Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa
File:                     6F96208C227011EBA0973F7FC4F9AE02.roa (raw, json)
Hash identifier:          AKDjbSZne5XxGKQtHpttzZyR3FFgT6uv/1fH/ygYHPk=
Subject key identifier:   53:2C:D2:08:77:71:2F:F8:60:81:82:BE:86:ED:CA:CA:31:CE:1D:B0
Certificate issuer:       /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial:       0838
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 21:42:06 +0000
ROA not before:           Fri 31 Jul 2026 21:42:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137895
IP address blocks:        103.116.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
        Validity
            Not Before: Jul 31 21:42:06 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d16ad-5fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:ff:47:80:7d:a3:6f:c7:8a:e1:b7:c2:55:
                    15:32:80:aa:12:4c:c8:4f:f9:37:e6:87:26:c5:a5:
                    22:54:d9:4f:6f:00:3c:5f:2b:14:eb:3e:33:e0:b5:
                    4f:f2:61:33:69:3e:4c:39:39:42:34:b7:c7:21:35:
                    02:b1:f7:ea:50:0b:c0:1d:d0:9f:03:b9:18:3e:e4:
                    20:7e:4f:41:62:25:10:7e:c3:60:54:fd:40:af:db:
                    f3:6d:ed:78:5a:3f:6f:1d:ad:12:c4:ea:10:28:b3:
                    35:80:dc:2a:9c:fe:19:ba:64:6e:2d:ef:94:2a:4b:
                    d9:8c:12:07:74:ab:88:3b:07:f5:56:ab:db:80:50:
                    77:46:a6:78:a6:9d:4f:25:5c:3f:de:75:98:36:dd:
                    20:56:bf:73:7b:ac:72:85:78:e0:7f:6d:c3:60:bf:
                    e5:7b:e6:bb:e7:53:91:be:02:c7:45:09:66:e5:ba:
                    a8:5a:6f:08:0c:f5:79:eb:81:ef:c0:3f:a0:2e:91:
                    7c:fe:88:bb:e2:77:84:89:53:96:da:b9:c6:19:3f:
                    82:8e:7d:21:ee:71:5f:5f:ee:39:89:96:c9:d8:91:
                    98:b6:f4:55:bd:5f:10:d7:44:5d:60:41:1c:26:63:
                    e5:97:a6:e0:73:aa:60:bd:53:80:9a:dd:66:80:39:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:D2:08:77:71:2F:F8:60:81:82:BE:86:ED:CA:CA:31:CE:1D:B0
            X509v3 Authority Key Identifier:
                keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/6F96208C227011EBA0973F7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:e3:cb:7d:1f:99:43:cc:15:40:c9:35:46:c8:ae:51:fa:
         75:85:8f:09:ce:ca:72:38:e4:d3:4b:86:31:27:41:2b:90:30:
         8b:bf:63:29:79:02:fd:b6:b5:42:1a:27:23:44:a5:35:fe:f3:
         f0:f1:32:4c:28:8e:a8:ce:41:f7:cc:6f:26:f5:5a:44:64:eb:
         e2:4c:5d:41:4b:3f:cf:80:13:2e:95:84:3d:1f:5b:1f:bd:9a:
         69:b0:a0:87:6a:e7:12:29:4f:95:7e:2a:70:e3:ee:ff:83:80:
         44:97:7c:04:86:93:78:ea:52:3f:7f:65:d0:0d:ae:07:32:6b:
         35:1e:1d:a0:5a:74:d5:81:b8:47:27:80:46:5c:40:aa:f6:04:
         33:0f:a8:da:a1:6d:37:d9:69:fa:e9:59:56:47:f8:20:b9:0d:
         61:23:9a:d7:8f:53:3c:6f:ce:aa:37:cc:3e:4e:f7:9a:c9:ef:
         03:cc:c4:75:7d:e4:98:c0:a9:a4:de:fa:83:00:30:4c:82:f3:
         9c:fc:2f:d1:c0:55:4a:90:30:b3:07:90:0e:1d:4f:08:03:c8:
         d0:25:bc:37:89:a6:f3:d2:9d:d4:ea:46:0a:ae:f9:de:40:46:
         80:d2:b6:2c:fe:9e:b6:d1:e4:73:6f:39:74:ca:1d:43:0f:5b:
         ff:42:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:39 2026 by rpki-client