Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/06E6952AAB4211F08DC86D66C4F9AE02.roa
File:                     06E6952AAB4211F08DC86D66C4F9AE02.roa (raw, json)
Hash identifier:          U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=
Subject key identifier:   5B:F1:B3:17:BC:80:01:1F:71:62:95:CD:E2:F6:7C:EE:40:87:DC:89
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       078E
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/06E6952AAB4211F08DC86D66C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 22:28:27 +0000
ROA not before:           Tue 28 Apr 2026 22:28:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.136.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Apr 28 22:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1348b-3191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:2a:1f:6d:e2:c7:a2:31:d6:be:34:d7:50:
                    72:5b:83:5e:85:ed:75:29:5c:fa:60:40:c7:64:51:
                    49:10:32:81:80:41:d8:76:5f:48:10:cd:45:93:8d:
                    85:51:17:ea:95:f6:09:d8:23:aa:ec:1b:66:d7:9f:
                    e1:68:50:9b:6d:07:eb:ee:20:4a:bf:55:1f:ad:28:
                    79:08:2c:4c:14:b0:2f:7b:63:ec:17:6c:53:d9:9a:
                    5d:b0:7f:15:aa:72:f1:77:0c:bb:1c:31:dd:84:3c:
                    51:c4:bb:b4:07:1a:4d:42:04:95:c5:4a:08:b7:73:
                    83:9a:83:9d:0c:34:8e:70:e0:0a:06:ee:6b:16:d9:
                    af:b2:1d:21:91:c1:a0:85:47:f8:59:a7:da:70:14:
                    32:c3:18:a7:b6:14:2e:6e:66:3e:a5:b8:49:bf:9c:
                    4b:f1:46:ee:f3:85:09:a3:08:f3:b3:2e:b6:85:47:
                    df:72:1a:e5:d1:00:f0:0c:ff:d7:9e:4c:e7:c1:71:
                    9c:53:74:da:45:a4:61:91:13:00:d5:cc:9d:2c:37:
                    83:42:ac:de:c3:8c:64:29:ad:7b:a8:d7:ca:a9:3c:
                    46:5d:4f:a9:bb:94:e3:48:ef:bf:a2:b9:ca:70:d4:
                    1f:5b:65:fb:2e:df:3e:1c:1b:21:e3:7b:d7:58:ea:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:B3:17:BC:80:01:1F:71:62:95:CD:E2:F6:7C:EE:40:87:DC:89
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/06E6952AAB4211F08DC86D66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:93:4a:c0:ed:e1:cf:11:50:a7:65:28:dd:a5:0e:cc:ef:
         bb:9a:48:18:f4:c1:5d:aa:c9:ce:42:e0:7d:23:56:dc:d8:9e:
         b8:1a:0e:d5:a1:ef:63:84:80:1e:2a:47:cb:43:ef:83:50:c6:
         90:c3:88:d8:c5:10:49:08:d0:35:90:e0:37:c6:72:47:be:d2:
         c9:45:c4:eb:3f:12:b8:ff:5f:00:88:6a:4f:6e:ec:bd:6b:de:
         f8:a0:46:ae:fc:2d:44:f7:2d:15:84:b7:a9:1f:d4:6d:bc:87:
         dc:96:76:06:7f:07:9b:2c:c5:8a:a0:d9:4c:5c:23:0f:b7:6c:
         5b:45:bc:20:f1:5b:42:02:cb:52:d1:c0:80:bd:64:3e:9f:68:
         b7:80:91:a4:e2:76:69:6e:9a:a0:7a:b9:ea:26:e7:49:46:d9:
         28:0f:1d:b5:d2:7e:9d:6e:86:a7:5c:e6:55:f2:c8:b6:37:cc:
         81:7b:1d:2b:f9:ea:92:87:85:74:2e:3e:46:bb:e4:b9:9c:af:
         41:88:55:f2:f0:06:22:b6:39:a1:ec:58:1a:e9:72:95:83:f2:
         e2:d6:a1:65:d0:fa:5c:5f:94:55:79:a4:f3:0d:e8:a1:42:c1:
         11:f5:12:00:35:13:85:6c:8c:a8:61:a2:06:5c:be:23:02:3b:
         cf:c4:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:40 2026 by rpki-client