Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/2678DE4275A011F1A0FDA4E35BA30FBC.roa
File:                     2678DE4275A011F1A0FDA4E35BA30FBC.roa (raw, json)
Hash identifier:          HO4c9apAU+SF4J/bcSAIOWLgnk4/jkKppRJxjoUD8Lw=
Subject key identifier:   B2:F3:30:64:32:04:51:5D:1C:2D:69:F6:EF:44:60:E1:1A:67:B5:1B
Certificate issuer:       /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial:       0411
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/2678DE4275A011F1A0FDA4E35BA30FBC.roa
Signing time:             Wed 01 Jul 2026 22:56:53 +0000
ROA not before:           Wed 01 Jul 2026 22:56:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.162.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 00:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
        Validity
            Not Before: Jul  1 22:56:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a459b34-8110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:fc:cc:6a:f2:38:ff:47:01:26:04:5b:9c:
                    23:b3:b0:f8:95:7a:c1:f2:80:ec:ea:54:b6:18:a0:
                    cb:1c:64:7e:10:b1:c6:af:85:b6:86:de:b9:ac:85:
                    77:27:36:b9:2c:62:b9:17:06:83:d6:80:b7:d4:d7:
                    18:52:55:67:b7:33:e1:8a:b2:39:35:fa:6a:46:40:
                    de:87:44:2d:27:d7:0b:6e:e3:88:35:a5:79:55:27:
                    f2:52:e0:53:30:c2:c2:46:0b:65:bc:a5:a8:8d:90:
                    0f:6c:a9:b3:24:20:95:fa:dc:0a:9d:38:fb:e0:03:
                    a2:c7:db:a7:c2:34:0b:2d:8b:2a:6c:27:00:fa:dc:
                    54:ba:c4:ec:b9:2d:7f:3f:63:81:80:f1:2f:90:69:
                    7f:f4:b2:00:c6:19:16:d8:53:57:0a:7c:c5:d6:b6:
                    d7:97:5f:f8:cc:82:7b:90:49:58:85:eb:da:b4:e8:
                    64:73:20:44:49:f6:5f:4e:f6:bb:9a:8e:d6:44:a7:
                    ff:4d:d0:9a:92:c2:58:88:ea:ca:26:ee:14:68:05:
                    98:61:16:93:3c:8f:b2:e9:0c:89:1d:97:b5:cf:47:
                    a4:d1:7c:dc:11:7e:50:24:f3:dc:91:bf:f0:90:a5:
                    c3:b0:97:16:22:84:8a:5a:11:a2:e6:d5:f1:ca:ff:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F3:30:64:32:04:51:5D:1C:2D:69:F6:EF:44:60:E1:1A:67:B5:1B
            X509v3 Authority Key Identifier:
                keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/2678DE4275A011F1A0FDA4E35BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:60:00:ee:a9:8b:d2:dd:ea:79:c9:b2:40:fa:91:1a:56:99:
         25:fd:29:f3:21:37:f8:bd:88:1c:ed:7b:34:93:33:3a:4a:f6:
         35:a1:e8:80:f3:44:bb:3e:94:fe:5e:2c:b9:fb:2f:92:e5:e3:
         d2:ca:06:1f:a8:b4:0b:25:b0:33:f0:dc:db:15:ea:63:76:a7:
         0e:27:d4:e4:9c:76:a0:24:90:e4:3b:40:44:63:b6:ff:aa:7f:
         bb:cb:ee:6f:b8:17:6f:9f:e9:5d:2d:8d:ff:f5:d0:f8:92:73:
         93:70:a5:b7:1e:2d:f1:ca:56:3d:3b:aa:8a:a9:c5:a8:c2:e7:
         5e:b4:92:3b:7c:a8:0a:a4:b3:b1:48:93:9c:52:c6:98:6d:f4:
         28:ba:40:23:ce:96:26:d2:de:63:31:f7:bc:75:05:04:7c:fd:
         69:35:fd:03:03:2b:d3:e3:c5:3c:2c:db:d9:c8:8c:eb:5e:ce:
         a8:fe:f3:92:d4:18:01:0d:4c:09:3d:74:f8:fd:96:88:f5:84:
         64:e5:84:2d:be:8e:0d:ca:29:84:97:0b:8b:95:b2:53:94:a7:
         3b:9b:18:85:6f:9a:a6:92:87:d1:85:10:e4:79:8f:5d:91:85:
         9c:b7:76:67:02:b2:77:de:90:a5:29:92:ef:a7:6e:c1:29:5e:
         79:2d:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:42 2026 by rpki-client