Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/F5389BBA875611F1BE97359E4011F970.roa
File:                     F5389BBA875611F1BE97359E4011F970.roa (raw, json)
Hash identifier:          3YAkWAF0slgBP0TX/VppTXHovXlTM0k7P0rRBjyTtzo=
Subject key identifier:   69:AF:72:F5:A2:EE:8F:37:85:34:D0:6E:15:AF:E1:B8:CF:13:8B:27
Certificate issuer:       /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial:       3561
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/F5389BBA875611F1BE97359E4011F970.roa
Signing time:             Fri 24 Jul 2026 11:58:18 +0000
ROA not before:           Fri 24 Jul 2026 11:58:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55879
IP address blocks:        49.143.252.0/22 maxlen: 22
                          49.143.252.0/24 maxlen: 24
                          49.143.253.0/24 maxlen: 24
                          49.143.254.0/24 maxlen: 24
                          49.143.255.0/24 maxlen: 24
                          103.5.184.0/22 maxlen: 22
                          103.5.184.0/24 maxlen: 24
                          103.5.185.0/24 maxlen: 24
                          103.5.186.0/24 maxlen: 24
                          103.5.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
                          rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Validity
            Not Before: Jul 24 11:58:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a635359-c132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:82:6b:9a:74:fb:71:16:79:eb:1a:bd:fc:
                    66:7f:af:81:4e:6d:95:8e:17:92:86:d9:f4:e9:a3:
                    c4:ab:88:67:99:d1:c8:21:cb:0b:cf:62:c0:5f:79:
                    d3:5b:3b:21:57:96:82:46:8a:a1:51:18:5c:45:60:
                    85:ea:6c:f9:14:f7:2b:cc:a7:dd:a8:10:5c:f1:9c:
                    c3:37:ad:b2:78:7b:aa:bf:b7:99:10:d0:e6:c0:fc:
                    3f:e1:af:3a:2a:74:94:60:4e:37:7d:f9:de:72:5f:
                    f2:3a:a6:15:2b:e1:e7:31:cf:4e:ea:4a:ae:1e:0d:
                    52:4f:8c:34:8d:e6:40:9f:f9:c7:87:2f:d1:b8:20:
                    2d:04:b4:a9:48:1e:3e:ab:ed:d5:19:b8:18:61:30:
                    80:00:66:a5:6a:f3:88:b1:31:80:ff:5a:80:e5:01:
                    7a:f3:31:05:a8:b6:06:65:87:43:7a:0b:65:42:af:
                    66:2d:87:33:be:a1:f2:d9:73:99:5e:44:e9:1e:c1:
                    1d:be:1e:04:bd:e5:8f:61:62:f2:a1:19:02:77:d2:
                    fa:9d:57:12:2a:a3:bb:9a:08:83:43:e6:c1:31:ed:
                    76:0b:e4:2c:10:38:bb:07:fb:0f:06:56:2c:4a:48:
                    a4:4f:e3:75:c5:3a:bb:0f:48:84:0c:13:5d:0d:48:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:72:F5:A2:EE:8F:37:85:34:D0:6E:15:AF:E1:B8:CF:13:8B:27
            X509v3 Authority Key Identifier:
                keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/F5389BBA875611F1BE97359E4011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.143.252.0/22
                  103.5.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:e1:ed:7a:dc:ef:5d:69:8f:a5:09:60:50:a9:1e:14:c2:
         ae:f4:04:ed:0b:84:3e:60:18:f3:23:05:a1:52:d5:cd:89:8d:
         cb:3a:2f:48:d3:75:bf:de:d6:3d:25:f4:30:30:47:1b:a2:94:
         e1:f3:65:cf:5d:7b:2d:1e:c3:c8:f7:65:f6:3c:bc:c3:bf:88:
         25:8d:ac:bd:d9:f7:4a:50:ba:ef:b9:af:77:e5:50:a4:07:5e:
         c4:79:8c:f8:73:b1:2b:58:01:dc:a6:d0:63:17:57:cd:9e:8a:
         6f:60:e8:f9:d6:69:75:47:14:5c:e7:6f:cb:58:e7:44:0f:5f:
         27:5e:1d:1d:07:50:c5:1b:aa:a2:08:e6:78:96:bb:ba:3e:9c:
         ba:91:f7:20:27:a2:9e:e2:b6:74:a3:2c:dc:b3:99:aa:78:82:
         83:bf:b0:2c:35:78:1d:a3:15:b5:20:45:20:ba:28:3e:a0:3e:
         e8:d7:ed:81:5b:01:df:32:88:c0:88:1e:77:03:54:f1:58:49:
         99:88:ae:5c:05:55:e5:f6:47:34:01:38:b7:bb:6b:d8:1d:2f:
         b4:6b:2d:6d:86:02:06:1f:80:f1:98:f4:4d:c3:eb:06:7b:80:
         bd:78:d4:43:9f:dd:a4:9b:82:5b:a1:84:d3:49:41:5b:cd:f3:
         57:c5:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:39 2026 by rpki-client