Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
File:                     F11B4C14E40111ECBD78E571C4F9AE02.roa (raw, json)
Hash identifier:          YE01TphWRKhaN7OxPWo3dhGFwXfLCHTh3x9i/9X7LhE=
Subject key identifier:   86:19:F4:53:68:45:6A:80:6D:E5:FC:99:CE:35:FA:40:44:B0:2B:54
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       056F
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 23:44:26 +0000
ROA not before:           Mon 31 Aug 2026 23:44:26 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     58909
IP address blocks:        103.24.200.0/22 maxlen: 22
                          2400:c6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Aug 31 23:44:26 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a9611da-c53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:7c:04:8f:45:4a:38:44:97:1b:76:3f:27:
                    7b:9b:e7:3c:de:44:14:38:5c:57:7b:65:da:6a:ee:
                    ff:36:bf:d0:ed:f1:d1:2d:86:1a:30:94:7e:11:4b:
                    b1:c1:78:66:e2:9c:e4:c2:5e:ee:f9:fc:b8:ef:2f:
                    06:9a:75:33:67:80:27:df:b9:2f:ab:5c:bb:34:2b:
                    c9:82:01:a6:01:c3:46:d9:4e:c4:89:e7:7f:fc:93:
                    ed:c3:b8:a5:64:25:fe:7f:29:6e:f3:33:c7:f3:65:
                    be:3b:df:00:9c:8d:c0:bc:dc:77:65:10:f0:cb:bf:
                    a5:79:17:2c:67:af:0d:59:4a:f8:c1:6a:e3:5e:f4:
                    31:fb:35:2c:3b:29:e0:a5:d6:30:ac:d7:df:d1:74:
                    c6:f3:6d:80:44:07:be:b6:ea:7d:ab:c9:60:a1:1f:
                    9a:06:1c:20:d1:6d:b4:63:46:e4:6a:fe:80:6a:37:
                    61:49:4a:55:ae:87:65:e2:ad:34:e9:c7:c4:25:2a:
                    a2:61:ce:f0:15:b3:85:89:71:65:16:56:b9:9c:d5:
                    f2:96:98:3a:25:83:f9:81:c3:71:9c:14:a7:f6:d3:
                    cd:31:bc:a5:c4:94:d8:17:cc:84:a8:63:24:62:fc:
                    e8:b4:bc:b5:95:34:57:97:ce:72:17:84:38:88:f8:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:F4:53:68:45:6A:80:6D:E5:FC:99:CE:35:FA:40:44:B0:2B:54
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.200.0/22
                IPv6:
                  2400:c6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:30:68:8e:d4:e5:32:e4:66:46:40:da:73:89:e5:3e:bf:4f:
         67:aa:3c:7f:73:f5:48:e2:1d:9e:12:a6:a3:f7:bd:2e:a5:6d:
         a8:ec:13:d9:24:ad:b0:69:3a:51:89:20:89:1e:8a:b5:cd:47:
         b7:e9:7d:2d:a4:47:ae:d6:53:34:23:e1:1c:35:9a:41:3b:f7:
         75:fe:e9:ff:7a:0b:2a:96:29:e9:a4:92:99:06:30:1d:1c:c0:
         de:03:bb:02:21:61:1a:ee:e5:70:a9:08:dc:05:9b:1a:1e:c1:
         8b:f9:d1:c7:3e:c3:20:67:40:70:c7:fd:1b:cc:f6:8c:8d:82:
         17:28:06:d5:a8:f6:30:83:6c:14:60:44:77:23:43:65:a4:31:
         9d:99:a4:ad:4e:40:bb:6e:1a:2c:bc:d6:65:9d:f0:56:34:56:
         2f:a3:f6:81:aa:e3:b2:2b:c2:04:27:85:78:18:2e:58:39:f7:
         20:9a:41:f7:26:54:5d:36:ad:29:17:c1:fd:b7:2e:bb:b3:9f:
         02:d1:12:c9:61:7b:a4:20:c6:c5:a0:c4:8e:cc:47:97:13:3f:
         f5:20:f9:b8:2e:00:c4:15:99:ab:60:9a:c5:88:28:9a:fd:d6:
         71:5c:79:8f:46:fb:0c:63:4d:b7:04:45:b1:16:91:20:4d:ae:
         4e:ab:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:28:18 2026 by rpki-client