Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa
File:                     DB6B2B08803F11F1AB5A5B056DA30FBC.roa (raw, json)
Hash identifier:          cn4m4b6sIeF0CcUvFFFFcObaHyEFh3BwO2hFRYMDLIc=
Subject key identifier:   04:41:1D:D2:10:66:86:FA:66:F6:3C:A7:6E:78:26:1B:DB:3B:E8:4B
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2DF5
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa
Signing time:             Wed 15 Jul 2026 11:25:18 +0000
ROA not before:           Wed 15 Jul 2026 11:25:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132884
IP address blocks:        103.15.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 15:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11765 (0x2df5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Jul 15 11:25:18 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a576e1e-3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:f2:87:6d:f0:f8:fd:df:04:07:16:44:2c:
                    0f:6f:b6:1d:32:23:2b:28:87:de:e6:37:b1:9b:b1:
                    97:87:18:d2:8d:65:46:26:20:03:f6:8b:7c:f5:e2:
                    d1:bd:92:fe:47:00:69:cc:86:2d:e9:f2:c7:3f:92:
                    d8:45:43:e9:67:6b:a1:ae:79:85:89:e0:88:c3:e3:
                    28:f9:3e:a8:81:49:ac:ab:a2:43:e1:c8:a2:7f:78:
                    5c:00:67:71:ad:f6:58:3a:3a:8e:af:4c:fa:28:bb:
                    a2:1d:96:fa:72:ec:e4:99:d7:87:08:a7:57:dd:7e:
                    ed:23:4f:c9:5e:1c:4a:e5:8a:7c:44:4a:8c:0f:a2:
                    f1:1c:94:c0:aa:11:40:87:42:e8:70:6c:0d:bc:1d:
                    11:e9:b9:75:44:ee:66:0d:37:79:2a:d0:35:9b:be:
                    6d:54:ce:f1:7c:0c:bd:15:14:1a:df:65:2b:96:7f:
                    8f:b8:af:fe:a1:15:4c:19:08:c7:96:cf:fc:38:c1:
                    02:0f:c1:98:25:30:78:d9:ac:93:a3:17:b5:7e:58:
                    04:fa:ff:d1:17:bb:ba:fe:49:55:fe:5d:11:d5:87:
                    02:08:a1:56:04:08:a0:51:aa:d8:9f:22:24:08:92:
                    68:78:43:06:c0:f2:d3:80:ef:f7:7a:b3:a6:62:f4:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:1D:D2:10:66:86:FA:66:F6:3C:A7:6E:78:26:1B:DB:3B:E8:4B
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:d6:ff:26:5a:b2:9e:3b:57:a4:74:cd:c8:2e:bb:5b:82:
         9c:04:f6:7b:ef:dd:34:e2:9c:93:88:39:41:0d:a5:66:6a:db:
         a4:f1:db:b3:6c:52:0e:a7:a2:e6:7a:c0:77:33:98:72:88:da:
         69:5c:2c:b5:07:4e:b9:93:05:fb:c9:d0:41:bf:f4:03:a7:e2:
         64:d4:2a:37:45:37:3b:1e:34:e4:06:f1:81:36:4a:5b:75:95:
         6e:66:a2:55:b7:7a:08:f2:bb:b0:64:4c:b0:de:10:30:4a:f6:
         05:35:29:73:02:44:0c:01:2c:39:29:b4:79:23:dc:cd:8d:5e:
         93:7c:98:94:28:15:c2:fe:39:ca:a1:4b:ec:24:69:a9:d8:7e:
         ba:8e:ff:4b:ac:db:e5:ca:b9:e4:29:7f:03:48:03:ec:41:e3:
         d3:b8:c6:0b:e7:32:20:32:02:83:d7:57:02:95:96:95:fa:45:
         f0:d7:08:a3:3d:ae:ba:f3:85:8c:66:32:f1:f3:d6:9b:55:9c:
         d7:9b:90:21:4b:05:2a:c8:47:f0:ad:68:6d:71:37:c8:ea:fd:
         7c:a7:3a:44:e5:df:8e:74:51:3b:4e:29:55:ce:4d:30:6a:d7:
         56:73:13:93:71:18:26:d7:fb:c4:97:e6:96:e9:70:33:42:51:
         7e:e3:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:37 2026 by rpki-client