Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa
File:                     CE84D1823BFF11EE80C18D54C4F9AE02.roa (raw, json)
Hash identifier:          rKsX6OkVUam3F97sdJG9wWqd7tiKNAX7p6e7cKD03FU=
Subject key identifier:   86:2D:7C:A3:4B:7B:45:9A:85:5E:2C:DC:6C:45:57:A5:41:AE:5D:9F
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       06E3
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 22:28:07 +0000
ROA not before:           Thu 04 Jun 2026 22:28:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     131646
IP address blocks:        103.183.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: Jun  4 22:28:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21fbf7-ff48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:f6:98:0a:3c:85:e4:39:48:e7:74:ee:55:
                    3d:c3:eb:10:ba:1b:28:55:2f:d6:cc:a4:8e:52:eb:
                    63:12:d6:70:0e:1a:19:00:fb:4f:bb:1a:5d:d1:96:
                    24:79:a0:29:53:fd:f9:1d:46:bd:55:b8:36:16:e6:
                    0d:e4:0d:97:c6:55:e3:34:d4:30:e8:b9:c4:fb:f5:
                    81:1e:37:e6:9d:cd:be:1a:75:dd:70:01:1b:d8:c5:
                    2b:a4:f5:f9:03:6b:87:a4:de:35:09:b0:66:54:c2:
                    1f:43:4d:fb:d3:6d:57:bf:52:b0:55:c0:ab:0c:42:
                    d9:c0:c4:e1:06:13:b1:e0:4e:67:3d:19:0a:48:9b:
                    4e:87:76:09:09:b4:15:95:b2:32:5e:44:ba:7a:e5:
                    c5:67:f2:7b:3a:a8:c6:af:d2:53:64:3c:6c:23:f4:
                    65:63:98:9f:8c:84:93:87:e4:53:04:b3:39:d9:87:
                    2e:f7:e2:32:d1:13:89:ea:77:4f:81:69:20:ac:e6:
                    9f:f4:29:e8:d2:10:dd:cc:aa:73:ef:33:66:70:f8:
                    76:30:dc:66:e1:c5:be:34:25:96:64:7a:ce:93:b4:
                    f0:ab:d3:54:ba:90:dc:dd:34:f3:eb:0a:02:58:57:
                    09:5c:99:16:23:63:47:37:eb:ce:20:63:99:48:24:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:7C:A3:4B:7B:45:9A:85:5E:2C:DC:6C:45:57:A5:41:AE:5D:9F
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:c5:45:e6:35:34:6a:2d:5e:fc:b9:d2:f1:6b:14:04:c4:8c:
         3a:04:ab:bf:7f:97:98:35:f9:a1:a1:67:80:f8:34:43:3f:d7:
         b1:71:83:0a:af:bf:bb:9d:8c:33:d7:ff:64:96:67:62:9d:c7:
         89:42:29:19:e7:9c:a8:25:a1:cd:64:6c:56:67:3a:23:5b:45:
         68:7b:00:c8:5f:36:e0:46:5b:9d:6f:96:00:cb:d5:46:be:b1:
         f0:48:20:8f:08:9c:67:be:83:3e:f1:53:04:b2:df:d4:a5:00:
         c8:a7:b8:5f:7d:05:24:94:0b:54:2f:24:f4:04:e2:68:af:84:
         7f:3d:fd:49:47:05:c0:18:f0:27:56:9c:93:b3:1f:3e:f9:e9:
         cb:de:38:5d:f9:71:e3:99:e7:10:76:26:de:ae:b5:61:f2:1c:
         a9:46:7a:c5:df:b5:8c:de:2a:7f:1c:76:f8:6d:f1:b5:7c:fd:
         b6:45:f9:e3:de:a7:cb:9a:35:d9:f3:26:4e:a9:33:06:7a:c2:
         8f:4a:8d:df:2c:c7:61:58:d7:70:10:aa:53:46:93:b1:18:94:
         4f:00:4b:62:88:0e:f8:f0:4d:dd:ea:b4:d1:39:65:0e:86:72:
         fa:5a:70:6a:93:4c:c7:65:a9:60:c4:11:75:bd:b8:d0:9e:a3:
         78:a5:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:55 2026 by rpki-client