Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
File:                     D056896E592A11E889035A70C4F9AE02.roa (raw, json)
Hash identifier:          wMrnBc+Fy9ncOYECFmCc29mBuZDB9OsutBTOfjxW2mY=
Subject key identifier:   23:C8:D0:31:E0:C0:6D:F7:59:9D:5B:18:87:81:E6:01:92:C7:44:09
Certificate issuer:       /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial:       1590
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
Signing time:             Fri 22 May 2026 17:20:51 +0000
ROA not before:           Fri 22 May 2026 17:20:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137567
IP address blocks:        103.113.184.0/22 maxlen: 24
                          2402:c040::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
                          rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5520 (0x1590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Validity
            Not Before: May 22 17:20:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a109072-5238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:37:ac:c4:9c:af:86:6e:d0:4a:43:99:c4:
                    70:63:64:59:7b:54:fb:a3:f7:a8:43:6e:eb:a6:b8:
                    a1:74:da:c4:2a:d5:4b:b8:71:10:e3:bc:50:1d:1b:
                    a5:f4:df:e7:5f:65:f8:d1:1d:dc:8e:e9:7a:aa:a8:
                    36:8b:5b:2b:f7:c8:14:d6:8d:e3:f8:05:34:c9:93:
                    8c:dc:55:3c:35:9f:e2:2a:d5:e7:cc:55:ab:14:39:
                    21:8a:f3:d4:8c:08:a4:ae:e4:89:71:5b:2f:c6:83:
                    b5:84:a9:51:de:94:a7:54:63:5b:b1:dd:bf:e9:2c:
                    e8:34:e8:63:c2:86:8f:96:6d:fc:f2:60:c9:99:7e:
                    a7:27:cb:14:d9:a9:eb:f3:bc:38:c8:06:5a:37:f6:
                    a0:e8:f8:c8:23:75:46:30:6e:ff:a8:72:95:5c:10:
                    2d:b5:bd:95:3b:94:a4:08:d4:7f:11:e1:38:e4:eb:
                    36:d8:41:fa:c6:86:bd:b7:c4:76:46:e7:bc:c3:76:
                    17:24:15:3f:c4:f7:48:08:67:37:cb:75:04:cb:f4:
                    f8:96:59:e1:28:fd:12:ec:d8:ac:a8:ad:0d:a5:31:
                    65:9a:dc:22:59:14:84:a0:46:5e:7b:8d:9b:9a:ba:
                    2b:20:bf:33:27:88:41:ce:e6:8f:bf:1e:82:8f:02:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:D0:31:E0:C0:6D:F7:59:9D:5B:18:87:81:E6:01:92:C7:44:09
            X509v3 Authority Key Identifier:
                keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.184.0/22
                IPv6:
                  2402:c040::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:07:57:ad:17:e0:a5:9a:62:25:31:1a:86:02:32:72:72:35:
         a2:9c:db:b3:de:5b:5d:33:fd:2c:ff:5d:2e:16:7c:18:07:57:
         52:7a:a6:9f:ee:cd:c6:b2:36:ac:54:e3:36:4f:e3:d8:e5:17:
         47:e3:4b:5c:84:e9:e9:cb:6e:fa:27:35:cf:1c:2d:7e:2d:19:
         a6:03:c4:00:40:7b:ba:c5:9e:f4:17:9f:9a:ed:e6:48:25:84:
         4f:18:a3:94:9c:86:af:de:0f:ed:b1:61:3f:b3:e3:14:63:8d:
         fb:3a:eb:ba:67:d3:85:0b:63:ce:fd:d1:dd:23:9d:6c:1c:06:
         3c:f5:12:03:56:ef:97:c7:74:9d:bb:38:f1:09:2d:06:7a:cf:
         0c:7b:b1:ef:00:5c:fc:5a:00:ba:94:c3:c6:c7:36:93:02:4f:
         0a:28:64:55:9c:09:6a:5d:23:b0:02:1e:8b:a8:73:d6:5c:7f:
         95:21:e1:e1:4e:39:74:f8:ac:fa:54:f0:0d:1f:88:17:94:9a:
         b4:b4:5a:ff:f4:ce:24:e1:1d:1d:07:93:ee:03:e6:a3:16:c7:
         9f:b9:81:22:e3:e3:0b:72:c8:14:17:f3:55:83:17:f6:63:d4:
         46:f7:7d:fa:fb:e5:03:53:2a:d3:74:73:a7:80:78:c7:2d:1b:
         36:b5:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:01 2026 by rpki-client