Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa
File:                     259AE280753B11EEBF306F35C4F9AE02.roa (raw, json)
Hash identifier:          E4Y9QPn+xcy7P4zdxEptGe2zWsqk41picjIe2K8p6DU=
Subject key identifier:   9C:F3:29:68:DC:63:5A:EF:23:A6:52:41:02:2E:F2:D2:8E:83:57:84
Certificate issuer:       /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Certificate serial:       021B
Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa
Signing time:             Sat 15 Aug 2026 03:52:28 +0000
ROA not before:           Sat 15 Aug 2026 03:52:28 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151408
IP address blocks:        103.224.94.0/23 maxlen: 24
                          2401:8b20::/32 maxlen: 32
                          2401:8b20::/34 maxlen: 34
                          2401:8b20:4000::/34 maxlen: 34
                          2401:8b20:8000::/34 maxlen: 34
                          2401:8b20:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
        Validity
            Not Before: Aug 15 03:52:28 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7fe27c-554a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:a8:7b:cd:6d:67:ce:40:11:7d:9d:f2:36:
                    2c:ad:6e:91:12:34:0f:3a:28:06:0b:11:65:c6:60:
                    80:fe:b7:d6:db:1b:5d:b8:10:52:b3:fa:b9:e3:ca:
                    e4:6f:a4:28:94:c5:02:a4:5f:bb:f4:cd:20:b5:42:
                    a5:22:ec:68:00:4b:17:d1:d9:5c:4e:88:72:0e:6c:
                    5e:c0:0f:3c:26:11:af:10:a2:5c:07:d0:75:d2:9c:
                    a0:4b:f6:07:5a:b4:a6:45:e7:2f:d2:7f:66:8b:f6:
                    aa:99:ce:09:69:12:ef:51:a8:19:b3:4f:d9:c8:7b:
                    78:2e:0f:ec:b6:bf:06:88:6c:e2:4f:b2:ff:03:09:
                    3f:e0:a1:d5:5e:ba:21:35:48:46:9b:c7:18:6d:6a:
                    e8:3a:8b:69:df:71:02:06:7d:c3:8f:fb:3a:4c:38:
                    9a:a2:57:97:c7:fa:0a:25:0d:d0:ff:10:4d:33:67:
                    e6:d8:90:85:bc:9d:1e:4c:22:19:f3:54:e4:ff:77:
                    5a:67:08:d8:db:ab:d5:b6:2b:ff:25:41:63:b3:f4:
                    db:7a:e5:ec:f2:12:43:68:8e:8b:ac:55:d0:8a:28:
                    2c:02:53:b4:09:76:e3:0b:17:ac:6d:cd:58:eb:f7:
                    f7:8c:17:e6:d0:2e:b3:be:51:b3:3d:a2:54:76:d1:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:29:68:DC:63:5A:EF:23:A6:52:41:02:2E:F2:D2:8E:83:57:84
            X509v3 Authority Key Identifier:
                keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.94.0/23
                IPv6:
                  2401:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:a9:55:35:78:7e:f6:b9:12:1a:be:5c:9d:9e:3b:95:d3:
         f5:a0:9b:7f:a8:56:f5:dc:a4:68:89:2b:a0:11:55:80:3c:22:
         45:49:7a:b5:c3:3e:dc:30:e3:76:1f:96:ef:00:49:57:14:0e:
         fa:f2:2f:1b:2e:19:89:d0:33:67:57:6d:51:a2:1f:92:03:84:
         1d:9e:df:6a:41:54:02:cc:2a:0b:9d:13:0e:a1:a0:81:bd:a2:
         b2:13:f8:42:35:ef:a6:03:7d:6a:a0:da:28:3c:78:c8:4a:0a:
         27:00:19:b9:20:2c:b1:29:26:a8:68:09:fc:87:3b:3c:5c:f3:
         3a:97:83:29:e0:43:38:24:78:13:06:4f:1d:49:98:85:cc:b9:
         f4:f4:f8:4a:8b:7e:77:62:64:05:59:54:eb:e5:9e:5d:89:81:
         fb:4d:4b:53:52:1f:98:9d:e2:3c:86:2a:3f:37:7a:67:fd:a9:
         83:e3:87:cd:9c:96:80:55:8c:ee:92:be:1a:e9:7e:d6:7f:85:
         cd:87:c1:5a:5d:df:6c:f2:cc:c3:0d:b6:ed:b6:23:0f:3a:99:
         22:64:79:5c:38:c4:9d:10:a8:9e:ef:3d:07:bf:72:b6:64:e2:
         80:b3:dd:f8:59:36:46:18:be:e2:3b:94:45:4e:fb:92:3b:5a:
         17:24:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:30 2026 by rpki-client