Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/6C5753D84AB911F18A4D3DF6BB833773.roa
File:                     6C5753D84AB911F18A4D3DF6BB833773.roa (raw, json)
Hash identifier:          kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=
Subject key identifier:   5E:17:2D:12:47:3F:49:42:7E:41:3A:54:6A:D4:97:A8:6B:75:A1:9D
Certificate issuer:       /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Certificate serial:       02
Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/6C5753D84AB911F18A4D3DF6BB833773.roa
Signing time:             Fri 08 May 2026 08:39:27 +0000
ROA not before:           Fri 08 May 2026 08:39:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        103.254.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
                          rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
        Validity
            Not Before: May  8 08:39:27 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69fda13f-4b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:a6:3f:40:b7:55:c3:10:05:83:ac:7e:fd:
                    c0:a1:e8:ef:52:20:13:7f:38:d8:5b:45:97:d5:ae:
                    3a:e9:39:b8:ce:e6:72:c6:ba:06:9c:98:d8:ed:f5:
                    01:26:db:e5:a0:87:f2:62:e1:e1:cb:91:8c:a7:62:
                    bc:e2:01:ea:26:c1:f6:8d:c5:fa:f6:a0:b9:46:7c:
                    7c:05:2b:b3:8e:76:91:db:74:47:09:de:79:b9:57:
                    5a:33:b1:df:24:c8:57:fb:23:1a:cd:46:9f:a3:ce:
                    5b:9f:80:2c:2e:fc:9d:84:7e:f5:b0:ed:55:c6:ba:
                    7d:1b:36:99:cf:17:44:9b:2e:9b:a7:41:e8:8c:f0:
                    15:b2:81:b2:23:fa:d5:c9:dd:c5:a8:3b:cb:f5:a2:
                    ef:87:46:2b:db:72:18:e9:ea:fd:d3:13:65:7e:8c:
                    88:6e:94:06:46:2b:49:c2:cf:55:5a:75:81:37:b4:
                    61:7d:c6:f8:18:7a:e0:68:68:18:b1:6d:f6:c3:97:
                    43:43:80:3a:d0:64:95:a9:3f:0d:0b:6c:b3:e2:49:
                    32:29:e1:70:b7:9b:9b:29:b4:8b:a7:97:3f:cd:a4:
                    44:90:f8:1a:d6:7e:c5:00:87:ab:eb:8f:24:73:e6:
                    f4:99:4e:2d:c0:c2:18:aa:e6:1c:1e:fa:4f:92:25:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:2D:12:47:3F:49:42:7E:41:3A:54:6A:D4:97:A8:6B:75:A1:9D
            X509v3 Authority Key Identifier:
                keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/6C5753D84AB911F18A4D3DF6BB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:bf:b7:be:41:eb:7b:b1:c9:9e:05:76:b7:3f:69:2a:53:
         85:c0:64:33:d7:0f:4c:e4:3c:fc:b1:24:76:a2:34:9e:32:95:
         bb:b3:6a:88:16:d8:ca:41:74:33:43:e2:b1:49:08:53:ac:63:
         0f:1e:d3:e7:07:67:b3:48:f3:f2:5a:31:70:06:47:dd:a8:76:
         80:e6:23:58:8d:7d:76:d5:e4:12:c2:92:6c:52:c8:2a:54:11:
         bc:35:db:65:d6:75:34:ce:04:bd:c2:59:cc:9a:3b:2d:c3:2f:
         b0:c7:83:35:60:b9:59:f6:55:0c:6e:4c:e4:78:fc:c9:a8:77:
         49:4e:74:88:b8:74:aa:cc:b1:ab:29:a4:3a:0c:42:30:56:19:
         fe:2b:60:01:dc:01:04:4b:5f:fc:20:17:79:10:88:9d:00:75:
         7a:1c:75:7d:85:e0:75:c1:da:91:b1:73:e9:88:8a:94:b8:9b:
         9d:91:17:28:95:33:21:09:58:5e:44:c5:b6:88:44:f0:cd:7e:
         ec:04:75:23:c7:ba:25:4a:5f:98:00:e3:c6:05:51:22:1d:62:
         f8:8a:38:7d:a9:05:0c:59:e2:d6:e0:82:7b:5f:be:40:7b:1f:
         27:c2:19:50:c1:b2:b9:07:1d:ac:3d:21:a7:ed:6f:51:6f:44:
         a8:03:f9:4c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjlDMzExMC8GA1UEBRMoRjVCRTlENjFGNkZFQTRFNjU2RDRGRDAxNTRGODI0ODM5
Q0MwMTMxQTAeFw0yNjA1MDgwODM5MjdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmRhMTNmLTRiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+saY/QLdVwxAFg6x+/cCh6O9SIBN/ONhbRZfVrjrpObjO5nLGugacmNjt9QEm
2+Wgh/Ji4eHLkYynYrziAeomwfaNxfr2oLlGfHwFK7OOdpHbdEcJ3nm5V1ozsd8k
yFf7IxrNRp+jzlufgCwu/J2EfvWw7VXGun0bNpnPF0SbLpunQeiM8BWygbIj+tXJ
3cWoO8v1ou+HRivbchjp6v3TE2V+jIhulAZGK0nCz1VadYE3tGF9xvgYeuBoaBix
bfbDl0NDgDrQZJWpPw0LbLPiSTIp4XC3m5sptIunlz/NpESQ+BrWfsUAh6vrjyRz
5vSZTi3Awhiq5hwe+k+SJUQvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUXhctEkc/
SUJ+QTpUatSXqGt1oZ0wHwYDVR0jBBgwFoAU9b6dYfb+pOZW1P0BVPgkg5zAExow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGOUMzLzc4OEU3QzQ2NEFC
NzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9aVzFQMEJWUGdrZzV6QUV4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWI2ZFlmYi1wT1pXMVAwQlZQZ2tnNXpBRXhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjlDMy83ODhFN0M0NjRBQjcxMUYxODZGMjdFM0FCQTgzMzc3My82QzU3NTNEODRB
QjkxMUYxOEE0RDNERjZCQjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn/h8wDQYJKoZIhvcNAQELBQADggEBAATFv7e+Qet7scmeBXa3P2kq
U4XAZDPXD0zkPPyxJHaiNJ4ylbuzaogW2MpBdDND4rFJCFOsYw8e0+cHZ7NI8/Ja
MXAGR92odoDmI1iNfXbV5BLCkmxSyCpUEbw122XWdTTOBL3CWcyaOy3DL7DHgzVg
uVn2VQxuTOR4/Mmod0lOdIi4dKrMsasppDoMQjBWGf4rYAHcAQRLX/wgF3kQiJ0A
dXocdX2F4HXB2pGxc+mIipS4m52RFyiVMyEJWF5ExbaIRPDNfuwEdSPHuiVKX5gA
48YFUSIdYviKOH2pBQxZ4tbggntfvkB7HyfCGVDBsrkHHaw9Iaftb1FvRKgD+Uw=
-----END CERTIFICATE-----
Generated at Wed May 13 04:53:28 2026 by rpki-client