Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa
File:                     1347AA9019FE11ECB459B141C4F9AE02.roa (raw, json)
Hash identifier:          hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=
Subject key identifier:   DB:D5:1F:65:76:C4:E0:B1:20:91:5E:01:11:DD:10:0E:E1:D0:77:5C
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       05DB
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa
Signing time:             Mon 18 May 2026 23:28:53 +0000
ROA not before:           Mon 18 May 2026 23:28:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.20.197.0/24 maxlen: 24
                          203.20.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: May 18 23:28:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0ba0b5-14a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:a9:f7:6d:d1:90:aa:a7:06:c6:d7:14:38:
                    fc:a5:38:59:ba:ec:8e:73:5c:fd:71:a6:f5:50:e3:
                    1c:9a:3a:5f:4e:e2:8e:63:70:95:1a:96:2a:49:57:
                    af:9d:ef:30:a8:35:69:27:46:b1:ce:e8:b3:6e:a0:
                    19:9c:3e:27:af:fb:01:16:2f:59:0f:62:65:cf:11:
                    70:c6:41:58:a5:5d:3a:28:f1:ee:5c:52:f4:fd:ed:
                    8d:56:e1:47:37:92:d6:09:20:c9:44:08:59:fb:14:
                    69:21:41:d9:56:0c:0f:6b:3d:f3:25:72:a7:48:d0:
                    5a:80:4e:89:bd:8a:29:0e:f4:15:21:22:de:c3:7e:
                    8f:95:47:10:18:77:1d:32:57:cc:23:c3:b8:4c:16:
                    49:cb:b1:bc:6d:90:1e:84:c1:a9:1d:1e:62:0b:4a:
                    69:4a:7a:ac:78:0a:b4:19:f1:4e:d5:ed:53:4b:e9:
                    19:92:d4:70:22:7c:35:70:5e:4b:ea:71:ec:31:24:
                    83:8a:80:1e:69:f7:38:a7:9b:18:ec:5a:3f:e1:21:
                    ef:fb:a4:12:f5:b3:7f:b4:5a:d6:cb:f5:9a:0f:78:
                    8e:35:4d:c1:1c:b9:83:e5:24:68:ef:0b:58:09:4c:
                    23:31:23:97:4c:52:a8:f5:17:46:03:c5:2d:7f:18:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:1F:65:76:C4:E0:B1:20:91:5E:01:11:DD:10:0E:E1:D0:77:5C
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.197.0/24
                  203.20.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:55:63:80:79:28:9f:7c:5b:03:a3:b1:62:d3:7e:98:0f:
         ab:37:b4:98:3e:29:f9:16:85:c0:f9:b7:c1:ec:ee:1e:da:54:
         b2:15:5d:ab:4b:ac:db:34:a5:5b:71:80:08:3c:e8:dd:ac:62:
         b2:cc:f5:3c:0b:a6:50:5e:0c:47:b9:10:48:98:60:b1:c7:51:
         10:0d:d7:c4:06:0b:8c:a3:ea:48:1a:a2:48:44:64:67:9b:e5:
         12:81:5d:8b:75:47:71:c0:3c:3b:94:fe:60:c4:0a:c6:4a:b7:
         92:8a:ac:9b:64:f6:c6:52:74:d9:43:4b:1b:17:b6:8f:07:2b:
         de:7f:c8:5c:6a:6b:f6:93:32:6e:07:9f:76:c4:51:4f:82:95:
         cd:db:b4:af:67:1b:02:75:48:fe:e1:cd:8f:2d:47:ea:0f:78:
         95:02:dd:d4:b7:b6:f4:ba:82:3a:51:dc:c3:53:b2:d8:bb:31:
         0f:37:bf:50:76:74:f9:59:b6:fd:e6:57:83:97:c7:91:e7:e8:
         09:79:4d:d8:c6:47:0a:7b:39:f0:6d:90:1b:26:5a:5d:95:6d:
         b0:a7:a1:26:5d:8a:32:c4:e1:61:db:b5:1d:c7:0f:f2:9a:21:
         42:3e:fe:61:76:29:94:8e:81:62:60:b2:6b:4b:bd:5c:4a:83:
         87:db:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:55 2026 by rpki-client