Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
File:                     E56B8AFEAB1411F0B1936926C4F9AE02.roa (raw, json)
Hash identifier:          WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=
Subject key identifier:   3B:AB:C2:04:97:6A:1D:D5:48:5C:A3:9E:C8:85:8E:CD:48:0E:D5:4D
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       59
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
Signing time:             Thu 19 Mar 2026 07:44:59 +0000
ROA not before:           Thu 19 Mar 2026 07:44:59 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55486
IP address blocks:        103.125.204.0/22 maxlen: 22
                          182.54.224.0/22 maxlen: 22
                          182.54.224.0/24 maxlen: 24
                          182.54.225.0/24 maxlen: 24
                          182.54.226.0/24 maxlen: 24
                          182.54.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: Mar 19 07:44:59 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bba97b-775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:3b:bd:c9:75:b3:33:33:76:c3:2e:60:64:
                    0a:05:72:bb:5a:e7:2d:ef:70:86:55:eb:9f:bf:6e:
                    ee:47:72:09:89:ff:e1:09:13:08:44:c2:19:53:55:
                    d3:38:c5:bf:20:10:b8:fd:82:32:6c:e7:6f:22:e9:
                    38:72:bc:83:6a:9c:b7:f0:ba:84:ca:9d:44:64:64:
                    ba:9b:e6:70:dc:45:5e:fb:56:4c:34:59:c2:50:34:
                    90:13:16:2c:eb:1e:7e:ff:3b:bb:92:9b:7b:42:5a:
                    ca:50:73:4c:bd:b6:8b:4b:0e:1a:4e:b4:cb:25:ea:
                    ed:d9:33:37:b5:f7:d9:d7:25:97:98:62:40:3e:92:
                    c7:12:d2:9f:e5:24:2a:79:83:46:1d:f4:11:fe:1e:
                    a5:7d:dd:36:d4:75:f2:e1:3f:82:28:92:1c:1a:2a:
                    14:6c:5c:f9:25:21:3d:17:52:b5:9e:ff:fe:64:e1:
                    d9:48:e3:fb:1f:b0:0b:5b:9c:1c:61:be:4d:98:14:
                    50:7b:50:61:64:ae:79:9a:90:16:5f:dd:60:99:44:
                    0d:32:8f:33:50:8d:24:f5:a6:0a:e5:3f:66:dd:35:
                    09:b1:3a:5a:12:46:71:9a:25:7c:8b:5b:7c:4f:bc:
                    a0:86:59:aa:9f:66:46:99:86:7b:e4:07:36:45:53:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AB:C2:04:97:6A:1D:D5:48:5C:A3:9E:C8:85:8E:CD:48:0E:D5:4D
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.204.0/22
                  182.54.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:02:90:a6:b1:d1:88:1e:3e:a5:97:bf:6c:d8:4b:b9:70:
         c4:66:c6:d4:6e:8c:92:0d:ee:dc:d6:3a:a2:0e:8d:2c:38:e3:
         4d:37:da:30:69:f9:14:1c:52:96:c9:1e:64:93:9e:07:9a:ef:
         a8:ac:80:2e:7b:e7:c1:ed:26:a4:a6:86:22:21:0a:ff:56:f1:
         07:d6:de:c2:0c:9e:8e:4c:d8:ee:d9:74:cd:9a:0f:94:2b:71:
         ca:a1:28:2c:84:be:d0:0b:65:ef:ce:db:8b:c6:0d:0c:5c:26:
         f0:5b:5f:67:13:d1:78:4b:92:19:bc:78:f6:18:66:1f:c1:b1:
         e1:1b:9f:a7:d8:73:0e:3b:4d:d6:57:b9:11:32:a8:a9:bf:26:
         02:82:e3:cf:b9:fe:39:44:50:77:4e:00:59:81:43:60:df:97:
         92:42:6d:43:b9:64:f5:52:1d:3d:9b:2c:f2:84:0e:b8:91:76:
         b6:f3:06:54:b0:b3:a9:dd:4b:d3:3f:89:05:0e:3a:a9:3b:c5:
         1c:39:0a:73:6a:08:c5:c0:fd:08:58:78:a7:54:65:d1:91:66:
         77:21:ea:76:9b:c9:1a:1b:33:7e:0d:3d:08:d5:88:1a:d7:22:
         a6:99:fb:60:9b:d0:83:94:ed:b9:68:fd:e3:ff:42:77:87:4f:
         b6:40:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:42 2026 by rpki-client