Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa
File:                     725132DE609611F1B8BC3DA77347A888.roa (raw, json)
Hash identifier:          g9T7mI2FiochD6u/C3wAQnL3Ac99kr1iU8sDBlAb9Rs=
Subject key identifier:   DF:27:8B:95:86:D0:D5:63:FC:23:8D:74:96:04:3A:E7:3B:77:5A:9C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6C9E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa
Signing time:             Fri 05 Jun 2026 04:24:30 +0000
ROA not before:           Fri 05 Jun 2026 04:24:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140817
IP address blocks:        103.20.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 06:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27806 (0x6c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jun  5 04:24:30 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a224f7e-d56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:75:18:a0:df:00:54:3c:42:ae:83:c9:f2:
                    8e:2d:3e:37:a0:73:2c:c8:12:9a:cf:84:b1:07:5d:
                    a4:e0:5f:ed:b3:b1:06:f1:07:4d:b4:e3:a0:ff:53:
                    62:b7:ba:66:f4:89:e2:83:02:dc:c2:5e:e2:28:6b:
                    23:0c:53:59:e9:b2:82:a7:a2:5e:86:cb:73:a5:8c:
                    1c:2f:8a:3e:cf:b9:ca:ad:c4:d4:f7:3e:03:a7:d8:
                    bd:fe:52:94:57:bf:64:28:6e:65:f1:db:0a:a9:02:
                    7d:c4:82:42:08:9b:18:0a:17:3b:fc:20:ac:5a:40:
                    95:77:21:b4:f7:1f:29:f2:be:e6:cb:ff:7f:48:2a:
                    d1:fc:62:e5:ac:f7:58:3a:2d:be:18:19:b8:51:09:
                    b4:fe:90:44:ed:62:b6:9a:7a:44:1f:ef:7d:69:53:
                    ea:8e:c9:79:f1:da:64:98:9e:ac:f0:eb:65:61:e4:
                    e2:96:c3:dc:af:36:24:5f:60:0c:c7:90:f8:23:99:
                    cd:93:82:5e:f1:43:10:5f:c1:9f:59:ff:e1:15:3b:
                    62:47:7f:8d:b8:b6:9d:9a:7c:a4:4d:37:97:dc:31:
                    17:a3:23:e7:8e:e7:31:50:1b:47:17:aa:66:49:51:
                    d5:9f:af:da:f8:34:f4:36:a6:f9:3f:26:47:69:44:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:27:8B:95:86:D0:D5:63:FC:23:8D:74:96:04:3A:E7:3B:77:5A:9C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:a0:e4:f1:62:6b:a1:5c:2c:39:c8:dd:e8:f4:f9:71:f3:57:
         e7:05:db:e8:37:f5:1a:93:0d:52:b3:e4:fe:c3:bb:70:d3:b6:
         7e:fb:fd:6b:fc:7a:0c:1d:4c:a1:c2:95:ea:ab:08:16:cb:58:
         97:2e:a3:58:83:e9:39:31:bb:5c:9e:b9:6f:41:f6:87:92:98:
         b2:d1:26:2c:42:f0:b2:dd:07:a5:2d:f2:1e:46:eb:a7:67:fb:
         24:de:a7:15:e4:d9:f8:ad:d8:a1:14:35:7c:c7:7d:4b:aa:79:
         46:cf:06:91:2b:c0:d4:e5:85:90:fe:f2:b1:d2:09:aa:27:5b:
         87:e7:0c:08:0f:f2:2c:d2:75:c1:80:16:17:77:76:95:93:8e:
         43:4c:bd:13:79:ed:7c:93:f1:c3:4e:2d:d2:c2:87:b0:0b:1c:
         93:4e:e0:5c:e1:a9:69:6f:fb:36:ba:ce:55:b3:70:5f:4f:b6:
         68:f2:55:0c:63:77:50:37:f2:f4:a3:71:c1:c8:30:09:f5:79:
         8a:43:01:6b:13:7c:d3:2e:be:47:8e:cb:d7:50:7f:96:88:db:
         5c:06:d9:24:90:b1:29:48:b3:fd:ca:50:99:a9:35:08:08:1f:
         e7:73:9a:b4:71:22:1e:a1:c7:e3:63:8f:ef:a5:fb:95:06:f6:
         29:06:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:57 2026 by rpki-client