Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa
File:                     8A5AA9BAAB4111F09E531265C4F9AE02.roa (raw, json)
Hash identifier:          2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=
Subject key identifier:   6F:80:54:6D:5B:80:5C:E5:65:C9:EC:AB:8B:E1:C6:72:21:98:58:D4
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       0799
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa
Signing time:             Mon 11 May 2026 12:02:32 +0000
ROA not before:           Mon 11 May 2026 12:02:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     131183
IP address blocks:        103.136.104.0/24 maxlen: 24
                          103.136.105.0/24 maxlen: 24
                          2404:90c0::/48 maxlen: 48
                          2404:90c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: May 11 12:02:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a01c557-81b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:2c:c2:c2:7a:3a:88:db:5d:af:88:92:9c:
                    23:dd:dc:ce:de:3e:f3:92:5f:52:e5:b9:e5:ae:da:
                    30:cc:84:fb:d8:d9:55:35:c1:9e:cb:ff:e6:f8:f1:
                    c9:df:8a:a1:c8:1c:d3:58:2b:30:c5:62:01:e9:d6:
                    08:96:54:12:37:dc:c6:0d:64:6a:16:4a:bb:df:15:
                    d1:cf:18:ab:ab:ed:bd:1f:ba:5b:a4:74:71:b4:0e:
                    00:6c:16:0b:25:52:24:e5:bb:18:05:e2:5d:85:7e:
                    7a:4f:0b:d0:34:63:fa:50:1d:30:ee:af:03:2c:b1:
                    7c:b0:f4:36:14:ec:c6:45:57:fa:4b:e5:c9:78:51:
                    d1:d6:df:17:97:28:61:00:f0:66:3c:17:8a:d9:58:
                    6b:78:59:01:27:78:c0:f6:59:2b:b1:90:a8:e2:e7:
                    0f:46:24:c7:bd:14:2f:33:14:cf:db:07:27:ad:6c:
                    30:d0:0e:14:f8:a4:d4:81:d5:0c:89:6b:c6:20:58:
                    46:68:05:08:40:35:78:93:80:a0:d6:c1:c9:ce:d4:
                    d3:ae:ed:50:0f:aa:17:00:92:49:31:5f:68:ab:5c:
                    87:e2:4d:3a:2c:0a:53:af:11:1b:27:bc:24:7c:c1:
                    30:11:93:64:5e:1d:96:3d:a8:6f:0b:07:50:09:0a:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:80:54:6D:5B:80:5C:E5:65:C9:EC:AB:8B:E1:C6:72:21:98:58:D4
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.104.0/23
                IPv6:
                  2404:90c0::/48
                  2404:90c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:e9:ee:c7:06:59:e5:d0:ea:fb:5b:ba:7c:5d:bb:3d:34:
         c2:52:15:47:36:3b:16:40:ba:39:85:91:40:5d:43:fa:69:bc:
         fa:f8:c9:03:43:79:b8:3f:cd:fd:be:e5:a7:73:9a:ff:7d:f4:
         7e:50:b2:a3:ed:5d:7f:a1:f8:2f:04:d7:c2:ca:57:51:9b:d4:
         ca:05:ce:a6:bd:c4:70:39:ce:87:0a:3c:ca:92:0a:e2:c6:4d:
         23:2d:0e:21:77:37:97:cd:a2:26:f9:64:b2:b2:e2:e8:15:b8:
         0e:97:08:90:c7:05:8a:a8:e1:7e:30:0b:36:c9:0f:50:85:29:
         49:a2:30:89:64:2c:08:8d:0a:c4:1a:db:f7:77:e9:ad:e3:6b:
         39:04:83:01:ab:f7:5e:fc:63:c6:ff:76:ae:99:ca:ad:d0:44:
         a8:c1:f7:e8:bc:bd:f4:b4:52:7f:8e:33:6e:25:c8:aa:37:23:
         4a:99:4b:d3:35:cc:7d:9d:1f:f2:0b:c3:b3:26:70:94:3d:ea:
         11:76:8e:70:2b:b8:00:67:f5:e5:89:bf:8d:e7:45:44:64:f5:
         f6:95:a7:61:3c:f1:18:46:fd:56:d5:f5:ef:12:6e:9f:f7:c4:
         17:9b:3a:ce:3e:9b:e2:df:47:08:5e:c1:16:36:ad:99:26:83:
         55:96:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:57 2026 by rpki-client