Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa
File:                     5EDCA5AC61BE11F1BC6CC5449047A888.roa (raw, json)
Hash identifier:          RfyGAa3qye+BMhRuql0Q61Dpnspsmt7EFQ2dI7Ec2g0=
Subject key identifier:   88:79:A9:73:39:F3:AB:5B:78:7F:38:BF:2B:D5:30:79:60:B6:C8:80
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       040E
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa
Signing time:             Sat 06 Jun 2026 15:42:49 +0000
ROA not before:           Sat 06 Jun 2026 15:42:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133551
IP address blocks:        103.209.76.0/24 maxlen: 24
                          103.209.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Jun  6 15:42:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a243ff9-70df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:2e:08:c0:eb:19:71:ea:e1:38:e1:38:51:
                    6e:30:de:f1:88:63:f8:2f:40:f9:60:3b:fe:09:20:
                    83:3c:97:4a:bf:0e:83:b2:6a:02:a2:bf:8e:6d:37:
                    b1:48:cb:bb:27:e6:bb:07:fa:0c:73:9e:db:62:da:
                    61:b5:7e:2e:16:66:9b:2d:f4:2b:55:bb:91:7d:66:
                    38:d1:c9:75:bb:c3:b3:66:43:65:76:08:c7:c2:b2:
                    a0:7f:a0:c0:ab:de:2e:82:68:15:46:5f:46:18:95:
                    35:99:d5:de:e9:60:ca:4b:ea:22:83:72:10:10:4c:
                    86:4a:9c:50:14:54:12:b5:17:3b:89:6a:2a:36:77:
                    26:bf:0b:e9:67:5a:e6:f9:09:05:ee:b2:86:92:e2:
                    76:43:80:15:6e:e4:bb:2a:59:c0:12:67:cd:88:79:
                    c3:ef:1e:c5:33:c7:b4:06:29:3c:92:f1:7a:3f:d3:
                    8d:77:f2:69:7d:90:ae:cf:10:69:5c:37:80:d3:ba:
                    95:05:63:e6:93:67:5d:d7:44:b2:7c:63:ea:93:af:
                    bf:57:63:87:aa:7b:b6:59:39:a9:ae:fe:83:9c:c2:
                    2b:aa:fe:6d:08:e2:f6:cb:68:76:ec:12:39:17:fc:
                    c2:28:6e:fe:d0:29:8b:ce:84:45:03:b3:33:22:64:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:A9:73:39:F3:AB:5B:78:7F:38:BF:2B:D5:30:79:60:B6:C8:80
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.76.0/24
                  103.209.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:40:ab:55:68:da:51:26:73:c3:cd:e1:1e:7a:ea:db:9c:2a:
         c4:4f:78:88:bf:14:c5:a3:8b:83:cd:d1:b3:f4:ad:50:ca:15:
         a7:b4:5a:2b:89:56:c9:d3:db:95:f6:8d:6a:36:59:b0:be:dc:
         7e:72:4f:06:e7:73:bd:fa:91:7f:78:21:9e:bc:ef:4c:2e:cf:
         4e:77:8e:41:cd:8a:5b:1d:c2:7a:ef:82:4f:86:c1:18:34:39:
         5e:a9:52:72:24:84:48:ed:8f:a9:01:fa:6c:65:c2:ef:0a:dc:
         85:d0:fc:a2:fb:7b:d0:5f:52:b5:ac:a3:99:e0:f3:5d:52:cb:
         bb:33:a6:08:34:f9:64:24:a3:e5:c0:38:34:5d:10:8f:11:71:
         1d:9a:14:9c:f4:71:f1:fb:d7:bb:0e:de:14:d9:5b:ff:20:97:
         5b:48:e8:3e:e9:97:8e:e8:43:f8:60:aa:d1:8c:9a:82:2e:2f:
         92:7d:b7:ad:a4:a3:76:99:b2:36:0d:ba:1e:34:65:62:f5:82:
         f4:8a:70:56:3d:12:29:d8:43:e3:e1:f5:95:86:5f:ed:8b:24:
         25:ae:a2:18:89:29:77:31:83:5a:b3:8f:9c:6c:84:4f:dd:7d:
         40:a5:07:aa:4d:07:6f:90:6a:0e:11:2f:81:71:af:2b:4e:25:
         f2:78:27:cd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz
NDQ2OEM3QjkwHhcNMjYwNjA2MTU0MjQ5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI0M2ZmOS03MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3O4uCMDrGXHq4TjhOFFuMN7xiGP4L0D5YDv+CSCDPJdKvw6DsmoCor+ObTex
SMu7J+a7B/oMc57bYtphtX4uFmabLfQrVbuRfWY40cl1u8OzZkNldgjHwrKgf6DA
q94ugmgVRl9GGJU1mdXe6WDKS+oig3IQEEyGSpxQFFQStRc7iWoqNncmvwvpZ1rm
+QkF7rKGkuJ2Q4AVbuS7KlnAEmfNiHnD7x7FM8e0Bik8kvF6P9ONd/JpfZCuzxBp
XDeA07qVBWPmk2dd10SyfGPqk6+/V2OHqnu2WTmprv6DnMIrqv5tCOL2y2h27BI5
F/zCKG7+0CmLzoRFA7MzImTnHwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIh5qXM5
86tbeH84vyvVMHlgtsiAMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB
RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvNUVEQ0E1QUM2
MUJFMTFGMUJDNkNDNTQ0OTA0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ9FMAwQAZ9FPMA0GCSqGSIb3DQEBCwUAA4IBAQBiQKtVaNpRJnPD
zeEeeurbnCrET3iIvxTFo4uDzdGz9K1QyhWntForiVbJ09uV9o1qNlmwvtx+ck8G
53O9+pF/eCGevO9MLs9Od45BzYpbHcJ674JPhsEYNDleqVJyJIRI7Y+pAfpsZcLv
CtyF0Pyi+3vQX1K1rKOZ4PNdUsu7M6YINPlkJKPlwDg0XRCPEXEdmhSc9HHx+9e7
Dt4U2Vv/IJdbSOg+6ZeO6EP4YKrRjJqCLi+SfbetpKN2mbI2DboeNGVi9YL0inBW
PRIp2EPj4fWVhl/tiyQlrqIYiSl3MYNas4+cbIRP3X1ApQeqTQdvkGoOES+Bca8r
TiXyeCfN
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:24 2026 by rpki-client