Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/0D036EB680BC11EBAF2A1C0EC4F9AE02.roa
File:                     0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (raw, json)
Hash identifier:          SQ/IDNPzqSFSibvtHKyT8PSrdrnCQvG3A/ogxc1qF4k=
Subject key identifier:   EC:A3:4D:E0:61:37:4D:AD:79:ED:F8:DB:BB:99:89:F7:52:71:F7:32
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D98
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/0D036EB680BC11EBAF2A1C0EC4F9AE02.roa
Signing time:             Sun 26 Apr 2026 18:22:36 +0000
ROA not before:           Sun 26 Apr 2026 18:22:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139282
IP address blocks:        103.137.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3480 (0xd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Apr 26 18:22:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ee57ec-e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:7a:20:ad:16:d0:bd:45:65:d7:51:c6:64:
                    99:30:f0:fc:61:a2:f8:6b:fb:7e:03:7f:76:f1:45:
                    ff:9c:9f:15:62:9e:13:00:7a:56:7e:12:b9:81:fa:
                    47:dd:5d:50:b6:98:f2:98:c8:22:b2:70:13:81:e4:
                    2e:ae:b4:bd:55:b8:2a:cf:55:0b:d9:c3:36:4b:eb:
                    5b:48:ad:bb:2c:30:3d:7d:ac:7a:4e:dc:40:11:f9:
                    8b:40:9e:01:20:b5:f5:9d:fd:9d:65:fa:1b:e6:8e:
                    4c:de:df:91:1a:a4:db:ff:fb:65:f1:f5:5d:f1:ee:
                    82:6c:55:61:48:a8:1e:95:c1:e7:df:45:20:5e:2c:
                    08:17:6e:34:97:21:12:f2:4b:e1:4b:b4:71:c7:44:
                    e2:cf:de:5c:cc:a2:b3:22:d8:7b:ee:21:b7:8f:e1:
                    cd:e1:13:32:98:2c:5f:78:0e:89:d1:85:8a:13:a6:
                    28:6a:ae:f9:1c:64:17:bb:70:8f:50:17:9b:46:55:
                    55:6c:43:7f:de:bf:21:57:e3:0d:0f:62:d8:98:97:
                    75:97:c9:9a:bc:d6:6d:47:16:30:17:b8:0d:ab:10:
                    d7:23:cd:2d:74:e0:44:2c:fd:f2:38:8f:e1:d7:8d:
                    79:4a:9b:3f:c7:ed:cc:eb:56:cb:da:e7:6e:71:18:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:4D:E0:61:37:4D:AD:79:ED:F8:DB:BB:99:89:F7:52:71:F7:32
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/0D036EB680BC11EBAF2A1C0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:82:fa:d8:48:0d:e5:d8:62:ec:82:a5:b8:cf:a7:e5:e4:
         93:89:4e:41:05:a2:81:34:46:a1:44:60:1b:4f:e5:8f:57:dc:
         2f:6b:6d:a6:d8:46:24:c7:93:2f:e2:0b:06:0d:2e:91:7e:f1:
         37:44:a1:3d:e8:88:68:76:2a:62:22:4d:fd:f4:20:c4:76:15:
         bf:9d:1e:b9:a5:cd:f0:7a:b6:3e:5f:e7:a1:f6:2b:f7:4f:dc:
         48:62:f2:a0:d6:89:21:df:c1:de:8f:58:32:2e:61:81:af:19:
         e9:9e:44:23:58:f5:97:85:33:1e:0f:88:3c:ef:97:64:51:34:
         79:e6:22:bf:2d:22:1c:65:2c:b1:4b:04:25:f4:d5:0c:7d:c4:
         14:91:8a:36:9a:a4:c3:78:cd:44:be:f3:06:ac:41:7b:b2:0c:
         98:26:78:f9:5e:a7:d7:0e:f0:79:03:01:84:d4:d3:68:92:43:
         f1:0d:c6:56:8a:5f:6d:a6:01:03:4c:66:98:fb:0c:67:20:8d:
         5d:e7:b7:dc:1e:9e:33:e8:59:f8:0c:e6:9f:87:5b:2b:42:81:
         13:f2:ef:ba:56:81:1e:a9:a4:75:11:c6:0b:8d:ad:4f:57:64:
         b2:f4:7d:30:49:6e:60:a1:44:cc:9b:b4:8d:1f:ec:5c:9f:1a:
         7c:46:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:58 2026 by rpki-client