Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
File:                     8497885E04F911E9AF13ED31C4F9AE02.roa (raw, json)
Hash identifier:          cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=
Subject key identifier:   6A:25:E4:E1:DE:2B:E3:2D:C3:0A:31:1C:97:E3:EF:28:72:0B:64:ED
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       126F
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
Signing time:             Thu 28 May 2026 17:21:15 +0000
ROA not before:           Thu 28 May 2026 17:21:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63682
IP address blocks:        103.59.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4719 (0x126f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: May 28 17:21:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18798b-a568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:e2:a1:25:74:fd:ac:97:97:ce:e6:b4:18:
                    16:ff:d5:53:5d:9b:62:d7:db:b2:c7:65:70:b5:f7:
                    fd:c0:4a:0f:89:bb:c4:3e:00:89:13:96:3f:2a:f0:
                    c7:95:4e:01:46:7c:53:0b:e7:f1:39:90:7f:d8:72:
                    ab:af:e5:b9:d6:d6:fc:6d:e5:cb:14:d0:f2:f2:85:
                    d1:e4:a0:61:fc:5b:71:cf:5d:4c:00:c2:c2:84:2c:
                    12:33:64:be:bc:a0:51:45:ed:4c:09:2b:aa:83:bb:
                    6d:70:b8:07:c6:84:83:60:54:13:80:22:48:30:19:
                    f3:2e:99:3f:4a:c4:34:2a:72:56:e0:00:04:42:cc:
                    fa:8d:a9:21:36:a0:20:bd:94:55:58:66:e0:b7:e6:
                    3b:9f:1e:bb:02:c8:08:82:59:8e:12:b7:e1:ce:17:
                    d4:0f:92:27:9d:ff:83:f1:39:71:f7:40:4c:3e:26:
                    d9:7a:6b:37:db:bc:3e:58:20:f5:bc:72:4f:7f:af:
                    d1:ee:bd:bf:3c:ca:6b:12:71:72:e0:4d:e6:c3:1c:
                    6d:34:4b:a5:93:5f:ae:30:e4:7d:63:e0:4a:0a:a0:
                    d5:0d:ce:4d:27:62:a1:b7:71:9d:12:2a:77:c9:55:
                    ca:b0:40:f7:fc:87:31:3b:00:52:41:28:12:fb:6d:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:E4:E1:DE:2B:E3:2D:C3:0A:31:1C:97:E3:EF:28:72:0B:64:ED
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:0f:1c:3b:ba:30:0d:30:83:be:cd:a0:85:e5:cc:f2:be:
         7c:93:70:67:ba:0c:07:03:47:45:a6:82:5a:b1:cd:c2:3e:f7:
         05:11:62:d7:a4:dc:e0:82:03:27:a3:07:f5:07:c2:75:51:ea:
         fb:5c:ff:cc:4d:83:a5:d2:29:77:83:d8:20:94:41:15:36:61:
         a9:2c:00:fa:fd:cf:b3:ae:a8:87:cf:62:da:cf:15:aa:48:6b:
         5d:a5:7a:75:a5:11:d0:71:06:03:24:a2:5a:cb:c9:fb:e1:2b:
         1d:fa:c9:47:2c:81:b4:aa:3c:47:da:f2:20:cb:80:4a:ed:6d:
         eb:13:e0:73:ee:f8:5c:59:6c:de:3b:98:7d:a7:b4:5c:88:de:
         2e:7e:d3:c4:e0:9e:34:06:03:8f:5d:b9:d7:3f:50:94:fa:c3:
         0c:15:66:70:1f:d3:4a:9d:4a:90:20:b8:af:3c:e6:25:6a:b4:
         66:9c:b5:7c:48:9a:fe:08:83:3b:2f:fe:71:01:11:2b:b5:81:
         77:3f:92:6a:f7:93:e8:b8:62:3a:5e:e7:c4:07:be:b3:5c:be:
         04:07:c0:be:7e:bb:c3:c6:c0:a0:61:17:ce:3e:89:b1:dd:cc:
         12:81:9d:75:0e:6f:88:73:24:d6:77:98:e0:f4:3c:61:4e:b6:
         b7:97:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:54 2026 by rpki-client