Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa
File:                     47C07DB84F9C11ED8B9E4333C4F9AE02.roa (raw, json)
Hash identifier:          IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=
Subject key identifier:   D5:EF:94:6D:66:70:EB:F6:B6:C5:DB:0D:4C:84:43:43:83:3B:A1:BD
Certificate issuer:       /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial:       0357
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa
Signing time:             Sun 07 Jun 2026 01:30:38 +0000
ROA not before:           Sun 07 Jun 2026 01:30:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     23966
IP address blocks:        103.189.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
        Validity
            Not Before: Jun  7 01:30:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a24c9be-83f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:b4:c9:ec:2c:ee:68:8f:73:84:2b:7f:26:
                    7e:da:53:02:4d:1b:60:33:a0:de:a5:b8:80:fd:0f:
                    96:02:7e:f7:af:8a:24:d0:4b:b1:20:35:2d:4d:0c:
                    22:91:40:8f:03:b4:d6:93:2a:96:96:b5:68:2d:eb:
                    5e:6f:35:6a:f4:e2:3b:9f:64:ac:ff:56:be:b2:4f:
                    3a:6e:56:92:35:de:89:d8:57:49:21:cd:df:82:d2:
                    33:57:3b:98:6d:61:8c:73:64:4a:6b:a3:27:cd:60:
                    bf:95:0c:6a:44:cb:e1:64:e2:d0:cd:d5:88:e7:65:
                    2a:b1:17:8a:59:bc:ae:b2:86:5b:07:d5:32:73:59:
                    2b:9e:08:b3:34:b9:c4:a2:ec:02:1f:da:aa:fe:6d:
                    90:d7:4d:a2:0b:de:ff:bb:97:b5:4a:a8:7b:b3:b6:
                    c9:20:ca:28:61:a6:b4:fe:33:9f:4e:b3:6e:74:dc:
                    15:80:13:22:2f:ca:df:16:f4:b0:c9:dd:00:db:ba:
                    08:d7:30:9b:b4:ca:b4:79:25:5a:b0:70:7a:e1:7e:
                    fb:ee:ca:8a:ac:69:4c:b5:73:09:db:86:9d:c4:42:
                    78:24:5a:2c:3d:ee:bf:96:38:61:63:91:7e:94:9c:
                    91:61:e9:92:eb:1e:85:78:15:16:d9:b4:0d:f5:3d:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:94:6D:66:70:EB:F6:B6:C5:DB:0D:4C:84:43:43:83:3B:A1:BD
            X509v3 Authority Key Identifier:
                keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:1d:45:0c:ac:eb:62:1c:fb:2e:19:d7:2d:16:bc:30:d2:
         2b:76:e8:19:aa:71:97:70:47:a2:66:d5:99:4e:0a:55:86:02:
         88:73:e5:28:4d:49:02:a3:11:11:56:fd:e9:af:81:c1:b0:7d:
         4a:e9:25:67:f5:41:0c:f2:0c:8e:72:1f:86:1d:ac:f4:d3:68:
         f2:67:6c:bd:fb:1f:2d:00:d3:d9:6e:14:be:bd:95:7e:b0:96:
         f9:48:b6:ce:fd:5c:86:a4:5f:ca:da:43:25:42:f5:ce:7e:1b:
         52:01:ee:ae:9f:c4:8f:ba:7a:6b:b6:21:e1:a4:49:7c:f3:b5:
         0c:ac:98:22:42:0f:0e:00:f1:29:b5:2a:c9:0b:df:36:62:1b:
         1e:3c:0a:b1:fe:f0:a8:cb:2b:c5:20:5f:fe:8d:e1:74:3b:4b:
         ec:ef:1d:af:58:87:7f:c6:e1:ca:36:a1:0f:f9:95:0b:0f:53:
         37:17:62:10:98:20:9f:f1:a3:b1:a9:00:a3:72:a4:f6:33:dc:
         95:97:e4:2b:fb:da:de:2d:a5:40:6b:3c:1e:57:9a:92:c7:87:
         54:73:48:53:7b:c6:78:80:f4:a1:b2:0b:11:7e:0e:4c:98:99:
         d0:aa:5d:26:c6:d2:36:05:97:e3:30:e5:39:fd:0a:0e:b7:d6:
         d8:73:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:42:07 2026 by rpki-client