Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
File:                     A5D573E4305A11EB921D6332C4F9AE02.roa (raw, json)
Hash identifier:          EXIodqZO0EV9Q7D8N2AnvfLDO9Fid8uBbsf7/azJXeA=
Subject key identifier:   BE:CB:45:1C:C5:02:E9:EF:0F:8A:1C:E5:14:8F:A3:1C:28:77:94:AE
Certificate issuer:       /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial:       07CC
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
Signing time:             Wed 04 Mar 2026 21:28:34 +0000
ROA not before:           Wed 04 Mar 2026 21:28:34 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136388
IP address blocks:        103.86.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
                          rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
        Validity
            Not Before: Mar  4 21:28:34 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a8a402-1290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:f2:3a:54:a1:31:4e:1b:40:c4:ff:2c:62:
                    b4:f1:c2:ba:ba:1f:0c:79:fc:b4:bb:bf:4c:ad:49:
                    83:b5:c3:42:32:47:74:36:e2:ea:8c:1f:f3:96:a7:
                    4f:a3:5b:46:d9:b8:31:98:62:89:34:ea:a0:31:d9:
                    fe:da:3b:f3:db:17:5b:83:5e:66:c1:b0:4b:f6:25:
                    d1:8e:70:c3:f1:7c:8f:3e:3d:b0:cf:32:fd:32:45:
                    b6:4d:76:09:6a:80:e1:4b:60:48:99:c4:6c:fd:8a:
                    af:e0:28:bf:5e:b3:c2:53:a9:49:de:48:8b:79:e5:
                    7f:79:06:bd:7d:99:8f:70:dc:03:28:c3:3a:86:be:
                    17:e9:9d:e2:83:b3:1f:7b:04:e8:0a:83:0c:56:e3:
                    b7:7f:8a:6e:d0:27:71:e8:79:6a:a6:7c:4e:2e:9e:
                    66:eb:4d:73:84:f4:37:70:24:05:b1:60:db:a0:2c:
                    ed:a8:d1:9b:47:f9:0b:9b:bf:f6:45:ae:03:4d:ae:
                    5d:09:76:37:7d:c9:ce:14:1c:b1:95:ac:4c:dd:d5:
                    8e:19:9c:8a:64:5f:a6:df:52:52:cc:a7:6a:e8:91:
                    ca:eb:d7:20:cd:2e:88:b2:3e:92:fa:ec:f8:4a:64:
                    c4:e5:10:d6:f4:13:f6:a1:bc:cd:d4:a6:93:6f:9d:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:45:1C:C5:02:E9:EF:0F:8A:1C:E5:14:8F:A3:1C:28:77:94:AE
            X509v3 Authority Key Identifier:
                keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:cc:6f:45:c3:af:79:52:75:33:3e:be:32:f1:d5:91:ac:
         ea:c9:3e:f0:9b:ab:a3:09:b3:9a:ec:88:ac:63:59:80:1c:b2:
         f9:d7:36:5f:55:af:98:cd:65:bb:df:54:28:87:55:1f:59:78:
         8b:e2:4d:17:e0:d7:43:ce:bf:4b:6a:72:cd:0d:05:b7:67:66:
         ee:91:88:3d:e7:21:0b:47:a4:bf:12:9d:97:95:f5:73:e6:59:
         63:64:1e:35:a4:b9:13:e2:3b:7f:65:10:88:b9:ed:b5:69:77:
         43:c3:cb:71:df:5b:99:ef:64:6c:f4:9a:95:2c:a2:84:b3:93:
         69:0a:40:1e:5d:00:1a:4c:e0:89:91:77:62:b8:56:f2:65:c0:
         c9:c5:3c:ba:0a:54:ca:1c:dd:3d:40:99:52:23:99:a1:3b:a0:
         d9:92:8a:a5:89:c5:59:1c:9d:e5:ea:6f:89:55:ef:61:e8:ba:
         81:3f:b3:48:e7:b2:cc:57:d0:03:f3:57:a6:85:d0:a1:40:36:
         77:e2:9e:09:eb:b3:1b:7e:49:fd:a9:5c:47:b1:7e:35:cf:b7:
         0f:c4:4e:2c:6c:9b:72:fa:e0:03:34:7f:a1:bf:0b:cf:c8:62:
         03:cc:eb:fe:89:79:18:18:c8:cb:25:a9:73:de:23:62:18:26:
         71:fc:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:41 2026 by rpki-client