Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/D84BF6B860C411F18C6019A18247A888.roa
File:                     D84BF6B860C411F18C6019A18247A888.roa (raw, json)
Hash identifier:          QIlUH1QNdLALbUbhElUoD+izhiqfEVazksdCsrI3VgM=
Subject key identifier:   17:51:9C:66:69:17:BC:E4:49:12:8F:33:D7:7C:EF:77:CE:20:A6:F6
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       026A
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/D84BF6B860C411F18C6019A18247A888.roa
Signing time:             Fri 05 Jun 2026 09:56:38 +0000
ROA not before:           Fri 05 Jun 2026 09:56:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        103.140.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Jun  5 09:56:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a229d56-a4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:8c:66:f4:60:e6:d9:bc:86:a6:af:99:20:
                    c3:ae:38:cb:66:85:0e:45:3d:1e:56:22:2a:b5:8c:
                    92:1c:58:3f:13:7f:1b:96:b7:41:77:88:c4:6a:ff:
                    44:18:36:30:d2:84:ea:dd:c1:98:51:47:b7:b3:0f:
                    ba:6f:e7:aa:6c:42:80:17:34:ce:e2:1e:86:10:2c:
                    25:52:dc:92:94:52:e8:0f:c0:f3:bc:74:6e:f1:b0:
                    b7:45:1f:2d:dc:3b:2b:fe:43:65:27:2e:96:11:7e:
                    f7:ff:48:7c:eb:4c:d8:5c:0f:a6:bb:a0:7f:93:40:
                    8d:46:2d:1d:f5:a4:8e:e9:1b:7a:ce:00:cb:ff:56:
                    5c:ef:bf:16:69:2d:86:a9:96:ac:a7:e6:04:e1:21:
                    05:70:1f:c7:61:5a:fc:02:87:d3:0a:b8:0e:d1:92:
                    61:9c:7d:35:32:ec:c8:b1:30:ce:2b:a6:ef:3a:ff:
                    88:4d:8c:39:ff:ec:13:9f:57:79:f3:5e:56:fa:47:
                    aa:eb:ea:ea:75:8b:1f:fa:20:0e:4e:d1:68:60:a0:
                    aa:97:eb:f8:2c:ff:b0:3c:ea:dd:11:51:6c:ac:e3:
                    9b:e9:77:bb:d2:9c:15:32:75:d7:53:94:c7:4a:11:
                    03:9f:74:6e:55:66:a1:65:16:0d:5b:a2:87:69:2d:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:51:9C:66:69:17:BC:E4:49:12:8F:33:D7:7C:EF:77:CE:20:A6:F6
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/D84BF6B860C411F18C6019A18247A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:0f:2a:82:1a:50:2b:29:e6:73:49:69:ad:8f:bd:f1:ea:
         64:eb:1c:83:c8:e4:af:59:08:cc:ca:d1:95:75:5d:18:67:c3:
         d0:42:bd:cf:46:29:78:e9:2e:a8:1c:f3:51:17:bc:ef:5d:d9:
         1a:5b:46:c8:04:17:62:7a:74:9b:bd:80:e6:69:1b:d0:8a:dc:
         aa:6a:be:ab:51:e6:f2:75:3b:09:a9:43:c2:16:06:66:61:fc:
         54:67:a7:de:bb:22:69:b9:5b:a1:07:dd:c7:96:3b:63:cf:b9:
         a4:fc:45:c6:3e:b3:95:4a:01:9f:4e:5b:13:f5:26:e9:8c:d2:
         cd:ee:73:64:98:d0:31:8e:df:22:59:f3:bb:30:97:7b:79:ed:
         b7:e7:31:62:a2:5b:2b:53:60:ab:d1:0f:82:d9:7e:6b:a0:1d:
         5e:c1:22:cc:a2:c4:76:97:e9:b1:7f:18:15:4c:2f:32:6c:32:
         ba:c6:3c:e7:1a:c4:ad:d0:37:8f:2a:f0:c0:4d:e0:1e:a2:46:
         e4:4b:3e:94:07:bf:21:c2:75:8f:f5:1a:31:09:af:03:55:d0:
         6b:af:a9:a4:96:b7:d6:5a:9d:c4:32:7d:3e:bd:68:b0:e4:30:
         97:4c:c2:5f:f4:ae:ec:70:b4:60:42:ed:7b:b0:b0:c5:d9:c6:
         40:44:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:22 2026 by rpki-client