Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5C27D4DCB0DB11EC87206C69C4F9AE02.roa
File:                     5C27D4DCB0DB11EC87206C69C4F9AE02.roa (raw, json)
Hash identifier:          46wvqeUqN8Nml5fFIUcPvRk4Q6t7qxEkWUWw/MCxXuw=
Subject key identifier:   41:7E:07:60:71:3B:27:7E:A4:96:0B:0F:22:58:F7:99:A4:F0:75:F5
Certificate issuer:       /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial:       046C
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5C27D4DCB0DB11EC87206C69C4F9AE02.roa
Signing time:             Wed 13 May 2026 00:30:43 +0000
ROA not before:           Wed 13 May 2026 00:30:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149636
IP address blocks:        103.183.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl
                          rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
        Validity
            Not Before: May 13 00:30:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a03c633-e650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:95:a6:2f:a5:de:ff:3c:e1:15:6c:d5:13:
                    f9:35:1e:3f:24:7e:c6:0a:18:e1:58:96:af:5f:e4:
                    48:a0:85:99:48:72:6d:7c:6a:0a:9e:b9:e7:58:60:
                    c8:cd:5a:5f:99:95:63:b8:dc:4c:3c:5a:41:b4:73:
                    d1:04:76:b5:b4:21:5f:aa:48:a0:ad:0d:a0:fb:3d:
                    9e:7d:47:4f:7a:19:fc:aa:e1:29:d5:5c:0f:f7:72:
                    a5:62:20:02:48:4d:31:03:2b:59:7f:56:21:17:21:
                    22:30:56:dd:0a:c4:9c:bc:c8:32:86:1f:74:75:10:
                    4f:c8:1e:29:91:98:4f:46:6a:d7:fd:54:f6:9e:1f:
                    56:92:42:f6:a3:16:12:78:4a:f6:1f:bf:e5:c8:26:
                    5e:80:73:06:8d:a7:00:ee:7d:f7:66:d3:1b:47:d6:
                    22:e3:a5:61:a3:c5:54:1b:5f:0b:55:5b:b4:35:30:
                    79:8b:0f:96:b1:b6:b5:58:bc:ea:f1:9f:76:d4:24:
                    f7:b0:32:9d:b7:9f:e3:2c:e7:8f:a6:b4:ef:e1:91:
                    88:63:ad:fd:25:72:8e:26:5f:8f:14:7e:4c:13:6b:
                    96:39:4f:cb:cd:e4:ef:7e:d9:1b:95:88:1b:1e:2f:
                    f7:78:0c:17:2f:05:e2:57:c7:5f:8f:28:9e:83:e3:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:07:60:71:3B:27:7E:A4:96:0B:0F:22:58:F7:99:A4:F0:75:F5
            X509v3 Authority Key Identifier:
                keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5C27D4DCB0DB11EC87206C69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:01:b0:65:b5:0a:c1:df:65:c0:9e:62:9b:74:31:eb:2a:5f:
         56:34:df:bb:c6:ba:e2:4e:d5:75:36:39:97:d7:fb:6a:d4:27:
         f4:0f:82:bd:45:2f:c4:03:5a:7d:f4:40:5a:28:37:3b:73:eb:
         cd:5f:ed:d9:f5:9b:1a:e3:a0:11:b8:f5:ad:cb:eb:7b:9e:f7:
         ca:59:a2:98:66:1c:81:f0:15:17:94:34:be:ed:84:2d:9e:32:
         2b:80:e8:f5:40:37:c2:c2:7b:26:c2:78:02:34:a4:f6:6c:6d:
         8b:b0:88:c3:95:5c:0b:86:f8:04:34:f8:b0:07:02:02:56:71:
         ca:b7:86:3d:8b:76:58:d2:fd:3a:dc:fd:87:52:66:25:18:64:
         72:90:f6:4e:18:9d:a4:ad:f6:04:08:78:83:99:5e:c4:a2:d7:
         e0:a4:ce:46:a2:e3:49:33:e8:a6:67:f2:b2:7a:c5:1c:9d:e1:
         41:3d:86:4a:ec:0e:d7:bf:cb:63:31:16:e4:01:cd:73:0f:65:
         c3:07:06:df:82:7f:a7:ce:0f:1d:49:73:33:49:22:db:8a:0d:
         f3:f3:0f:69:a1:a5:69:71:bb:dc:15:6d:97:f1:28:22:32:44:
         54:ea:0a:c4:3e:ae:2b:ca:b5:07:51:96:c4:89:6d:76:23:0e:
         84:b9:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:02 2026 by rpki-client