Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa
File:                     A213FF8E535211F184FC032898833773.roa (raw, json)
Hash identifier:          e77/1jHRbJq6yZ1MwuR8SDyAYoYRytcNGyFdLOJ6VnY=
Subject key identifier:   3C:87:62:D1:E1:01:5F:D2:0C:CF:78:53:10:A7:FB:15:44:3C:43:20
Certificate issuer:       /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial:       04
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa
Signing time:             Tue 19 May 2026 07:20:22 +0000
ROA not before:           Tue 19 May 2026 07:20:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140725
IP address blocks:        103.152.53.0/24 maxlen: 24
                          2001:df3:f880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
                          rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
        Validity
            Not Before: May 19 07:20:22 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a0c0f36-da62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:d5:e8:e7:08:9b:dd:0d:78:8c:b6:11:7c:
                    da:e5:9c:4a:6d:05:8e:f0:44:d9:85:7f:be:92:e7:
                    77:1f:7c:e2:39:08:26:67:0d:eb:09:3e:76:8d:35:
                    29:ba:66:40:d4:ff:87:b0:92:09:4e:30:9a:e4:99:
                    50:5c:20:52:ab:3a:3b:9a:0b:df:65:5c:8f:2f:33:
                    b2:7f:68:d6:f7:83:04:af:f3:5a:08:a8:29:2f:44:
                    4c:2e:5e:21:36:8c:54:dc:ff:e4:20:34:f8:a8:c6:
                    13:7f:55:c6:cc:92:72:0f:ff:ac:e6:3e:5c:d5:e3:
                    10:72:fc:2f:73:51:64:1e:ae:36:51:91:08:29:1b:
                    5c:82:07:35:57:b8:69:67:68:5a:6f:1e:aa:01:fa:
                    ad:91:98:5c:23:7a:0c:ed:51:97:91:71:e2:2e:a3:
                    f3:a1:15:42:56:04:7f:35:7e:df:43:4f:5e:7a:4f:
                    b6:63:94:08:ab:0b:01:2a:e5:2e:12:ca:ea:97:3e:
                    46:9a:fd:0c:a9:39:44:2b:7f:90:ff:1c:dc:2e:4e:
                    70:67:3f:20:20:39:a3:08:35:42:59:47:6d:f9:e7:
                    ae:34:9b:4a:38:bf:61:fe:95:c1:ce:0e:f7:87:24:
                    e9:99:ff:84:93:73:e6:2e:06:9f:da:86:cc:36:ba:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:87:62:D1:E1:01:5F:D2:0C:CF:78:53:10:A7:FB:15:44:3C:43:20
            X509v3 Authority Key Identifier:
                keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.53.0/24
                IPv6:
                  2001:df3:f880::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:db:a7:2f:8c:56:b1:f4:a2:96:b6:c1:43:e8:46:e2:1c:45:
         ed:98:c8:a4:9b:7b:e0:ec:8b:b6:20:b1:73:29:db:f7:6a:c4:
         c4:67:09:a2:8f:09:6d:6e:1d:ff:8f:d8:3d:dd:7f:c7:f5:16:
         a1:23:8f:e1:c8:5a:38:96:a2:97:ad:27:7d:68:ae:44:1b:66:
         7e:68:f8:ea:8e:48:df:14:d9:81:53:06:1f:42:db:b5:43:52:
         d0:c3:5d:4b:ec:d6:e3:d2:0c:9b:ea:cf:f4:17:41:42:1f:da:
         f2:24:14:1a:62:8f:4a:d8:b5:65:23:ec:5d:3c:ad:bc:ad:67:
         6c:53:1d:fb:80:c5:bf:99:a9:c5:28:5b:2a:91:58:8e:3a:de:
         c7:2a:89:86:11:c3:e7:32:c4:20:05:fc:e2:24:ff:ed:be:fc:
         22:64:60:54:19:ab:fe:4a:85:5f:d3:a2:d5:a0:1a:f2:eb:03:
         11:a2:57:1c:47:c4:43:ab:9a:5e:fb:30:41:e9:9d:00:a2:7d:
         d1:cb:2c:9b:84:9f:9e:a8:2d:29:95:ef:62:07:f4:fb:f0:4f:
         a2:15:26:41:58:c8:8f:9c:b0:11:90:c2:00:ac:c9:ca:81:78:
         3a:30:e8:e1:5d:4b:e5:d5:e0:85:3f:59:07:5b:d2:1d:07:28:
         e1:1b:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:24 2026 by rpki-client