Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa
File:                     857B25F03EDF11F1939FAF8DB6833773.roa (raw, json)
Hash identifier:          hrTGcT4S/oECSZNAnaIaPC0x5VQUPpGmV9BjkauiTgM=
Subject key identifier:   78:A5:A5:83:35:F5:B5:1B:02:5D:57:58:FD:6B:97:77:3D:99:BD:E3
Certificate issuer:       /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial:       02
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa
Signing time:             Thu 23 Apr 2026 06:41:57 +0000
ROA not before:           Thu 23 Apr 2026 06:41:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        103.12.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
        Validity
            Not Before: Apr 23 06:41:57 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e9bf34-50f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:6c:45:0a:54:05:7a:29:e5:55:35:f0:fc:
                    d2:80:1f:8a:40:06:89:c2:50:ca:35:28:0a:1c:79:
                    70:e2:35:85:23:6e:c5:00:94:39:b7:22:4b:9e:e5:
                    f0:ad:d8:7c:2b:5a:95:7d:68:3f:2d:57:7c:a2:3e:
                    8b:45:54:c6:10:cb:87:91:60:56:ca:0d:20:12:51:
                    f3:72:d8:f2:02:f4:7d:d0:09:ee:a9:e7:d0:47:62:
                    3c:ee:9a:cd:ba:56:e9:19:90:c0:1f:d0:11:4e:49:
                    65:06:a2:61:8a:92:ed:93:9b:d5:05:2d:87:07:ee:
                    63:29:4e:e4:40:52:be:78:fb:7e:a8:1d:b3:e4:66:
                    a3:53:82:f8:83:b0:13:f0:06:b3:86:d7:e3:70:37:
                    d7:c3:3f:6a:6c:26:48:11:db:7d:19:a1:4c:ba:c8:
                    e1:ff:f6:90:6b:10:da:e6:a9:de:80:cd:ff:24:e9:
                    92:cb:8a:36:f1:48:13:c1:cd:c7:ed:be:ca:aa:84:
                    d5:aa:4c:a5:9e:84:54:d0:56:df:8c:56:89:86:50:
                    cc:5c:b0:e6:15:04:42:5a:6d:cb:2a:a6:57:83:e8:
                    3a:57:1b:00:8b:28:4d:57:70:05:de:68:4b:35:62:
                    13:6c:f3:bc:9a:7d:fc:fe:b5:b6:6b:3e:bd:ae:23:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:A5:83:35:F5:B5:1B:02:5D:57:58:FD:6B:97:77:3D:99:BD:E3
            X509v3 Authority Key Identifier:
                keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/857B25F03EDF11F1939FAF8DB6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:1f:fb:20:51:44:ba:4c:c0:c6:e9:ff:e7:8e:a9:3b:e3:
         03:40:c6:55:f1:87:29:ce:d2:b7:76:13:fa:35:fa:8c:6f:16:
         65:78:46:fb:f4:77:48:36:5d:1e:72:a9:51:81:92:01:ca:3d:
         bc:9c:fc:30:29:62:70:4f:b3:91:4b:16:30:63:cb:b9:f1:f5:
         df:a7:42:60:99:fb:c6:61:db:20:8f:52:8c:62:87:67:61:ab:
         5f:f6:58:90:c4:6e:ec:25:f8:b7:a7:30:ef:bb:5c:57:e5:a6:
         f0:65:1d:79:e7:fa:74:31:82:a4:3d:56:fd:80:59:a9:19:b5:
         f7:f4:7f:1d:ae:40:6a:0a:40:63:5a:d7:b0:57:c3:83:d0:0e:
         8c:34:57:b2:25:f3:97:10:9b:8c:c6:44:bf:79:8a:99:9f:ea:
         d1:b0:87:f0:d9:fd:88:89:32:91:4c:f1:f0:7c:02:bd:6b:6e:
         7f:21:e2:c3:8a:81:19:aa:32:86:10:a4:8e:05:e8:d7:88:26:
         24:56:27:b3:7c:23:29:f6:93:7a:0e:9c:a2:db:cb:fc:2f:08:
         b0:0b:fd:db:88:43:a6:f3:af:95:56:a2:21:b3:2b:62:a3:6c:
         5a:8a:9f:bb:63:8d:10:71:f0:3e:eb:ae:9f:65:8d:1f:cc:56:
         94:42:1d:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:29 2026 by rpki-client