Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa
File:                     E28853A6F50311F0BCFB4C27526F56BC.roa (raw, json)
Hash identifier:          WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=
Subject key identifier:   00:34:00:79:94:D9:61:E3:20:89:7E:8A:A2:F0:D8:28:00:FF:95:EB
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       06CA
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa
Signing time:             Wed 06 May 2026 23:27:48 +0000
ROA not before:           Wed 06 May 2026 23:27:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133178
IP address blocks:        103.90.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: May  6 23:27:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fbce74-026d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:ed:c9:85:a8:af:6e:ad:a0:7f:7d:95:36:
                    70:85:00:24:87:b2:c1:d1:98:aa:57:89:d4:bf:af:
                    6d:d9:e6:b2:1e:e4:8a:56:45:56:23:51:0f:1b:ae:
                    2e:54:45:45:48:2f:66:91:5d:c9:1a:ea:62:0c:32:
                    1d:81:33:a8:7b:3f:53:8c:c5:95:8f:6f:23:1e:7d:
                    35:d2:e6:58:e6:15:5b:b1:b9:9f:50:60:18:d2:7d:
                    fe:59:65:91:6f:c3:30:34:2c:c2:6a:e7:fc:0b:11:
                    d5:ad:01:82:3c:de:91:25:9f:24:60:ec:22:d1:0d:
                    84:ed:3c:df:e1:3b:27:54:04:9c:c8:c9:9f:3a:9c:
                    ce:a4:b1:8b:7f:e0:66:19:88:15:39:af:a5:36:24:
                    8f:22:4f:e5:65:f5:ff:43:cb:b6:a1:93:7c:0e:26:
                    89:f1:49:b2:c5:43:09:e4:30:78:34:75:77:59:d1:
                    e0:4e:32:01:33:fd:a0:aa:69:07:ed:28:c1:71:6c:
                    d0:26:e1:27:4e:cf:ef:bf:87:54:b9:35:dd:f6:80:
                    42:fc:9b:07:19:ee:5e:b7:f6:aa:5c:78:f4:2d:ca:
                    bc:ba:8e:31:54:00:9f:bf:18:59:41:f2:47:04:47:
                    76:7f:76:00:b9:90:b1:22:7f:8c:23:4a:28:cc:20:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:34:00:79:94:D9:61:E3:20:89:7E:8A:A2:F0:D8:28:00:FF:95:EB
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E28853A6F50311F0BCFB4C27526F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:9e:ca:b6:d7:dd:56:2a:1e:6d:e6:64:84:1f:1c:00:c8:91:
         88:4d:d8:40:ae:e4:fa:49:99:9e:df:de:b9:af:85:62:78:84:
         f4:3d:62:3b:77:31:ee:b4:fd:b1:43:f7:8d:36:78:9e:40:12:
         88:ad:a9:03:33:5a:5f:75:23:14:50:48:33:c9:f1:f0:cd:32:
         a1:3b:f8:5d:8b:99:e9:82:31:b4:30:bd:7f:3e:02:57:e6:f9:
         78:1d:40:8b:02:3a:05:40:5b:bc:f6:41:89:78:96:e6:bc:5f:
         ac:4f:74:73:c8:86:a1:d8:a1:a5:36:f4:af:39:ab:fc:65:d1:
         a9:91:3d:8c:ec:59:5f:85:3b:5d:e4:87:f6:7c:3c:1c:4a:03:
         61:ec:6f:f5:50:d2:7a:c4:1d:90:a8:94:86:fb:12:65:d3:93:
         0b:cf:f9:0f:c1:56:3c:78:08:ab:14:d7:36:00:ef:10:d3:09:
         37:83:bc:cf:4f:e3:27:66:72:ae:d0:e9:83:02:56:05:53:85:
         5a:d4:b2:c7:a3:b3:46:e5:c0:c6:62:65:f1:eb:f2:fd:f3:34:
         41:b1:17:ba:73:86:9c:1a:0d:e9:f6:a9:4c:7a:75:d6:1e:6b:
         3b:b9:a5:b2:3d:32:b8:43:54:1c:a4:13:fe:8b:b4:33:d4:0f:
         b0:1e:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:07:37 2026 by rpki-client