Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa
File:                     58EB7FEA17BA11F192FEB12A393D8C67.roa (raw, json)
Hash identifier:          5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=
Subject key identifier:   6F:6F:19:94:30:83:6C:EC:D9:4B:16:7D:FB:C3:FE:30:91:ED:77:6B
Certificate issuer:       /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial:       27
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa
Signing time:             Tue 05 May 2026 09:42:14 +0000
ROA not before:           Tue 05 May 2026 09:42:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        103.214.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
                          rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
        Validity
            Not Before: May  5 09:42:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f9bb76-7577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:8c:9b:0e:49:70:60:6b:7e:9c:77:6f:22:
                    c1:ec:cb:ab:1f:28:b2:30:aa:35:93:27:7f:8e:38:
                    3b:50:04:3c:9c:48:08:6f:3e:e3:09:07:44:ed:c9:
                    3f:a6:8f:5c:2f:92:09:a6:0d:e0:24:f3:79:20:21:
                    b1:e9:30:4d:a6:fa:1b:0d:9a:dc:6c:4a:a2:49:50:
                    81:c1:50:21:05:6f:64:c2:09:bc:bb:5a:99:29:c2:
                    be:45:ea:1e:50:e5:f1:e3:d5:87:d1:ea:93:9c:ce:
                    81:75:a3:67:4d:3d:59:98:1c:fc:68:b4:c9:10:b5:
                    bc:74:a3:ae:1a:c6:42:cc:56:77:50:ec:64:97:77:
                    23:97:ea:fd:f5:56:41:49:98:40:d7:72:4c:a2:72:
                    b8:c0:6b:7f:3d:df:7e:95:f4:f5:3a:55:d1:f8:df:
                    a2:30:78:6a:39:cb:b8:89:ef:3d:1f:c6:07:31:6a:
                    48:27:e9:86:26:a0:f0:3e:d9:a8:66:93:a6:59:7a:
                    c1:a2:31:b4:b2:0c:c2:c7:8d:54:74:8f:83:2d:50:
                    a4:23:22:07:be:f0:a9:e5:58:40:3d:fe:b4:6b:7a:
                    82:5e:7b:4c:f8:20:1d:70:b3:96:48:fe:4f:55:0a:
                    db:ad:21:c9:38:53:2d:e7:e7:2e:41:45:c1:63:0c:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:19:94:30:83:6C:EC:D9:4B:16:7D:FB:C3:FE:30:91:ED:77:6B
            X509v3 Authority Key Identifier:
                keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/58EB7FEA17BA11F192FEB12A393D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f2:b7:5d:2f:74:65:79:9d:82:e6:c0:aa:ef:98:1e:93:b9:
         7d:fc:fd:c6:05:97:75:e2:9e:4d:e5:1b:ca:f7:b7:67:dd:c6:
         33:f6:06:10:ca:b8:fe:46:4f:40:b7:db:43:81:0f:2b:5f:13:
         f3:ba:d5:1f:94:95:ec:1a:af:b8:ef:30:40:ab:dd:be:82:f9:
         2b:ea:a7:71:73:08:98:7f:1f:1b:b1:2c:70:62:7d:9a:b5:75:
         d7:a7:90:b9:43:d1:a2:c7:27:cb:85:e5:24:fe:4b:e7:73:22:
         bd:de:22:97:00:b6:c3:c0:fa:71:44:8f:c2:22:23:b9:cf:38:
         ba:21:33:b3:5e:6b:a4:5f:05:75:19:c8:59:76:51:de:76:09:
         4f:f8:ff:eb:3c:52:3c:61:5b:b4:b4:b9:9e:62:44:b2:94:c6:
         27:ef:59:89:39:9b:e4:59:17:a7:67:6a:ad:46:d5:37:cf:ba:
         70:11:68:0e:c4:8a:9e:1c:18:0d:6d:a0:e9:20:88:ff:69:94:
         42:3b:c1:94:00:95:59:e3:72:a5:23:58:27:a2:54:0c:04:ec:
         20:5f:4b:11:16:ca:1d:ad:e4:05:53:c3:7e:c4:71:6f:86:22:
         cb:05:f2:35:61:00:91:87:bc:0a:10:00:6d:a5:56:95:db:2f:
         1b:66:bf:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:44 2026 by rpki-client