Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
File:                     5284A644D3DC11EB9FCD6135C4F9AE02.roa (raw, json)
Hash identifier:          8jTO1g3DnI3Mc9HbbuIXEWUONxgdq2EyXq0caoNDXcA=
Subject key identifier:   1F:00:26:FE:35:6D:39:76:2B:B5:F4:CF:08:BA:67:E5:46:4C:AD:A8
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0678
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 23:29:20 +0000
ROA not before:           Tue 30 Jun 2026 23:29:19 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142542
IP address blocks:        103.168.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Jun 30 23:29:19 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44514f-3df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:4a:ab:d1:ac:4b:d4:32:c9:71:89:3b:27:
                    c1:d4:fa:65:9e:b7:cd:20:8e:d4:4b:6a:54:76:ff:
                    f2:88:4e:5c:be:5b:8a:9c:e1:03:0f:c9:1d:60:b7:
                    bf:7a:99:4a:03:4a:85:9e:8e:95:57:7a:08:7c:9d:
                    6c:3f:b2:02:3a:80:d5:55:16:19:ce:f6:25:3f:e2:
                    73:dc:2d:5f:2b:8a:02:10:1f:a7:28:37:68:8b:50:
                    c4:44:8d:5e:0a:cd:b8:b0:01:f4:3c:3b:2c:2d:36:
                    98:d1:db:c2:9b:7c:a4:5d:dc:61:90:62:4c:0f:13:
                    00:60:b9:9f:f6:51:f9:b6:6a:69:26:e4:a4:05:65:
                    25:df:ff:eb:f8:27:c5:ca:36:fd:c5:ae:9e:6c:55:
                    30:ef:05:c4:f0:cf:54:ef:84:b9:85:a4:80:11:28:
                    23:9b:35:5f:ef:70:08:86:eb:15:51:3d:42:8a:0a:
                    66:6b:69:ce:1b:86:22:ae:99:23:ef:b9:3a:07:61:
                    3d:f4:cf:d7:6c:64:4b:60:e3:6f:ab:61:44:aa:ae:
                    56:55:06:ac:1b:87:96:19:19:70:2a:1b:36:81:35:
                    8a:75:ed:f0:3d:fb:b5:a7:33:71:12:96:71:88:c3:
                    fd:aa:fe:92:46:0a:87:b6:ff:63:be:d5:03:03:af:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:26:FE:35:6D:39:76:2B:B5:F4:CF:08:BA:67:E5:46:4C:AD:A8
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:4d:db:13:4f:be:c3:c0:d2:f6:f1:7c:5c:6a:fc:70:3e:
         79:98:7d:e8:e3:62:4e:32:db:62:58:e6:d9:39:fb:3b:78:84:
         3e:c8:91:51:30:82:0e:32:b1:41:10:3f:6b:22:88:ba:a3:71:
         9d:e7:43:d4:e1:89:3d:a6:f5:f9:05:06:7d:ec:d2:6c:9f:ce:
         b0:0a:09:79:ae:75:60:81:5d:2d:aa:9b:d4:40:ff:81:05:15:
         58:ee:36:86:1b:6b:df:6d:ba:0a:f5:f8:cb:28:20:c2:09:bf:
         ec:c9:da:5d:71:9a:33:01:17:fb:87:d0:71:dd:47:6a:fc:2d:
         d2:57:5e:f7:cf:4b:e0:c4:26:05:f1:4e:c9:db:d9:0e:d0:43:
         91:ab:a7:b3:56:5e:8a:8f:55:f7:4e:6c:5f:3e:c2:ee:5b:c6:
         2a:2b:f0:5c:24:68:95:4d:d9:52:f3:fa:40:30:f5:41:74:be:
         1e:0c:9d:64:d8:ab:55:9b:3a:a0:33:86:be:06:c0:e2:71:9c:
         57:56:58:80:6f:e8:bc:9d:6e:33:34:02:c7:49:ed:8f:ac:dd:
         e2:ea:94:d3:75:89:11:f8:6a:83:10:2a:86:51:e0:f9:93:ea:
         1f:8e:99:d8:b7:91:66:8b:da:e1:bd:8a:84:9d:c0:7c:4a:7b:
         79:7a:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:25:18 2026 by rpki-client