Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
File:                     01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (raw, json)
Hash identifier:          c1QKX3+B/fQ6vz88jLkNlQcTt721ZjvBygzVcgkBxk8=
Subject key identifier:   41:6D:FC:74:F9:1E:51:30:13:78:70:05:6E:DF:F8:6F:09:B7:BD:4A
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       03AC
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 01:30:45 +0000
ROA not before:           Fri 05 Jun 2026 01:30:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     7594
IP address blocks:        103.188.182.0/23 maxlen: 23
                          103.188.182.0/24 maxlen: 24
                          103.188.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Jun  5 01:30:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2226c5-8a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:71:87:bb:80:20:52:f6:7d:c9:56:cc:16:
                    11:89:88:8c:ef:ac:fb:c7:17:b9:e8:2d:d9:be:65:
                    de:21:7e:82:1e:e2:b6:f7:1c:7e:b7:94:f4:b9:83:
                    84:57:d2:9b:7e:3f:26:b1:22:60:0f:41:b8:19:54:
                    c7:ce:c6:88:18:8e:c3:d9:5a:36:27:3b:d6:be:06:
                    f1:a0:b1:03:0d:45:72:b0:0b:eb:dc:28:50:a0:c3:
                    74:5e:24:45:11:33:51:d4:0d:0e:1d:87:72:b4:d6:
                    66:b7:dc:d6:57:33:f8:ec:d0:b4:c6:2e:d0:ee:54:
                    cd:4c:d2:ab:b1:ed:19:a2:f7:ff:22:d4:dc:3c:bb:
                    bc:2f:68:2f:a9:03:b1:af:aa:f8:10:e0:d6:45:7a:
                    d8:7c:fa:b7:3b:b4:5c:23:f8:d0:6c:32:a7:17:57:
                    47:1e:d8:8b:7f:c3:39:ac:13:95:d0:b6:62:56:8b:
                    f9:09:8e:6e:73:04:e2:2c:d7:ee:ab:54:74:9c:91:
                    52:2c:2d:93:a8:b4:fa:2c:eb:0b:be:a3:df:2e:96:
                    42:77:3c:d9:4c:c8:3a:de:5b:93:7a:dc:f6:cb:59:
                    c2:6b:b4:6f:5b:a1:cd:26:75:e9:74:1b:68:32:18:
                    b2:7b:e9:b0:57:64:78:b1:f7:6a:e7:de:df:33:d1:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6D:FC:74:F9:1E:51:30:13:78:70:05:6E:DF:F8:6F:09:B7:BD:4A
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:09:a1:a8:7c:f9:f7:4f:84:79:f6:15:88:41:0c:72:25:32:
         07:f0:89:70:5d:f9:d0:f7:51:c2:76:4b:b5:a4:10:67:d6:26:
         f9:d2:e2:a0:86:77:e2:2e:bc:10:34:bb:25:d0:74:4e:d9:44:
         11:dc:8f:d4:12:50:9e:08:a2:b5:c6:4e:66:9c:38:d3:89:cb:
         04:07:c9:cf:57:e7:9f:bf:e2:df:46:27:62:6a:0d:66:c4:1b:
         e8:b9:4c:6c:66:4a:9d:fa:74:5d:81:1a:f3:00:65:92:60:cd:
         1b:f5:52:64:56:fe:6b:37:b0:c5:0a:2c:0e:46:1a:79:41:55:
         14:a9:8d:cc:16:82:aa:3a:ff:16:c2:9d:af:53:69:77:3c:03:
         62:04:6a:d5:d8:38:7b:66:6a:4a:6b:f3:4a:fb:be:78:5f:b5:
         fe:cd:b9:22:e9:a6:fa:37:6e:2a:87:e1:1c:17:1f:27:f3:6b:
         ac:f2:12:7f:f0:f3:fc:b9:f6:b8:86:41:b9:22:bb:86:78:33:
         b2:d4:22:0d:c3:74:c1:5d:c7:41:8c:91:c3:9f:be:d2:43:94:
         6d:f9:57:45:fe:39:ec:a7:08:06:9d:03:24:32:c4:88:48:7b:
         b2:e5:18:71:81:51:21:e2:a9:48:57:7f:45:72:15:55:39:f4:
         ea:72:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:37 2026 by rpki-client