Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa
File:                     3CE623883D6F11F196AFC17AB1833773.roa (raw, json)
Hash identifier:          fccdVhP6r3lPUb+xE1JqxAMJGmzw9RyVmsJhCi+Yhl8=
Subject key identifier:   0E:19:D1:6E:72:35:A6:0E:2D:C2:7F:55:99:24:83:36:93:8D:FE:46
Certificate issuer:       /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Certificate serial:       06
Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa
Signing time:             Tue 21 Apr 2026 10:45:40 +0000
ROA not before:           Tue 21 Apr 2026 10:45:40 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        103.51.12.0/24 maxlen: 24
                          103.51.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
        Validity
            Not Before: Apr 21 10:45:40 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e75554-612e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:35:f0:48:fe:04:bd:6d:19:c3:31:c5:83:
                    02:3c:53:ef:45:09:cf:94:d0:58:63:17:52:92:75:
                    57:0c:2f:c5:3a:af:8e:a5:5b:e1:69:50:f3:6d:fc:
                    92:e3:35:67:b1:f1:46:85:97:cc:d0:4e:ef:e0:da:
                    f7:25:db:7b:9c:ef:fb:58:60:3f:ad:e3:8b:63:ca:
                    dc:76:aa:13:db:58:41:c8:46:a4:26:1b:2a:d3:9b:
                    ff:54:fa:c1:b5:09:61:bc:40:05:8e:2f:ee:11:77:
                    10:c4:13:0f:0c:82:aa:ec:e2:5c:2f:7a:eb:6f:68:
                    58:5f:47:98:09:c3:48:9a:3c:e7:13:7c:b9:8c:1e:
                    09:a3:e1:43:6e:67:8d:6f:d7:f3:96:2d:f0:54:91:
                    b2:cc:96:ce:b0:3d:f7:8b:b2:fa:93:9e:e6:fb:32:
                    a4:a8:cc:3a:28:47:ba:df:a8:da:63:68:7a:1a:0b:
                    36:34:58:a9:bb:c9:4b:ce:63:b9:0c:fc:67:8b:b2:
                    27:f0:0e:a8:92:e6:99:22:4d:74:19:8a:95:1c:f1:
                    38:a9:68:46:a3:92:da:c4:59:9d:3b:68:4e:a9:e6:
                    11:f9:f8:c2:14:74:41:cf:28:bb:84:19:b9:54:b0:
                    8f:2f:03:ec:74:0f:f2:d4:bd:58:e6:80:aa:d0:79:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:D1:6E:72:35:A6:0E:2D:C2:7F:55:99:24:83:36:93:8D:FE:46
            X509v3 Authority Key Identifier:
                keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:58:7c:aa:3d:76:80:18:ba:f2:16:5c:18:39:39:80:6e:3f:
         8f:84:9c:be:41:51:1d:fd:ec:53:96:dc:c5:48:8b:45:d7:8c:
         14:62:d9:b8:4d:74:9b:1a:96:60:44:5a:bd:c4:18:e0:d5:11:
         77:1b:fd:53:22:c3:62:a4:6f:f4:c8:05:ed:6b:ca:34:6f:f5:
         6f:c8:c6:db:1e:b4:19:b3:d5:b7:11:43:de:76:06:75:0d:bc:
         d4:66:bb:1f:40:6d:3c:d1:c3:54:06:9b:93:74:32:87:6f:8a:
         45:7f:a4:d8:42:bb:5c:5b:ab:56:eb:08:e3:35:c5:20:cd:1b:
         1f:0f:86:da:fa:0f:9f:e6:dc:aa:30:05:ca:f5:be:30:cb:0b:
         84:e9:cf:15:69:c3:b0:32:b5:2b:f8:0b:f3:e9:46:91:a7:0b:
         3c:cf:c3:53:12:a4:6b:78:06:9c:dc:6f:ce:4c:72:da:10:f3:
         63:2c:c9:fe:93:46:c4:89:f8:d5:db:fb:d3:df:21:cb:6e:e4:
         fb:1a:db:23:35:be:59:16:25:f6:fb:7a:c9:46:38:86:aa:21:
         25:32:d0:63:d1:e5:2b:bb:67:37:0a:2a:bb:52:0c:d8:33:4f:
         18:9b:de:77:15:5c:c2:60:4f:78:4c:cc:54:fc:ed:8e:d4:da:
         28:0e:cf:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:21 2026 by rpki-client