Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5E73EF1028B411F0A1AE5A68C4F9AE02.roa
File:                     5E73EF1028B411F0A1AE5A68C4F9AE02.roa (raw, json)
Hash identifier:          BiwwOyQgxA4+/HewSQXwpc96m5gDAx6nGaPfygeCW6A=
Subject key identifier:   4E:89:73:EC:D8:FB:35:25:2C:42:23:1B:8A:AA:ED:7B:97:14:D5:3F
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0288
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5E73EF1028B411F0A1AE5A68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:05:05 +0000
ROA not before:           Mon 05 May 2025 02:08:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58682
IP address blocks:        103.137.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: May  5 02:08:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40f50-6b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:7a:ae:e2:ed:7f:86:d0:1f:d2:90:12:1a:
                    23:b0:fc:05:ea:71:63:fc:9c:16:7d:0b:b2:fd:44:
                    bf:fe:32:e0:f3:00:c1:b5:bd:61:8f:00:a6:00:a5:
                    6c:1e:53:ce:a7:60:be:c5:04:de:d7:ac:ac:62:8a:
                    a0:4b:2f:77:02:7c:47:3d:3e:c8:97:59:d8:10:40:
                    46:d2:03:78:c5:bf:7c:a1:6a:ae:ab:99:d1:28:6d:
                    4e:a1:97:03:9a:06:bc:6a:80:c3:4b:8c:3c:cc:96:
                    9a:c2:61:8a:de:75:22:44:60:94:14:f9:24:9e:8a:
                    be:f3:4e:13:ea:97:ef:a9:15:44:31:46:65:6e:d5:
                    ff:9f:8b:97:33:9f:74:45:a6:2e:6c:0d:83:73:c1:
                    cb:87:52:74:ef:45:fd:aa:8f:32:49:5b:71:51:9d:
                    a4:3c:d4:e9:0b:2e:3f:24:2b:36:3c:76:a8:d7:31:
                    3e:c2:94:0d:52:9a:3b:ad:4e:9b:41:5d:a6:1a:e6:
                    f5:a5:c5:b7:87:df:b2:a7:04:40:06:06:fb:35:fd:
                    4d:76:a2:b8:6b:7a:34:6b:a3:84:a6:14:35:41:88:
                    60:9d:b4:47:f3:31:6e:13:0a:82:a5:c3:44:39:e2:
                    6b:85:8f:b9:70:76:cf:eb:55:06:77:34:10:a7:f4:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:73:EC:D8:FB:35:25:2C:42:23:1B:8A:AA:ED:7B:97:14:D5:3F
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5E73EF1028B411F0A1AE5A68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:c5:1f:e6:2b:6b:e1:ad:12:fc:b1:c5:38:ae:fa:2f:05:
         01:c1:0b:b8:44:bc:3c:3e:27:ab:7e:c4:2f:70:4f:b1:82:05:
         36:13:94:04:d9:87:e3:2d:48:a7:55:94:35:3a:fb:82:33:cb:
         42:d2:38:47:11:1c:0c:92:79:28:dd:07:94:91:20:2e:3f:d3:
         75:a4:53:df:b2:84:ac:9f:85:9b:54:a3:b5:e1:e4:f1:ea:cd:
         1a:bf:08:0a:9b:44:78:ed:06:96:ef:d2:a0:65:7a:2b:f2:10:
         77:fc:33:ca:94:40:a3:bc:f6:8b:59:7b:61:93:bd:42:91:fa:
         85:c7:20:92:40:e9:6d:a0:a8:0f:b3:1c:2d:72:87:3b:3a:8a:
         ef:f3:07:db:8e:db:19:bb:a0:26:c4:7a:42:c3:4e:2d:b5:ae:
         eb:ee:7e:d0:ae:95:31:a3:0c:37:d0:e6:36:10:62:a1:4c:20:
         2a:99:6a:8e:44:22:e0:04:15:3e:b8:b9:fc:03:bc:f8:bf:42:
         95:b2:fe:4f:c1:a2:98:0f:5a:43:ec:d7:e5:ca:08:f5:00:53:
         50:df:55:ea:72:8f:99:d6:a4:02:d9:a8:a0:f8:fb:23:cf:e7:
         2e:f0:80:3e:8b:d0:36:b7:79:98:d5:44:d0:da:38:37:7a:87:
         67:62:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:29 2026 by rpki-client