1f:19:4d:ae:
         4d:b8:7f:57:8e:99:14:d1:bc:f2:65:fa:16:ee:eb:15:2a:76:
         3b:95:a6:3f:58:31:df:80:96:bf:b4:22:2f:81:6c:8b:4d:d2:
         6f:0a:03:91:f2:60:61:21:c9:ab:b8:3f:c6:d9:ef:ca:65:8c:
         f6:a5:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:06:46 2026 by rpki-client