Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/E7C01CD0804211EC8FFC2242C4F9AE02.roa
File:                     E7C01CD0804211EC8FFC2242C4F9AE02.roa (raw, json)
Hash identifier:          5KuK4S0yIvXS8Wv0HZBgG4XfF+5FRKuq8lTxR5lz3Fo=
Subject key identifier:   AA:1A:31:15:EA:DF:67:70:0E:16:0C:F0:CD:E5:6D:AC:D4:F6:09:D5
Certificate issuer:       /CN=A91287DA/serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
Certificate serial:       074A
Authority key identifier: 37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/E7C01CD0804211EC8FFC2242C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 22:27:05 +0000
ROA not before:           Tue 02 Jun 2026 22:27:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132420
IP address blocks:        103.139.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91287DA, serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
        Validity
            Not Before: Jun  2 22:27:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f58b9-f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:c1:06:39:d3:64:25:1a:98:97:c6:5d:ed:
                    ac:dd:10:28:cd:7e:d2:00:d4:e3:b0:25:d5:65:59:
                    28:9d:10:9d:03:05:15:38:84:5d:06:7d:b0:5e:0f:
                    27:76:dd:4a:25:2d:77:ab:a1:d4:9d:45:36:e7:13:
                    41:8d:67:9c:50:69:52:4b:63:fe:4d:7b:05:ef:15:
                    e2:c2:c8:23:19:2a:de:9d:19:38:79:b8:d8:9e:6b:
                    93:11:bb:50:7d:ce:a9:bf:89:d1:6f:51:31:df:e9:
                    07:11:44:3d:4c:cf:5e:c8:03:0d:7b:cb:0f:b8:41:
                    79:3c:19:71:25:2e:a3:ac:ca:5e:f5:12:20:61:a0:
                    28:2a:04:47:7c:8e:9f:84:7b:43:5e:07:77:23:77:
                    7e:70:50:f4:c7:27:4a:a7:62:3f:b6:77:49:ac:14:
                    59:47:5b:7f:ba:ea:5e:ea:6c:c5:92:35:72:f0:b5:
                    66:38:9b:22:3c:35:ee:45:97:14:18:51:68:f2:64:
                    d1:5e:b6:0a:71:9e:7d:98:cf:26:62:c6:3e:67:bd:
                    d0:70:46:d1:76:79:f2:39:ab:18:98:2c:45:45:a6:
                    8f:15:81:bf:6f:f1:b9:36:9c:76:e7:39:ca:53:ad:
                    ef:4b:54:68:32:54:7c:e6:62:b3:85:3e:19:21:ca:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:31:15:EA:DF:67:70:0E:16:0C:F0:CD:E5:6D:AC:D4:F6:09:D5
            X509v3 Authority Key Identifier:
                keyid:37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/E7C01CD0804211EC8FFC2242C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0b:2f:53:fa:99:8f:42:d3:a9:e0:d6:aa:7c:29:ad:64:54:
         95:bb:92:c0:2b:c1:78:30:94:41:55:7b:60:ee:09:de:4f:77:
         0f:e0:1b:d3:b5:b0:ff:78:26:83:43:c9:9a:4f:3b:92:b9:d9:
         5b:31:bd:6b:b2:20:7f:ab:85:65:fb:c6:4e:40:ac:ef:90:b1:
         c1:5d:6d:8c:25:96:ac:4b:ad:c5:a8:a0:d0:c9:41:9a:e0:6d:
         08:72:9d:21:17:2b:15:dc:04:2b:eb:a9:47:69:3d:70:ef:1c:
         59:dd:25:33:2b:70:91:1e:7b:83:d2:45:a2:c3:f6:58:c3:dc:
         f0:0d:ff:c9:75:46:87:9e:63:fb:00:4b:3d:7b:29:79:e6:6b:
         e6:d5:e2:fa:af:7b:3e:9a:a5:e7:49:1a:4a:e1:dc:d7:7d:b6:
         e7:67:ba:f3:ed:ce:67:c2:52:8e:a2:d2:c3:28:3b:fe:ab:fa:
         6c:eb:4b:93:39:b7:0b:0f:59:3e:06:1b:0c:e7:00:7d:18:d4:
         a3:ee:db:af:89:17:fb:52:24:5b:ff:29:10:dc:27:dc:2b:48:
         32:6b:93:e6:9e:5d:5a:3c:9f:a8:83:ab:9b:16:82:7d:73:b6:
         97:5e:77:42:5b:13:d5:b5:a4:52:c1:47:6f:5e:50:da:f6:61:
         52:4a:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:25 2026 by rpki-client