Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa
File:                     84A0C6B4D02811ECB2472344C4F9AE02.roa (raw, json)
Hash identifier:          FPw9O4XT//G8n6WnCLP8ctRAcMr/Pqa6Ff1YBdXY59k=
Subject key identifier:   F6:40:0E:43:88:EE:09:FB:05:62:A9:55:4F:5A:4E:30:6B:20:CB:D1
Certificate issuer:       /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial:       03E5
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa
Signing time:             Tue 23 Jun 2026 01:29:00 +0000
ROA not before:           Tue 23 Jun 2026 01:29:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149822
IP address blocks:        103.187.30.0/23 maxlen: 23
                          103.187.30.0/24 maxlen: 24
                          103.187.31.0/24 maxlen: 24
                          2400:7960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
        Validity
            Not Before: Jun 23 01:29:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a39e15c-5f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:2c:83:a1:6d:8f:b9:eb:7f:ec:a1:1a:b9:
                    20:aa:7d:b4:af:f8:80:00:ee:77:c0:6b:eb:32:f4:
                    30:85:1d:ba:76:04:c2:28:55:e7:60:d7:72:54:a0:
                    4d:5c:8b:13:99:95:fc:3c:c3:22:5d:c7:1f:db:80:
                    14:38:80:b3:4b:1f:73:57:8d:72:42:61:30:62:f9:
                    55:3d:b7:2b:e0:0d:7f:8d:c6:62:0e:b4:86:21:cd:
                    eb:43:1b:5d:dd:82:d4:af:62:36:bc:a7:32:d5:41:
                    7f:ed:59:f2:d1:a7:43:32:4f:07:6b:b8:3a:43:d4:
                    55:76:8b:63:85:cc:8f:44:29:da:cc:9f:7c:ec:ab:
                    36:2e:81:ef:21:a6:03:12:9c:23:ea:09:53:4e:88:
                    8d:e9:2b:72:95:c9:02:f8:60:30:94:cc:ed:9a:ed:
                    11:d8:41:65:08:8c:18:b1:d4:17:ec:fa:81:47:71:
                    9a:f9:d3:fb:e2:96:c7:41:47:99:f9:28:51:3c:06:
                    e4:5c:35:5d:b9:79:fd:e7:f0:36:20:b1:78:95:70:
                    4c:16:69:a1:88:f0:5f:99:ca:13:19:7f:7f:27:82:
                    f0:2c:6a:1e:ce:93:88:d5:db:2d:32:2d:1a:5c:84:
                    0b:67:d1:2d:1c:82:3a:3b:c9:77:1d:36:00:69:0d:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:0E:43:88:EE:09:FB:05:62:A9:55:4F:5A:4E:30:6B:20:CB:D1
            X509v3 Authority Key Identifier:
                keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.30.0/23
                IPv6:
                  2400:7960::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:f6:8e:b1:24:1e:d2:62:e0:8b:35:d9:17:73:a2:9e:27:
         d3:20:26:99:67:df:8a:af:ff:89:20:b9:de:2d:40:6a:06:5c:
         11:d2:23:bc:ed:c1:60:29:40:9b:8e:f0:ef:db:c9:85:81:c9:
         bd:5a:51:2a:83:e0:eb:07:d6:a5:ab:50:49:38:1e:bb:6b:b9:
         68:53:10:16:56:93:73:75:ce:66:e5:cb:e4:2e:55:d0:9c:e1:
         2d:7a:5b:fe:94:be:f5:7c:47:e7:40:8c:f6:d8:1d:b1:54:82:
         24:b1:25:45:45:35:a5:fb:ab:b0:f1:f7:7f:46:0c:a7:b8:e3:
         b1:11:1f:f5:1a:6f:5d:b7:78:39:c5:0c:85:8d:47:7f:c9:f5:
         0d:1d:28:10:ab:5f:dd:25:80:bd:16:87:1d:96:c7:3a:b7:a1:
         ce:6f:4d:63:9b:ed:d5:4d:34:0c:55:27:77:65:00:1f:4b:02:
         70:43:e1:75:3b:4a:86:36:af:56:48:c2:c6:d8:f3:db:d4:a2:
         2e:24:07:fe:23:9d:ae:ce:91:db:a7:30:30:aa:99:78:8a:df:
         7a:81:a0:df:5f:e2:99:b9:e1:c6:4f:25:82:94:2a:c7:e5:c4:
         75:55:8a:d7:06:81:58:0a:b5:b4:ac:e4:28:14:84:04:e6:e3:
         70:48:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:33:30 2026 by rpki-client