Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa
File:                     55FE0314581811F09A0AB17CC4F9AE02.roa (raw, json)
Hash identifier:          2DM90SAi4J/LxbHahYaK7kD9pPejPgmGercx/gMiV3s=
Subject key identifier:   D8:13:8F:BC:7D:BF:4F:E4:70:9D:E0:96:2A:50:22:71:5A:0B:F2:39
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       019F
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa
Signing time:             Wed 27 May 2026 05:40:10 +0000
ROA not before:           Wed 27 May 2026 05:40:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152723
IP address blocks:        103.54.108.0/24 maxlen: 24
                          103.54.109.0/24 maxlen: 24
                          2401:d160::/32 maxlen: 32
                          2401:d160:1000::/36 maxlen: 36
                          2401:d160:2000::/36 maxlen: 36
                          2401:d160:a000::/36 maxlen: 36
                          2401:d160:b000::/36 maxlen: 36
                          2401:d160:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: May 27 05:40:10 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1683ba-6d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:a4:79:64:a9:8d:63:d1:c3:c3:eb:b7:27:
                    8a:2e:45:d8:da:07:2d:71:b4:db:4e:7a:68:11:b8:
                    5c:32:30:2a:1e:40:61:e5:d7:4c:1f:2d:db:a4:7a:
                    a3:fc:52:59:51:cf:c1:66:b9:c4:54:b4:79:a8:5a:
                    11:e7:47:14:4a:98:89:82:17:61:d9:ba:0c:22:fa:
                    b6:36:e7:33:ea:06:3a:96:a9:fc:4a:54:89:e6:ae:
                    1a:93:89:fd:33:bf:33:98:b7:c6:c5:a9:35:6a:53:
                    eb:c3:d2:67:90:4e:bd:c1:6d:61:68:2c:cc:47:fc:
                    b7:fb:77:6c:55:03:a4:a7:59:72:2b:9f:25:88:7c:
                    0e:7f:db:76:18:69:f7:81:b7:01:ab:ff:69:54:f8:
                    41:06:95:c7:99:e1:61:69:9f:f5:9b:9c:f7:27:ee:
                    8e:3c:ae:d6:80:47:69:49:d4:9b:16:db:82:cf:ad:
                    cf:8f:75:4d:a0:ae:3b:fb:28:5e:16:3f:56:9b:74:
                    86:6e:c7:d5:3e:83:39:bd:f7:47:ed:c5:6e:4d:02:
                    17:ef:b3:ed:84:e9:1a:18:05:3f:c3:01:bc:57:3c:
                    4f:02:56:1a:d3:72:20:7c:5c:49:ea:01:2c:65:4d:
                    f4:0e:76:5d:b7:6a:d3:3b:88:ea:e1:db:b6:6e:6b:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:13:8F:BC:7D:BF:4F:E4:70:9D:E0:96:2A:50:22:71:5A:0B:F2:39
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.108.0/23
                IPv6:
                  2401:d160::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:64:91:47:1c:e5:cb:48:ad:f6:ec:ae:c4:59:3b:ad:e6:
         6f:57:06:05:09:e7:9f:da:c2:12:02:79:41:9c:ff:65:fe:ff:
         e9:fb:6d:83:f8:c3:d9:68:5d:97:04:e0:a7:9b:28:47:a5:e9:
         67:2e:c3:70:d0:8d:fd:0e:b9:3b:a3:25:6c:91:d2:a4:40:89:
         fd:ce:5b:66:90:31:99:00:3f:05:30:4e:1c:50:7c:86:4f:02:
         7f:65:47:4c:62:18:35:44:56:9a:63:72:ec:dc:09:e7:36:0d:
         fc:a5:da:7a:6c:67:3d:49:f7:e0:2f:58:5a:e4:6f:00:00:6e:
         51:f0:a3:98:3f:25:db:07:c6:f9:79:d0:1a:d7:49:fa:ed:69:
         45:51:db:c9:a2:a4:d8:e1:36:88:8b:64:0e:19:cf:f1:68:11:
         8d:8e:d8:7d:b2:3a:79:c6:7c:34:df:05:b5:29:66:a7:fa:ad:
         a9:ee:62:7b:0f:b1:59:2c:28:29:c7:f7:d7:30:2e:19:ea:66:
         e5:05:00:40:46:30:d6:8c:b1:f2:3f:d5:3f:15:44:34:21:0b:
         18:16:88:4f:f8:41:f0:58:d2:8b:de:47:0e:df:ee:03:e6:16:
         17:26:b4:a2:f8:3a:e3:b3:a5:64:2d:56:44:e9:aa:81:73:e1:
         06:2b:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:01 2026 by rpki-client