Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
File:                     A576C5087C3311F1890EBC415EA30FBC.roa (raw, json)
Hash identifier:          OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=
Subject key identifier:   00:1B:72:E3:FC:2F:C5:F5:83:F2:A1:96:89:46:89:0E:61:1D:1B:9A
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08D2
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
Signing time:             Sun 02 Aug 2026 21:40:45 +0000
ROA not before:           Sun 02 Aug 2026 21:40:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     17408
IP address blocks:        103.3.28.0/24 maxlen: 24
                          103.3.29.0/24 maxlen: 24
                          103.3.30.0/24 maxlen: 24
                          103.3.31.0/24 maxlen: 24
                          103.37.236.0/24 maxlen: 24
                          103.37.237.0/24 maxlen: 24
                          103.37.238.0/24 maxlen: 24
                          103.37.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Aug  2 21:40:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6fb95d-84d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:c8:be:61:e7:6a:f4:93:ea:42:30:3a:60:
                    6a:20:58:5b:15:d9:13:4a:bd:e4:e3:83:b0:a7:6c:
                    74:d9:95:4b:47:5f:e0:bf:a4:7f:6b:3e:cc:d1:8a:
                    37:cd:66:9e:1e:28:74:4b:0b:27:b8:80:d9:5a:63:
                    1f:3d:2e:fe:78:dd:ef:17:14:ca:a7:e9:0b:06:ba:
                    0c:81:b2:93:ee:23:68:67:09:18:06:58:3d:d7:f6:
                    93:06:b0:63:87:52:bb:30:7c:f6:ab:1e:cb:2e:2d:
                    7f:1f:49:85:4f:c5:86:b3:8a:ce:7b:76:8c:18:dc:
                    3b:1e:f6:88:d6:0b:16:d4:a3:70:92:93:3b:8d:95:
                    09:3a:0a:9c:1e:d5:9c:c6:85:2c:00:7b:61:d8:52:
                    bf:6e:d0:5a:b3:74:d0:8c:71:86:4a:7e:07:f9:2f:
                    b6:f3:fe:99:af:e4:3f:3c:b4:7f:b6:7c:d0:55:2e:
                    a2:49:5e:b8:38:de:32:2d:61:ca:32:d3:17:1f:0d:
                    0e:71:a5:1d:5b:2a:e9:ca:43:7a:61:73:13:de:50:
                    65:75:3b:f7:74:ad:72:e7:9a:11:3f:fa:19:d4:a9:
                    0d:65:15:c9:29:8a:47:90:2f:94:ab:87:40:a6:67:
                    98:08:f4:4e:72:dd:39:37:ee:3f:7b:db:56:b8:8c:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:72:E3:FC:2F:C5:F5:83:F2:A1:96:89:46:89:0E:61:1D:1B:9A
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.28.0/22
                  103.37.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:01:31:d6:9b:95:f0:0a:c4:11:93:23:9e:40:0d:c4:b9:
         d9:d7:66:44:0e:6a:b8:a0:48:c0:5e:f5:0a:a8:6e:de:a6:f9:
         8c:60:46:59:58:27:76:cc:ac:56:5d:c1:82:77:0d:79:8d:8f:
         4b:96:4b:2c:38:ef:6d:bd:63:65:99:e2:6a:92:b1:03:35:01:
         e6:3d:b7:b8:83:f6:89:e1:d6:0f:65:c0:c6:0f:b5:70:a8:19:
         19:44:75:66:72:05:b8:10:1c:fc:8e:ca:68:9f:a7:98:96:83:
         d3:08:89:9a:3f:73:9b:88:5b:9a:27:c8:ce:9e:35:17:72:52:
         0f:3d:fa:40:fc:7e:0b:a1:ab:e1:f5:48:2a:35:d3:4d:92:ff:
         26:90:be:61:bf:4f:87:ef:84:35:43:b8:9d:25:05:d0:de:c5:
         7c:6b:74:ac:83:18:3b:11:5d:84:9c:6a:97:01:19:7c:2d:fe:
         fc:1d:6c:25:19:14:87:9d:a8:35:ab:76:d3:37:1d:91:09:76:
         7e:c2:31:3e:e1:6e:e2:a1:1b:ad:12:6e:66:c4:e5:2a:6c:b5:
         bb:06:5d:05:b2:49:60:06:45:97:8f:25:97:4a:fe:c6:f2:3d:
         ff:68:be:48:b2:2a:cb:1a:bd:f3:9f:c6:58:70:14:73:6f:5e:
         99:41:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:53 2026 by rpki-client