Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
File:                     0EB22CD66BBE11EDBF717818C4F9AE02.roa (raw, json)
Hash identifier:          j7LfW13R3yfiSQpFhurPUr9r5NLSV5kwKxMlGjfdnFE=
Subject key identifier:   17:56:88:DA:7D:B9:B7:1D:9E:DE:06:2B:BF:3E:95:BA:08:CA:61:3A
Certificate issuer:       /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial:       18BA
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:29:47 +0000
ROA not before:           Thu 30 Jul 2026 17:29:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132018
IP address blocks:        103.21.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
                          rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6330 (0x18ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Validity
            Not Before: Jul 30 17:29:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b8a0a-1762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9c:cc:80:14:7d:b4:1d:6a:f3:74:7b:54:27:
                    89:58:73:82:d4:12:0b:24:f9:ad:23:57:9f:19:bf:
                    48:32:e9:1a:70:e0:ec:9f:5a:96:fc:ba:1b:d7:2d:
                    7d:6a:91:b6:60:ad:8d:be:64:7c:31:d8:ef:43:75:
                    cf:7d:bb:da:ab:6d:40:90:06:20:78:40:11:d6:6d:
                    c8:c9:79:51:c8:e3:ce:52:36:c5:6f:26:df:15:3d:
                    61:4a:89:b4:53:c7:35:9d:15:58:9e:dc:35:09:52:
                    42:28:4f:29:a8:f2:98:e2:71:6a:99:bf:5c:c6:ff:
                    52:7a:df:ae:c7:50:8f:f8:26:c2:0b:89:16:4c:64:
                    92:c3:de:de:9e:51:47:e1:b7:27:2c:44:65:ae:eb:
                    f9:15:d8:5e:68:ef:be:c8:64:71:5b:74:86:dc:69:
                    0e:4b:7e:f9:1c:69:d7:a7:77:d8:78:2b:2d:60:a1:
                    c1:2b:cc:7d:5b:58:d7:86:a5:1a:0e:f9:13:ba:d4:
                    d8:1a:6e:b8:27:53:4e:a0:8a:d0:d4:5d:73:ea:1a:
                    98:1f:fb:8d:75:bb:44:0f:a0:16:9d:a8:c4:4b:55:
                    2e:7f:8a:38:28:2c:93:f9:89:30:4b:9b:01:f7:79:
                    b5:3e:6e:40:47:1f:18:bd:54:14:39:e6:67:3c:81:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:56:88:DA:7D:B9:B7:1D:9E:DE:06:2B:BF:3E:95:BA:08:CA:61:3A
            X509v3 Authority Key Identifier:
                keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:6c:f5:06:53:5e:e4:ee:ba:e2:9d:1b:90:57:8c:29:8b:
         af:0a:be:34:02:aa:6d:cf:a3:52:26:48:cd:ce:d6:68:1b:e0:
         c1:86:50:ca:69:14:2c:82:b3:ee:e8:9e:3c:cb:e3:13:3d:61:
         3d:23:cc:7a:32:a9:5b:3b:4e:89:33:61:80:10:bf:58:1f:b8:
         5f:b1:4f:06:13:07:be:80:a4:d6:61:9f:c2:35:fd:c2:71:37:
         53:e9:32:bd:13:2e:bf:07:44:76:e3:ae:ca:6d:ab:c2:5b:84:
         7a:f0:54:34:23:6f:30:80:24:cf:4f:4f:12:5d:05:d6:a8:e8:
         fb:91:cc:01:2f:bd:57:af:b4:df:7f:19:41:8a:9d:d9:44:3d:
         1e:df:ed:96:79:c0:a0:6d:fe:5b:99:57:b0:2d:84:9d:48:5f:
         30:31:72:a0:69:28:11:a9:29:3b:fb:aa:36:14:92:da:c1:0b:
         44:5c:ea:ef:b3:35:88:fb:0f:f7:df:4f:78:42:b2:30:43:87:
         0b:4f:2e:26:6a:39:0e:60:f6:b8:0a:3f:5a:cb:90:e0:df:1b:
         95:96:a8:a6:e8:3b:08:ac:1c:61:86:f2:a0:17:46:9c:d2:e0:
         f3:c8:11:49:29:8e:d8:32:f9:5f:d8:c5:4f:5d:13:a3:e2:9f:
         e8:57:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:18 2026 by rpki-client