Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/61138FD0708111F1AFA81DDF7CA30FBC.roa
File:                     61138FD0708111F1AFA81DDF7CA30FBC.roa (raw, json)
Hash identifier:          UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=
Subject key identifier:   D3:6E:89:4C:B0:05:EC:52:F7:A1:10:0D:2D:FA:96:C1:CB:03:F2:D8
Certificate issuer:       /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial:       044B
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/61138FD0708111F1AFA81DDF7CA30FBC.roa
Signing time:             Thu 25 Jun 2026 10:34:01 +0000
ROA not before:           Thu 25 Jun 2026 10:34:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        103.185.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
                          rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 00:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
        Validity
            Not Before: Jun 25 10:34:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3d0419-51df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:bd:3d:18:fd:ef:4b:09:35:f2:58:51:4d:
                    49:ff:a9:eb:04:ea:96:78:34:17:39:3d:c1:62:34:
                    01:ee:f2:54:d1:79:c6:8f:35:3d:5d:c2:98:9e:70:
                    6d:cd:24:70:65:cf:db:c3:45:21:6d:0c:3b:88:a8:
                    17:4b:ec:22:74:83:3a:72:0f:15:c9:d8:6b:bc:94:
                    2f:7d:d7:59:5c:10:64:8a:15:a2:20:fa:87:9b:d4:
                    54:f0:da:3f:00:70:05:f6:82:c0:fe:b7:8b:ed:d9:
                    29:5a:72:11:61:c7:53:73:11:c0:eb:3f:15:f4:e2:
                    cf:ea:93:fc:20:09:cd:9d:e2:52:30:61:cb:f5:e9:
                    20:ef:95:cd:ee:07:7b:a7:90:f3:d8:24:6c:d1:60:
                    89:64:59:16:bb:06:1b:88:3b:4f:f3:f0:63:32:b7:
                    51:a5:e3:ae:95:be:d5:ba:20:56:21:f8:02:be:d1:
                    79:c8:d8:f7:f9:6b:2a:bc:cc:39:83:88:e4:76:c1:
                    f8:ab:4e:a6:bf:75:a3:2a:66:90:8c:75:e0:05:9c:
                    f9:2a:ac:c3:89:3a:c3:da:72:15:be:e9:f8:3a:29:
                    2d:7b:38:90:0f:2a:a7:d5:ce:01:da:3d:79:02:94:
                    47:49:39:5a:bb:e7:4a:0c:96:e3:c9:5e:cd:b7:dc:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:89:4C:B0:05:EC:52:F7:A1:10:0D:2D:FA:96:C1:CB:03:F2:D8
            X509v3 Authority Key Identifier:
                keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/61138FD0708111F1AFA81DDF7CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:99:d0:61:7d:aa:59:9a:46:2b:db:4b:ff:ae:5c:47:3a:6b:
         3d:b9:1e:e2:ec:10:fa:45:a0:cb:a0:df:54:3b:02:16:d7:8e:
         67:c9:eb:ef:49:d9:71:c4:e5:62:6f:c4:e6:3e:29:e1:48:f9:
         b5:99:b0:ea:7f:cf:a1:c5:1f:41:e3:5d:82:48:f2:20:80:68:
         76:05:cf:18:37:8c:f5:b3:e4:62:b1:cb:df:69:02:9d:9d:3c:
         60:4a:1c:16:8c:0e:63:ba:b9:0e:45:18:25:6a:3d:ed:67:79:
         1d:cb:8c:e8:74:4f:44:04:60:a9:c5:f8:58:87:27:5b:1a:fd:
         b8:94:eb:e5:2a:3e:8b:3c:de:14:71:86:b3:11:87:29:75:d3:
         d0:ca:e3:7a:46:ea:c8:7c:4f:5e:ac:b5:51:d7:e9:59:c0:22:
         72:86:6f:01:29:f1:c6:6b:43:0d:81:19:21:1c:b9:af:28:62:
         aa:27:4c:77:ab:a6:d3:79:cf:d7:53:cb:e9:7e:f8:17:dc:7e:
         da:67:8b:21:d0:27:61:c0:3f:e5:10:74:dd:12:49:9d:60:95:
         b3:f5:9f:aa:4e:d2:1f:58:39:04:23:20:b9:e9:ff:b2:09:03:
         72:61:74:ee:cb:97:45:7c:bb:5c:9a:72:85:14:2e:3b:db:69:
         ea:2b:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 11:01:53 2026 by rpki-client