Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
File:                     A6CBF914AC3411EDB324F037C4F9AE02.roa (raw, json)
Hash identifier:          4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=
Subject key identifier:   1A:90:8D:9B:1E:42:89:A0:12:3A:55:8B:0B:4D:45:F2:88:81:D7:71
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       0268
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
Signing time:             Fri 15 May 2026 02:33:32 +0000
ROA not before:           Fri 15 May 2026 02:33:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        103.186.106.0/24 maxlen: 24
                          103.186.107.0/24 maxlen: 24
                          2400:6fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: May 15 02:33:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a0685fc-d7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:77:d8:e2:ab:ee:d3:c1:40:f6:7d:13:90:
                    41:11:66:4f:39:ba:d7:a5:4e:84:da:bd:7b:96:81:
                    09:ad:f5:e5:26:c4:fc:5a:1c:41:17:93:47:2d:34:
                    ad:62:61:cf:5b:91:27:36:49:75:4e:e1:d4:8e:4e:
                    7b:f5:a8:30:20:64:a6:15:de:e5:33:3c:ac:76:3a:
                    78:3b:64:ee:49:8c:2d:60:68:9d:00:91:01:47:fb:
                    43:08:0d:92:d0:24:c1:56:ba:94:29:10:a0:ad:91:
                    fd:fa:3d:c4:1d:b8:e8:ee:73:20:a6:84:3a:a8:33:
                    09:8d:db:71:0e:94:af:82:44:c5:38:fc:d6:11:b1:
                    82:18:30:9b:9f:b2:97:af:2b:60:04:68:7d:66:0c:
                    22:d6:23:b4:72:33:7d:c0:27:f7:b4:77:ae:e6:16:
                    3a:aa:62:16:3d:5c:b9:d7:1e:35:13:02:51:bd:50:
                    f1:f3:71:2a:ed:09:ad:ae:83:30:b5:87:cd:08:06:
                    26:b3:d5:9a:8a:5b:43:8f:16:d6:1f:63:ed:1d:4c:
                    95:30:21:8d:8b:91:94:a4:c8:53:c6:52:bd:d6:91:
                    c3:fa:be:0c:92:2a:70:c4:d6:1f:f5:c8:6d:26:68:
                    2d:76:2e:d3:ad:db:b9:6b:db:4d:6a:bb:5a:e6:e1:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:90:8D:9B:1E:42:89:A0:12:3A:55:8B:0B:4D:45:F2:88:81:D7:71
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.106.0/23
                IPv6:
                  2400:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:c2:f2:d8:ce:1a:e9:de:48:05:59:78:54:83:01:e3:fc:
         60:c6:b1:0d:9f:1d:47:4b:01:a7:31:40:32:67:f1:79:3a:36:
         24:fe:e1:85:28:33:1d:d7:9a:bf:97:30:db:41:09:d3:69:89:
         6a:09:4e:ff:f0:de:24:a1:79:08:c4:34:f3:8e:ad:b3:62:19:
         96:24:74:ad:d0:a1:f5:dd:93:9f:96:31:0a:b4:50:f0:bd:52:
         cc:fe:58:cf:f6:62:cb:10:1a:fd:ac:5b:75:e0:3c:50:e8:d6:
         05:a0:80:ec:b9:84:81:13:ff:2b:1d:18:fe:aa:ac:4f:7e:26:
         e9:ce:ac:d5:4b:92:d3:86:a9:b3:0a:3b:6d:81:f5:4a:9c:a2:
         51:b2:bb:27:96:57:a1:66:0f:9d:1c:d3:37:c3:25:ea:f1:a0:
         b1:3b:1b:9a:6d:87:e2:28:58:94:d6:06:8f:6b:ee:82:85:81:
         b6:e0:ed:7c:83:e8:2b:bd:3a:7e:7d:84:c5:ac:4a:49:45:02:
         5b:47:68:d1:aa:bd:ef:f5:dd:8d:eb:4a:9f:36:2b:65:9a:b4:
         89:14:55:34:87:65:a2:9e:25:37:c1:cc:fd:28:3f:f4:f0:b7:
         2c:29:1a:35:a4:6a:ec:70:f8:25:e9:08:3f:2b:dc:cd:14:9d:
         a2:c9:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:20 2026 by rpki-client