Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa
File:                     A05116766B2311F1965223AA8747A888.roa (raw, json)
Hash identifier:          FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=
Subject key identifier:   E0:6C:01:14:2F:A3:73:0D:CE:7B:D3:5A:D1:28:50:EB:24:78:05:21
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       358F
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa
Signing time:             Thu 18 Jun 2026 14:41:14 +0000
ROA not before:           Thu 18 Jun 2026 14:41:14 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     62597
IP address blocks:        103.35.248.0/24 maxlen: 24
                          103.35.249.0/24 maxlen: 24
                          103.35.250.0/24 maxlen: 24
                          2402:cf80::/32 maxlen: 32
                          2402:cf80::/48 maxlen: 48
                          2402:cf80:100::/44 maxlen: 48
                          2402:cf80:1000::/48 maxlen: 48
                          2402:cf80:1003::/48 maxlen: 48
                          2402:cf80:1004::/48 maxlen: 48
                          2402:cf80:1005::/48 maxlen: 48
                          2402:cf80:1006::/48 maxlen: 48
                          2402:cf80:1007::/48 maxlen: 48
                          2402:cf80:6259::/48 maxlen: 48
                          2402:cf80:7ffe::/48 maxlen: 48
                          2402:cf80:7fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 14:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13711 (0x358f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Jun 18 14:41:14 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a34038a-3140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:3f:2d:40:01:ee:e2:c0:e8:b9:02:a1:32:
                    c6:eb:dc:0b:55:16:6b:6b:1d:cf:f9:eb:67:2f:44:
                    95:e6:5e:12:b1:9e:48:7c:e1:07:60:c5:66:d9:95:
                    27:c8:06:b2:a8:a6:84:fc:3d:d8:83:3d:8f:0e:88:
                    ee:fd:69:10:5f:72:76:e9:24:21:8f:af:48:12:39:
                    91:b0:e7:42:10:b4:b6:2d:7c:fa:f4:cf:40:ab:43:
                    06:94:bf:0a:70:26:b7:71:49:57:17:38:a6:b6:f5:
                    c8:47:1a:2f:fa:80:2f:8b:b0:e1:1f:04:57:88:62:
                    68:9b:16:98:f0:14:48:e7:43:c8:61:0e:81:4d:92:
                    0d:03:2e:46:8d:8d:b6:b9:d6:08:42:51:e3:a9:fd:
                    d5:da:eb:dd:36:0f:d8:b4:23:fa:31:55:85:b9:e8:
                    03:42:3d:b5:9f:a5:db:89:93:cd:e8:8c:46:d2:b4:
                    44:28:f8:73:5a:78:6a:a5:ff:a7:23:fa:37:0b:32:
                    1b:c5:e9:7f:29:fe:97:ae:ea:32:d7:a6:b9:ab:bb:
                    27:3a:28:c0:1e:f2:e7:3e:72:f1:ca:e1:91:a4:24:
                    e4:4e:ea:ae:49:ab:9a:92:1c:78:c1:cc:a4:4a:6c:
                    d0:7f:0e:ae:ad:66:a6:a6:8c:d0:05:03:2c:76:77:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:01:14:2F:A3:73:0D:CE:7B:D3:5A:D1:28:50:EB:24:78:05:21
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/A05116766B2311F1965223AA8747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.248.0-103.35.250.255
                IPv6:
                  2402:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:75:fc:86:ac:c8:84:5f:10:93:fd:94:74:fe:a2:e7:ad:
         eb:fd:df:cc:ee:eb:4e:42:a6:c3:38:7c:13:55:80:8e:9f:aa:
         19:53:d0:fe:f3:89:ae:ee:8c:4a:c4:be:36:9d:c6:a5:47:6d:
         bb:c4:72:38:84:93:3f:92:ff:d7:47:f8:29:a9:d5:5d:48:bc:
         5d:52:0b:05:2a:a5:f1:ca:7f:9f:f0:a8:be:bc:3b:26:24:6d:
         42:58:8d:56:dd:1d:24:08:b4:07:d1:7b:fc:67:95:4f:6b:1d:
         78:18:c3:70:06:5f:83:3b:7d:73:d3:78:ed:1b:fb:ce:38:35:
         d9:35:ec:1f:11:2d:12:e3:3e:91:c1:e5:fe:8c:86:82:7b:2a:
         0c:f2:ec:af:3a:04:b5:df:e5:6c:18:06:10:97:d5:ac:27:74:
         4d:1d:65:4c:87:ea:b9:7d:93:fd:46:94:a8:d8:48:56:c4:5f:
         32:06:15:e0:5a:e1:92:79:db:0b:7d:90:70:09:14:2a:40:ca:
         bc:0c:76:15:b6:6e:be:3e:93:49:5b:35:d2:f7:f8:5e:47:a4:
         b0:8a:52:d3:51:02:a5:34:cc:1a:2c:c9:f6:e9:1d:d8:d3:37:
         40:52:9e:10:be:89:56:1c:de:d1:e6:15:98:d5:c4:56:c0:63:
         b8:f0:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 23:18:44 2026 by rpki-client