Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
File:                     1069D50EB54B11F092E79246C4F9AE02.roa (raw, json)
Hash identifier:          GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=
Subject key identifier:   F4:C8:38:A0:CA:B8:FB:3F:C3:BA:71:5E:99:B6:0C:7F:09:87:04:D0
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08D0
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 21:40:41 +0000
ROA not before:           Sun 02 Aug 2026 21:40:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151622
IP address blocks:        103.8.21.0/24 maxlen: 24
                          103.8.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Aug  2 21:40:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6fb959-b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:0a:da:30:88:f3:e3:7c:2d:59:20:52:69:
                    f3:8a:84:7a:ed:e4:b2:d9:00:82:bb:13:bd:a8:2d:
                    3f:06:67:cc:a6:7a:ee:c1:7d:3e:ab:2e:2a:96:f4:
                    f1:47:1f:34:60:20:eb:7f:80:d5:64:cc:7e:5a:03:
                    b7:13:b3:ae:e8:f3:6a:d6:5a:7e:7d:99:4f:51:c3:
                    63:37:a5:49:2b:d2:63:fd:41:b5:62:a7:86:61:42:
                    72:3e:e5:43:c8:54:4d:7e:6d:97:e9:2d:ad:da:5e:
                    f8:68:d5:17:1c:84:ce:3b:84:3e:0d:d4:c4:81:f3:
                    7a:5f:82:d4:b8:62:5f:d2:72:ac:61:a6:17:6f:7a:
                    f0:39:81:00:e2:f3:04:e8:19:3f:fd:3c:ca:b0:57:
                    20:ea:10:02:37:69:35:57:20:11:88:4c:e3:32:0b:
                    ab:de:f4:46:68:ca:22:1d:31:25:38:45:cb:e0:64:
                    27:c2:ab:8f:97:dd:69:29:43:b2:95:46:3d:98:64:
                    26:bb:71:98:dc:f4:e2:b2:13:5e:7b:f0:4b:d9:df:
                    94:d0:71:62:6a:0e:bc:d6:02:ae:71:c9:27:8f:5e:
                    74:08:b5:7b:33:0e:1a:4e:8b:41:d3:98:ad:5e:a1:
                    b9:82:09:2e:14:d1:47:b3:5e:d7:32:57:eb:9e:44:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:38:A0:CA:B8:FB:3F:C3:BA:71:5E:99:B6:0C:7F:09:87:04:D0
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.21.0/24
                  103.8.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:b4:c6:f3:9c:c2:42:e8:e1:c0:75:ad:71:17:ac:24:04:
         0e:37:db:8d:a4:0c:5f:7e:de:7b:f7:31:aa:5f:2b:d4:25:31:
         8f:6a:36:8b:4d:44:fa:f0:28:76:a0:c1:dd:d5:5b:10:59:fe:
         c6:da:36:ab:ee:f7:b7:ff:18:ad:25:cb:1d:a3:52:74:b2:35:
         e3:66:e4:00:a4:39:7e:8d:a6:2b:38:31:a3:64:7b:e6:df:75:
         df:28:4e:65:86:66:d7:bd:2c:3f:78:37:6b:5b:be:df:d9:00:
         a4:95:10:51:c2:21:fc:23:9f:bb:ca:87:e4:f3:cd:39:63:69:
         01:fa:00:d1:f5:91:6b:8c:6d:c3:38:7e:98:22:6b:4a:56:e5:
         cf:ee:96:3f:85:43:2b:a7:af:4f:35:b0:56:29:39:a9:95:f6:
         39:92:83:b6:5f:81:52:c1:26:98:c5:0e:bd:46:38:a6:1e:89:
         83:3e:43:9a:08:81:1d:57:85:c2:8a:48:0e:22:de:14:24:6f:
         05:82:e4:c2:69:fd:48:a6:b8:d5:e0:fb:d5:af:8a:a5:0b:63:
         ef:51:1e:0a:17:15:19:8e:dd:b0:10:93:e0:81:63:85:d7:b6:
         11:cc:c5:26:97:ea:49:09:ac:18:b1:4d:28:dd:85:9c:95:90:
         b7:f3:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:19:27 2026 by rpki-client