Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/57883938B4E411F0AEF0381FC4F9AE02.roa
File:                     57883938B4E411F0AEF0381FC4F9AE02.roa (raw, json)
Hash identifier:          9onO7ekhgdzofU803Czih23svkSna7ihyULHHXLuzu4=
Subject key identifier:   E7:24:0B:94:3A:08:AE:D2:A0:3A:BF:36:05:25:3A:38:D8:5F:E8:99
Certificate issuer:       /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial:       03DD
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/57883938B4E411F0AEF0381FC4F9AE02.roa
Signing time:             Sun 07 Jun 2026 01:29:56 +0000
ROA not before:           Sun 07 Jun 2026 01:29:56 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137532
IP address blocks:        103.186.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
                          rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
        Validity
            Not Before: Jun  7 01:29:56 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a24c994-d16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:25:59:d1:6c:00:d1:5e:01:0b:c8:51:eb:
                    da:2f:6b:9a:7c:3a:26:b7:a9:3b:ec:42:ad:3c:51:
                    fc:df:5d:e8:22:81:ce:ad:c1:03:b7:a8:ba:a0:eb:
                    6d:42:ca:2c:d5:c5:0f:7e:c3:8d:a8:b3:bb:59:ff:
                    a4:e7:36:4e:d9:2f:89:72:57:34:b0:35:10:7e:b1:
                    fd:ce:55:28:6e:ef:95:38:ea:a1:81:69:32:a6:34:
                    17:90:87:89:e6:51:84:66:2e:7a:91:d4:b0:a1:6b:
                    42:29:3f:41:4c:9c:3c:cb:0f:a5:bc:5f:ac:11:61:
                    0a:a3:44:65:39:31:ca:4c:c2:36:6c:0f:4d:e6:4a:
                    e4:a3:9d:f1:f4:09:79:1e:74:da:7c:bd:28:e8:c7:
                    f9:8d:ae:58:be:e8:ea:a7:c0:ef:96:b5:06:a8:8a:
                    b5:66:e9:a0:60:92:9c:7a:ca:34:a3:0d:eb:85:03:
                    19:c5:a5:c6:2f:c6:2a:8e:9a:ab:db:bc:47:8f:0e:
                    1c:cd:56:75:c4:e2:51:ab:6b:24:7b:d1:df:22:b9:
                    71:61:6c:43:c6:c4:0c:51:d5:02:e6:a5:b2:79:96:
                    e4:1e:36:2d:ca:24:6a:69:c3:37:d4:46:9c:f9:c0:
                    e0:ff:b2:1e:76:8f:c6:5d:a9:84:9c:c8:5e:6d:68:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:0B:94:3A:08:AE:D2:A0:3A:BF:36:05:25:3A:38:D8:5F:E8:99
            X509v3 Authority Key Identifier:
                keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/57883938B4E411F0AEF0381FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:1b:d2:56:6a:ca:6f:34:63:39:46:c9:2b:74:2d:7a:1b:
         1e:f6:e7:15:4e:1c:b4:ef:c8:0c:69:3c:dd:1b:ca:6e:d4:42:
         0d:33:1a:8b:27:71:81:40:bb:4c:4c:58:17:b3:5c:03:8e:aa:
         43:05:d3:76:c6:1b:81:6b:e0:a0:7b:bd:b3:d4:31:8a:eb:52:
         cd:e1:ab:3e:f8:ca:3a:a3:ea:bd:bf:e4:48:15:91:ad:d3:40:
         a9:40:11:b9:77:9d:4f:9f:83:d6:9a:4e:5f:16:72:4a:c9:eb:
         b8:6a:49:b9:b6:e5:60:58:75:e5:4e:cd:c5:ac:30:e1:35:13:
         df:fc:36:ab:66:5d:48:42:2c:7d:a8:0f:33:c6:ad:23:5d:c2:
         ba:1f:37:ec:b4:b3:61:f4:a5:4c:43:11:45:c1:c9:d0:b6:65:
         e2:52:c2:0d:b0:fb:39:6e:e7:39:07:3a:1c:0d:56:9b:d4:ab:
         25:f7:b2:fc:26:38:01:f3:fc:a8:da:fd:c0:94:8e:11:a8:30:
         10:90:00:54:2a:72:23:21:11:f2:fe:dd:3d:ab:3d:c9:44:2b:
         c1:6e:84:98:1b:af:e7:8f:a0:00:80:95:41:ef:b7:2f:e0:d4:
         b5:d2:12:a7:8b:61:f1:e5:e1:12:61:d9:0b:10:53:e7:c5:e4:
         23:d7:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:23 2026 by rpki-client