Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/B0562E7AEC6E11EEB7FC060BC4F9AE02.roa
File:                     B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (raw, json)
Hash identifier:          VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=
Subject key identifier:   45:1A:BA:CE:B1:BF:AA:35:4D:96:D1:31:5A:03:9B:82:AE:9F:4F:0C
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0277
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/B0562E7AEC6E11EEB7FC060BC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 03:52:32 +0000
ROA not before:           Fri 31 Jul 2026 03:52:32 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55020
IP address blocks:        103.112.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 03:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul 31 03:52:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c1c00-f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:93:51:06:f3:18:fb:f6:be:68:d4:42:8c:
                    79:80:c0:dd:78:ea:bd:30:4c:01:50:46:36:d6:e7:
                    8c:78:3a:fa:95:5c:3c:37:e2:30:ab:9f:af:8f:0e:
                    15:cf:82:e7:67:ab:c0:bb:fb:ba:10:e4:82:fd:cc:
                    39:01:b1:47:f9:2a:28:db:29:04:ed:c0:31:e8:4d:
                    d8:dc:63:be:eb:1a:6c:35:68:37:f2:12:a0:91:b7:
                    80:2a:6f:5e:f0:ed:0c:80:f0:a5:8e:10:d5:48:da:
                    86:88:e4:db:c9:6d:e8:69:e7:69:ca:95:91:18:8f:
                    a4:11:52:71:e1:ea:0e:df:97:22:33:20:96:fa:58:
                    e0:5e:80:86:48:8c:0c:03:68:85:d9:2b:b5:cb:8a:
                    b9:37:dc:1b:0a:b9:2c:81:12:45:c9:ff:88:20:91:
                    54:22:cd:f9:a6:01:fe:53:48:e8:83:ac:99:e5:44:
                    f5:61:d3:bf:a3:f4:9d:52:00:7c:81:04:07:18:e3:
                    f3:f8:6b:95:7b:6e:e0:28:61:62:d0:96:1d:f7:41:
                    28:ea:ba:51:e4:46:a1:53:d7:c5:63:85:fd:b8:57:
                    00:1f:5f:03:ae:58:9b:89:44:8b:94:85:f6:16:17:
                    84:b5:c4:9d:a9:a2:d1:b2:42:e9:13:b2:86:06:29:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:BA:CE:B1:BF:AA:35:4D:96:D1:31:5A:03:9B:82:AE:9F:4F:0C
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/B0562E7AEC6E11EEB7FC060BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:ed:50:6f:4b:5b:8a:36:73:d4:11:65:d6:18:0b:8a:5f:
         ce:bf:ce:a5:cb:b9:16:c9:69:a8:fa:1e:5d:90:1e:37:e2:cb:
         f2:8c:e3:69:f5:c2:e5:34:be:07:ea:71:e7:13:2f:37:65:9a:
         96:ce:5a:c7:28:51:d9:f7:2b:b0:bd:c3:c0:0a:ec:ce:ad:f7:
         8a:54:9b:13:d0:f5:07:ca:f9:1d:19:94:74:de:f0:74:80:1b:
         16:86:f5:17:8a:c9:d5:45:06:66:c1:6d:7f:41:70:9c:84:9f:
         02:7d:5a:3d:ef:74:86:fd:44:27:14:5e:3f:43:e9:c9:68:37:
         86:aa:2d:92:38:f2:a0:7b:65:f9:9b:cb:6c:4a:9d:8c:df:5f:
         ff:58:b4:a7:8e:49:ea:b8:ed:67:8d:87:6f:50:9c:14:6c:6a:
         f5:2d:b7:2a:d3:66:ae:89:8f:5d:12:da:2c:5a:61:68:29:01:
         17:16:aa:94:6e:b6:40:9a:3a:30:1d:92:26:25:71:fd:7d:57:
         eb:22:76:f7:89:d4:51:dd:3b:22:af:e8:9e:26:54:fb:fd:8d:
         9f:ab:0c:f6:19:04:5d:4d:6a:f5:89:1a:27:89:bb:06:ae:86:
         e8:06:7c:39:fa:47:7d:60:d9:b9:eb:ee:e5:00:9a:8a:38:49:
         70:83:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 21:48:35 2026 by rpki-client