Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/5A1F332618A211EEB9517111C4F9AE02.roa
File:                     5A1F332618A211EEB9517111C4F9AE02.roa (raw, json)
Hash identifier:          ZHpMs5xnHyrmGG6brYvpkf6EbiaHiV+pUJ+wJWuD338=
Subject key identifier:   0C:0E:3D:D8:80:56:9D:6A:E6:2A:C1:B6:B9:66:56:EC:0A:C4:67:69
Certificate issuer:       /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial:       0259
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/5A1F332618A211EEB9517111C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:38 +0000
ROA not before:           Fri 05 Jun 2026 02:34:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63526
IP address blocks:        103.122.142.0/23 maxlen: 23
                          103.122.142.0/24 maxlen: 24
                          103.122.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
                          rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
        Validity
            Not Before: Jun  5 02:34:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a2235be-67e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:5f:b0:49:fc:e9:4b:f0:1d:6a:ef:c3:95:
                    bc:83:9c:9f:2d:dc:b5:05:9a:18:15:49:4c:7c:8e:
                    95:19:26:fc:c4:b2:87:61:a4:09:9a:77:66:22:fc:
                    dc:98:43:ab:bd:b0:c9:7b:65:07:a1:5d:9e:fb:21:
                    c8:bd:09:da:5a:a7:9b:27:86:17:77:9f:4c:f7:37:
                    84:94:d7:d1:61:c1:64:c3:b9:2a:49:e4:ac:46:28:
                    c7:76:50:0e:d6:41:1e:cc:a1:7d:ad:40:99:6a:57:
                    e2:23:69:02:e5:43:12:e5:03:28:5f:e5:d7:93:08:
                    e1:a4:cc:d0:0f:97:d8:bc:22:00:ae:43:0a:5c:59:
                    e9:60:df:62:16:fe:6b:ab:c2:d6:41:f3:28:47:f6:
                    cb:6d:2d:7d:0c:23:f8:11:ae:53:99:68:37:2b:91:
                    2c:6e:dc:8f:62:62:0f:ff:65:18:9b:17:62:43:17:
                    46:f3:ef:76:d6:9f:e4:7d:83:19:86:f0:ad:09:00:
                    7d:ae:6c:7e:3b:4a:4c:d8:50:dc:26:c6:57:f7:3b:
                    86:39:66:67:15:08:5f:6b:4b:50:b8:87:8b:2b:2d:
                    b8:67:2a:a0:b8:23:a2:fa:5b:fd:61:a8:5d:1b:36:
                    46:fb:47:e5:44:56:09:32:89:91:fb:93:2f:ef:0d:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:3D:D8:80:56:9D:6A:E6:2A:C1:B6:B9:66:56:EC:0A:C4:67:69
            X509v3 Authority Key Identifier:
                keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/5A1F332618A211EEB9517111C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:70:57:2b:90:61:0a:dd:3c:25:77:ab:6d:b3:65:6c:d3:
         e5:22:f3:c5:f0:7a:ec:7a:ae:28:8b:e2:b5:4d:d9:40:62:44:
         9f:4d:d9:a7:da:54:0b:f8:b2:1d:37:da:e5:63:56:ca:a1:f7:
         59:e8:32:5d:40:13:73:c2:4b:4b:4f:ca:a8:3e:b1:b6:24:43:
         8b:58:73:86:61:90:7e:6e:8a:0b:e2:cb:3a:f8:4e:78:1d:a6:
         2c:78:18:e7:7d:ab:dc:f4:8b:93:64:bb:e7:b3:a7:24:7d:07:
         b6:68:7c:24:67:ac:1c:ca:ce:27:a4:45:b9:93:0a:ff:15:fe:
         04:ff:2b:e9:7d:5d:7f:7c:d8:be:6d:c6:ab:3e:d9:6c:2e:b9:
         62:dc:56:e3:34:7f:28:4e:af:ff:e1:f1:f6:dd:6b:80:a0:d8:
         15:01:79:4d:c3:f1:1a:ef:ac:26:60:e4:c1:43:b0:bf:9c:73:
         34:7c:41:5b:25:94:e6:a8:d9:5e:13:04:c9:d6:60:9d:e2:5b:
         f0:bb:7b:cf:15:f9:0e:da:04:8a:8f:a1:96:5c:03:a3:e1:ce:
         3a:7c:60:7b:f4:63:2f:fa:0f:9a:d8:a2:62:61:54:5e:aa:73:
         c3:83:7c:d5:a9:c6:87:fb:5c:3b:93:97:20:47:14:ff:66:be:
         91:3a:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:57:27 2026 by rpki-client