Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa
File:                     14B2A85C3DA611EAAD093F5EC4F9AE02.roa (raw, json)
Hash identifier:          57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=
Subject key identifier:   20:D8:45:56:34:CE:DB:E0:4A:D4:F0:67:49:8D:FB:A2:B9:A7:CF:C9
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0BF4
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa
Signing time:             Tue 02 Jun 2026 19:22:31 +0000
ROA not before:           Tue 02 Jun 2026 19:22:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135038
IP address blocks:        103.92.84.0/23 maxlen: 23
                          103.92.84.0/24 maxlen: 24
                          103.92.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060 (0xbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Jun  2 19:22:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1f2d77-d6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:b2:b3:9d:41:50:21:60:1f:0c:02:fa:7e:
                    f5:87:6f:7f:d8:fe:e9:b5:58:a6:ff:8f:a3:ab:24:
                    15:7f:7d:e7:69:aa:ee:d1:ff:7c:88:fd:87:f9:d9:
                    f7:2f:12:ca:27:c6:78:1a:0d:02:56:ff:91:4d:ed:
                    b8:a7:29:5e:35:2a:6a:50:14:72:a4:bf:16:01:eb:
                    9b:7c:c8:14:7e:fb:dc:39:4e:83:14:cd:e7:c3:bb:
                    55:da:2a:6b:14:09:3d:ba:84:58:5b:82:aa:a9:38:
                    a3:ff:47:a2:09:71:7d:5e:3b:e9:7d:f0:9b:1b:7a:
                    f5:dc:4a:5e:12:9c:20:ca:4c:5d:4f:31:09:aa:12:
                    6f:84:00:d1:81:e7:4e:8b:98:d8:d8:ce:3a:24:96:
                    70:5b:00:56:74:2d:4f:2a:06:bf:d2:1e:ce:ae:53:
                    25:de:cb:87:81:f8:97:4d:35:61:2e:d6:43:f0:30:
                    45:26:9f:be:a7:51:74:89:21:24:57:5d:15:5e:ae:
                    f2:13:ae:2f:67:6d:25:5e:07:11:3e:26:68:db:10:
                    5f:0f:9b:0b:f3:8d:3e:27:30:ec:2f:7d:78:89:83:
                    70:9a:1c:e8:11:a0:92:ea:2c:fd:4b:7f:69:5a:d8:
                    aa:60:7a:72:63:40:36:fa:80:e7:16:2e:5f:d6:f5:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:45:56:34:CE:DB:E0:4A:D4:F0:67:49:8D:FB:A2:B9:A7:CF:C9
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:00:8c:89:a4:0e:b9:0f:f5:7f:23:ab:17:f1:25:12:d6:
         c1:a1:0e:ef:f6:14:5a:8d:1f:14:81:24:e5:cb:be:4f:27:02:
         6b:fd:80:70:1e:26:f9:6e:ab:63:cd:77:18:e0:64:09:9e:bd:
         b8:6c:8f:37:89:9f:c4:97:49:db:b1:c7:0e:2b:3a:48:81:1f:
         57:77:96:db:55:99:15:9d:80:f5:87:5c:98:bc:14:09:b3:23:
         3f:9f:cb:40:21:2b:a5:d8:81:83:b5:de:16:9e:46:4a:2c:0a:
         27:e9:db:7a:d9:bf:69:db:a8:19:12:e3:53:73:5c:f9:a8:37:
         6d:6d:20:08:1b:e0:49:af:ca:87:1e:9d:75:a3:69:d2:07:4e:
         0b:09:84:83:35:22:ef:7a:14:a9:ee:2d:22:6f:7f:40:ac:16:
         04:1c:4c:5e:50:33:56:84:f6:e5:92:d9:e9:bc:7f:97:1f:df:
         47:f1:79:3f:55:95:56:cc:19:57:f3:14:81:8e:3c:5f:e3:c8:
         b7:44:9e:48:99:9c:29:18:51:35:68:b5:d0:0e:56:51:20:0e:
         cd:62:bc:59:76:25:54:f4:be:99:f0:f7:a2:bb:12:75:3a:f4:
         ce:28:75:25:c4:60:00:3b:91:d6:3f:02:35:02:97:05:b5:84:
         0e:40:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:34:13 2026 by rpki-client