Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa
File:                     5882F272BB4811F193B2717F3911F970.roa (raw, json)
Hash identifier:          KMYT2gyxrjM6g3Aqx+Ka9fdVUGFamxEXqoeCpWkA2iA=
Subject key identifier:   D0:2A:55:16:F1:D4:74:30:AA:C3:C2:E4:A4:4E:9D:02:F6:AE:7F:57
Certificate issuer:       /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial:       DE
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa
Signing time:             Mon 28 Sep 2026 14:24:42 +0000
ROA not before:           Mon 28 Sep 2026 14:24:42 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138596
IP address blocks:        103.252.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 07:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
        Validity
            Not Before: Sep 28 14:24:42 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aba78aa-4399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:cb:b6:d2:b9:ed:b3:d8:4a:42:9a:f7:e4:
                    ec:d5:4a:5e:c9:1f:f5:70:d9:aa:80:99:da:a7:7f:
                    6e:10:16:04:f1:71:47:1d:53:43:de:5d:92:92:5d:
                    0f:9b:c0:34:a8:bf:12:ac:55:7a:23:ad:b4:fd:65:
                    80:f6:44:71:77:43:df:bf:bc:8f:4e:25:2e:b7:f1:
                    55:16:ce:44:9a:2a:89:6c:1a:8b:22:ca:9c:71:33:
                    b6:10:76:0d:db:ce:f4:da:9e:7d:0d:62:a3:f4:32:
                    63:46:11:18:53:82:c4:19:a1:57:d3:3b:82:3b:6a:
                    49:96:11:e6:87:0d:21:d1:8e:1d:75:bc:d2:06:c3:
                    46:94:fa:f8:2a:ea:71:6e:35:4d:c4:4e:dc:82:cc:
                    06:a0:c7:c9:d7:05:3c:6f:12:90:0f:09:44:da:91:
                    cc:42:6b:ee:8b:61:38:c5:62:a7:2d:20:c7:8b:5d:
                    dc:60:de:5b:1b:4e:ab:0e:ab:9b:6a:4d:79:6e:86:
                    7d:45:ce:87:a3:57:56:b5:1b:b6:c0:c3:1e:cb:8f:
                    34:74:be:2d:18:dc:ad:73:3c:23:7a:67:92:9e:31:
                    52:10:d3:e1:7c:2e:9f:00:b1:3b:fc:5f:91:a9:3f:
                    0d:47:6e:b0:db:65:69:68:a4:94:fa:32:d2:75:eb:
                    4b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:55:16:F1:D4:74:30:AA:C3:C2:E4:A4:4E:9D:02:F6:AE:7F:57
            X509v3 Authority Key Identifier:
                keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:59:75:4f:55:7d:86:21:c6:b2:a1:86:c8:0b:ac:a3:22:
         e8:48:b8:2c:53:b7:01:8b:d5:fb:8e:ce:7b:91:75:fd:12:0b:
         85:25:66:ec:2d:b9:38:73:9e:80:84:49:af:24:21:f7:1c:70:
         f8:cd:a4:8f:55:db:5c:2d:f3:1b:b9:65:89:a7:54:03:32:5c:
         0e:0d:ce:4f:43:1d:e1:92:bd:2c:e1:a8:35:76:94:4e:42:2b:
         81:0d:02:fc:1e:a9:3d:b5:c6:47:be:f1:61:89:01:b4:c4:4b:
         98:08:b5:83:1e:d8:b6:35:5a:04:9d:02:ae:bb:a2:0c:54:1a:
         89:57:bb:24:cf:e1:5a:65:44:80:9c:ea:bf:e1:8d:30:ae:07:
         c1:48:2d:eb:34:9e:c7:8a:ce:6d:f8:71:fd:58:a7:49:00:9d:
         6e:67:80:25:ad:b6:62:c7:37:fc:1f:dc:71:f7:68:33:c2:2f:
         e7:8e:f9:dc:7f:78:89:e1:4f:f8:44:af:ad:7b:ed:2e:02:e7:
         c6:25:8a:6c:87:ba:bf:62:81:03:ec:40:19:d2:ba:20:55:13:
         e2:78:b0:92:31:f4:14:e3:4a:d9:fa:4f:6b:49:91:fe:60:ac:
         56:00:35:8e:46:6b:7d:d9:c6:35:6b:e7:0e:11:75:7e:e7:5e:
         df:ae:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:31:41 2026 by rpki-client