Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa
File:                     3CE2E40A5FC211F1849ECF386D47A888.roa (raw, json)
Hash identifier:          nbId6gLpJ7OSPNk36xsFAAXSXy7yUVygVp8wxMLNziA=
Subject key identifier:   9D:AC:96:AE:FD:3F:43:F5:95:B6:93:BE:76:E5:86:2F:FB:C2:AA:97
Certificate issuer:       /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial:       015C
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa
Signing time:             Thu 04 Jun 2026 03:05:27 +0000
ROA not before:           Thu 04 Jun 2026 03:05:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     8796
IP address blocks:        103.135.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
        Validity
            Not Before: Jun  4 03:05:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a20eb77-e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:4f:9a:af:76:fa:52:c1:92:52:9f:f2:04:
                    81:07:5d:3f:a6:08:98:92:3f:7b:e3:48:bc:ca:13:
                    91:07:2c:ed:6b:a9:54:a5:82:ba:bb:22:cb:0d:af:
                    2b:34:8d:11:b2:61:27:a1:f9:b5:64:1e:57:af:d5:
                    a8:94:f1:05:28:cc:87:4a:bf:50:c1:ea:f2:2f:42:
                    9d:61:53:22:4b:9d:5b:75:93:08:48:11:c5:51:ad:
                    b8:0e:ac:2b:29:fa:1b:72:3c:36:b7:04:78:ee:7b:
                    be:f5:fd:20:f6:4d:db:20:33:b2:b4:bf:be:51:29:
                    86:e8:91:cb:6b:be:e9:58:20:af:66:bb:b4:5a:8a:
                    64:60:bd:f7:bc:0f:5b:56:fa:3c:5b:44:ba:f5:fd:
                    56:08:62:d3:a9:56:26:0d:6e:86:b2:35:cc:eb:87:
                    5f:30:48:a4:3e:5e:8e:e8:c0:25:71:3d:87:b2:f3:
                    0b:8c:e8:6d:d4:4f:32:f2:04:c3:d6:06:bb:ba:e9:
                    ed:05:36:1f:cf:1a:3f:0b:6a:92:ff:f7:ef:2d:41:
                    82:1e:9b:f5:d8:49:fa:b1:dd:c1:06:8b:30:a6:27:
                    1d:2e:fe:0f:48:eb:e3:fb:62:45:d3:27:56:73:3d:
                    af:ec:60:d3:0e:79:8c:b7:64:b6:d7:09:f8:c1:93:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:96:AE:FD:3F:43:F5:95:B6:93:BE:76:E5:86:2F:FB:C2:AA:97
            X509v3 Authority Key Identifier:
                keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/3CE2E40A5FC211F1849ECF386D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:73:81:e7:26:02:10:25:3b:e1:27:bb:1e:db:f7:a6:00:1d:
         aa:2d:b6:6b:23:76:93:40:6d:8e:f5:d4:23:5e:40:3c:82:ea:
         8d:1d:0b:9b:3a:bb:25:01:81:df:11:f9:99:6b:e1:7b:7e:10:
         c6:97:d2:84:1a:40:dc:60:51:2b:a3:a5:47:9f:ce:a0:85:3d:
         35:78:70:78:f7:ee:38:34:76:09:f7:cf:a4:4c:cf:7a:b9:29:
         7f:77:84:31:45:31:48:2b:84:66:1c:92:88:83:b2:ea:cb:43:
         c9:82:b1:51:d2:b8:36:40:53:e7:79:f3:f1:1e:42:7f:0d:02:
         a8:21:6c:52:b0:94:c4:a8:ba:85:20:96:85:39:54:e0:d8:42:
         b0:96:10:8d:56:61:2f:ac:ce:15:54:94:1c:aa:90:1d:48:1a:
         a9:5e:12:c4:f0:41:30:5d:59:6b:9c:54:9e:8d:30:76:a4:80:
         29:51:88:de:19:2e:ab:ce:f2:cf:f4:5c:4c:24:84:8d:11:af:
         41:ed:0b:cc:4a:75:a3:a7:94:df:01:4c:35:9d:b4:b4:9b:16:
         5d:60:e2:69:81:f1:1d:98:c8:ac:b4:ce:98:a0:cc:1d:db:02:
         5d:94:37:26:67:d7:36:4c:6a:63:9f:84:91:07:57:6d:2b:b9:
         2d:e1:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:29 2026 by rpki-client