Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/E5196DA6335811F1BC79FB1BCA833773.roa
File:                     E5196DA6335811F1BC79FB1BCA833773.roa (raw, json)
Hash identifier:          vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=
Subject key identifier:   67:E8:28:0B:97:D5:26:7D:D8:D7:55:D7:A1:35:09:CC:4A:82:7C:28
Certificate issuer:       /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial:       01DE
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/E5196DA6335811F1BC79FB1BCA833773.roa
Signing time:             Wed 08 Apr 2026 14:40:32 +0000
ROA not before:           Wed 08 Apr 2026 14:40:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133599
IP address blocks:        103.252.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
                          rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
        Validity
            Not Before: Apr  8 14:40:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69d668e0-7252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:03:20:d7:6a:7a:70:76:3c:82:c7:2f:ca:
                    f4:bc:fc:a0:e7:47:6e:96:43:7d:d7:fb:db:23:76:
                    8a:c5:cf:3a:8a:71:36:d8:9b:e5:4f:75:c4:48:fa:
                    e4:64:d4:e4:ac:5d:7a:d1:fb:f7:8e:e1:19:23:40:
                    af:ff:f0:18:06:cd:50:39:b1:b5:f7:4c:47:23:74:
                    19:65:7c:2e:f3:4f:28:65:e3:c7:34:6c:49:78:f8:
                    75:fe:e0:64:5c:cc:17:0d:0f:ca:43:1b:dd:b1:f7:
                    11:9a:50:0b:48:85:12:c7:3f:2e:66:8a:ac:73:3f:
                    08:87:68:63:b4:87:95:ec:94:55:8c:c0:b1:d1:d4:
                    c7:3a:b7:d3:b6:85:a3:9f:36:1c:17:a6:8c:61:f8:
                    6b:d5:52:a5:48:4b:59:ca:f3:e7:bf:6f:d5:d9:e6:
                    c2:b0:b6:73:50:dd:13:b9:74:91:de:56:05:79:64:
                    06:b5:7e:af:43:58:12:40:79:f6:c9:2b:f3:76:58:
                    f2:cb:a0:fc:bf:67:cb:f3:53:1c:49:97:fd:1a:64:
                    35:88:cb:4e:d1:ab:80:e5:10:6b:b9:ad:fe:de:64:
                    5d:3d:78:90:b2:cd:ca:d1:60:19:fa:d3:eb:de:5d:
                    9a:d8:b6:0e:da:b3:94:85:ce:a0:e1:ee:dd:97:f7:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:28:0B:97:D5:26:7D:D8:D7:55:D7:A1:35:09:CC:4A:82:7C:28
            X509v3 Authority Key Identifier:
                keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/E5196DA6335811F1BC79FB1BCA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:85:c7:b9:2b:41:1e:e9:57:89:de:c5:be:e3:ba:a0:a9:3d:
         c3:a6:cf:4d:a6:f1:95:67:df:4b:92:a5:e8:07:d8:f5:f1:d8:
         4d:52:56:4a:fb:8c:2b:76:ae:a9:22:fd:9d:e7:34:0b:e6:58:
         85:e6:69:d1:68:e0:e6:96:a2:09:10:5f:78:86:de:11:d9:ef:
         b5:79:0d:1b:dc:3b:ab:3e:61:4b:2d:40:36:3a:ef:03:c1:86:
         bf:a1:02:c5:97:f9:cc:7b:80:43:c4:67:5c:b6:8c:1a:f7:d3:
         76:b6:49:1c:a2:18:2e:dd:7e:2e:be:57:34:1b:f2:5f:63:9f:
         89:db:a3:5f:a4:a2:60:0d:eb:a4:a2:20:96:1d:51:fa:17:12:
         63:61:29:e3:22:48:79:e5:79:21:b1:6f:d0:b1:bc:f1:0d:20:
         d2:43:bb:0e:8f:1d:9c:37:21:f1:56:52:ca:b2:51:39:af:ef:
         47:39:ab:c6:f5:c2:38:15:75:0d:73:c8:c8:42:58:ce:8a:23:
         01:81:07:bd:60:1d:4c:2c:18:96:c3:b4:39:73:ca:41:51:b2:
         5f:d5:34:3b:c3:d4:57:6d:36:77:54:ee:bc:a3:74:ff:56:21:
         57:ab:f0:7f:bb:98:ef:5e:4f:21:45:cd:e6:22:a3:ca:75:58:
         81:58:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:20 2026 by rpki-client