Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa
File:                     E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (raw, json)
Hash identifier:          QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=
Subject key identifier:   E3:FD:9D:CF:DE:CA:CD:2B:ED:7C:B5:33:5C:A3:12:46:7E:43:95:5F
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       0187
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 05:41:10 +0000
ROA not before:           Wed 29 Apr 2026 05:41:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45270
IP address blocks:        202.6.86.0/24 maxlen: 24
                          2001:df3:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Apr 29 05:41:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f199f6-7a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:2e:05:f8:aa:d0:26:1a:ab:40:5c:c9:56:
                    4a:03:d9:bc:b9:a3:16:81:5c:95:a9:25:dd:74:37:
                    67:4a:66:51:22:ca:b8:56:cb:8d:96:cf:c0:d6:95:
                    07:fc:ee:b9:01:28:21:e5:52:d2:2a:01:c5:f6:33:
                    29:ab:f8:20:04:bf:7a:6c:15:19:be:eb:5d:c0:5f:
                    7e:33:28:fb:35:6d:c4:40:48:a2:95:b1:a4:d7:d5:
                    b3:ef:b9:b3:52:d4:88:48:c5:cd:98:4a:08:32:75:
                    17:61:42:d5:d5:95:0a:67:87:9c:16:78:90:6f:cc:
                    6d:ae:17:6e:99:be:4d:74:21:ec:88:57:94:25:92:
                    1d:a0:4e:cf:9e:35:4c:af:b7:15:a4:1f:45:94:85:
                    0e:ab:bf:9c:43:e2:79:57:fc:8a:be:de:1a:a0:83:
                    62:4e:60:2b:32:6d:73:32:85:11:5a:7c:06:30:5c:
                    29:e1:a4:0e:4a:35:3b:2b:08:49:a8:63:41:ff:5c:
                    e2:c6:ca:9f:82:16:37:b6:91:1b:53:7f:51:57:bc:
                    98:0e:bb:e8:0f:db:87:7d:07:b2:a8:55:ed:67:96:
                    ea:ad:0a:13:2a:6a:fa:cc:6b:5a:d7:e9:ba:38:0a:
                    d3:e6:99:0e:8e:bb:8e:90:88:6d:21:be:c3:c2:4f:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:9D:CF:DE:CA:CD:2B:ED:7C:B5:33:5C:A3:12:46:7E:43:95:5F
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.86.0/24
                IPv6:
                  2001:df3:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:64:64:4c:27:a2:ba:88:0c:1f:e3:bb:5a:6c:61:8d:88:
         e3:5e:5f:19:c1:b3:76:1f:74:3a:cd:71:8c:85:85:2b:1e:86:
         08:59:f0:f4:ae:1f:84:8e:58:91:de:ac:5e:a9:f7:1d:d5:39:
         41:04:4f:21:8d:83:34:5e:9a:d6:5f:57:6e:be:28:c2:8a:90:
         fa:f1:a8:54:55:25:a2:87:da:28:6f:77:d9:35:17:c7:05:a0:
         f9:e9:aa:43:7d:9e:c0:b1:ff:f7:fc:3a:01:d4:6d:ce:8a:49:
         c0:c2:22:b5:41:21:29:25:68:b1:59:93:d8:46:cb:de:93:ef:
         5d:e2:ad:12:16:6b:20:53:4b:a6:21:80:d3:30:4b:f2:36:42:
         36:1b:63:5d:3b:64:9a:70:fb:f4:b6:4f:13:27:b5:b0:fc:7a:
         d7:79:88:2a:8d:dc:12:ba:a2:4a:2e:a8:7b:0e:38:7b:7a:59:
         bf:47:bf:8b:b3:e3:d7:8a:01:c0:df:35:e9:dd:81:e5:16:9a:
         d7:14:46:20:58:f9:51:b0:5a:31:73:fa:0c:ae:c8:04:d9:61:
         8e:66:29:a1:24:23:99:8a:4f:ae:8f:e1:5d:a3:f4:f7:61:81:
         22:88:40:36:ac:63:d1:31:b8:b1:78:ee:65:30:9f:65:fa:52:
         a8:9e:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:44 2026 by rpki-client