Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa
File:                     DA61635E534811EC8FFBDB7CC4F9AE02.roa (raw, json)
Hash identifier:          g+7KvAEtKjL+9DxE1/2cm5MoFA1eBOQardkd92Ved8A=
Subject key identifier:   3C:DE:7F:5C:C6:4C:0E:60:A2:5A:15:7D:2C:22:27:8D:BD:CC:AC:3E
Certificate issuer:       /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
Certificate serial:       0519
Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa
Signing time:             Thu 21 May 2026 00:29:44 +0000
ROA not before:           Thu 21 May 2026 00:29:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132694
IP address blocks:        103.18.92.0/22 maxlen: 22
                          103.18.92.0/24 maxlen: 24
                          103.18.93.0/24 maxlen: 24
                          103.18.94.0/24 maxlen: 24
                          103.18.95.0/24 maxlen: 24
                          2406:7700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
        Validity
            Not Before: May 21 00:29:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0e51f8-cb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:57:f8:33:87:67:6a:07:52:91:75:65:49:
                    eb:1d:b0:14:8e:9d:f1:e8:45:57:90:e0:a2:f1:bc:
                    d2:0e:0f:0e:cd:2e:f5:5a:c0:d9:03:aa:90:c3:eb:
                    4f:39:8b:f2:15:06:d0:4c:38:ff:f3:66:7e:5e:52:
                    61:77:d8:0d:4f:7e:7f:3b:c8:86:35:9f:e0:99:25:
                    0d:fc:17:5f:c1:29:14:63:6c:10:ab:93:4e:e8:4f:
                    5c:e2:2d:c5:82:94:52:bc:a4:42:cd:51:cd:0c:94:
                    10:3a:5f:6c:1c:9d:39:ea:73:3c:7a:ed:4e:ee:b8:
                    96:f6:78:9d:fd:9c:b2:51:d9:ca:08:19:53:11:28:
                    20:9c:d0:49:fe:fe:c2:de:37:79:67:6f:c1:02:21:
                    e9:7f:e8:35:e7:db:fb:f2:16:b1:85:1c:aa:10:8b:
                    fa:8a:27:69:22:2c:81:fb:6d:91:8e:32:6d:a7:78:
                    2f:38:82:42:70:23:da:df:bf:b8:24:82:50:5c:b2:
                    a3:62:6e:65:56:d6:44:3d:8f:57:5c:7f:c6:03:22:
                    85:24:6e:bc:73:c9:e6:95:da:bc:38:6e:6c:88:ac:
                    0b:1f:f5:fb:8c:51:c8:e3:e2:29:c5:71:dd:03:79:
                    77:0e:02:9b:31:7a:e6:89:c4:c4:cc:7f:29:28:fc:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DE:7F:5C:C6:4C:0E:60:A2:5A:15:7D:2C:22:27:8D:BD:CC:AC:3E
            X509v3 Authority Key Identifier:
                keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.92.0/22
                IPv6:
                  2406:7700::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:02:24:3b:4c:3e:a2:65:98:ca:77:f0:b2:1d:a4:0b:4b:
         03:8b:b9:71:3d:4c:6b:9f:aa:1b:2c:42:06:7e:78:f6:a6:0b:
         cf:b4:76:d5:a0:51:26:9c:b8:23:dd:c0:41:b4:37:eb:e5:53:
         04:ff:17:85:20:5e:76:73:db:2a:f3:5e:f3:69:12:ca:64:b8:
         d7:4e:cb:30:3d:3f:13:fd:85:e8:e3:5f:ef:ad:1b:04:ca:b8:
         a7:b2:73:8b:f7:e4:16:e4:33:79:35:95:42:1f:19:ef:97:9c:
         b8:0e:ed:02:eb:a4:0e:3c:ad:1f:d1:8a:f9:f5:e4:81:5a:ef:
         05:d1:0b:b8:74:32:74:6f:b2:6d:c4:9c:01:6e:ed:5b:d8:34:
         5a:30:c3:a6:6d:5b:a2:83:f5:ad:53:fb:81:a2:9e:95:08:bc:
         0f:9c:d4:d4:a1:26:1b:1a:c3:65:fc:32:92:57:fc:8a:2a:a6:
         a0:17:e6:e6:be:98:06:72:f8:76:4c:e2:d5:11:65:2e:8d:e3:
         4a:b1:a6:33:2a:eb:8f:3b:aa:f3:32:3d:8a:93:13:8b:e0:0f:
         ab:e9:6c:71:92:bf:f1:2d:94:61:94:ed:c7:85:66:01:50:88:
         bb:18:5f:4e:f8:d7:4f:15:0d:13:b3:d2:fd:84:00:e1:75:51:
         0c:b5:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:08:31 2026 by rpki-client