Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa
File:                     FEB624F6B94911EE897F7947C4F9AE02.roa (raw, json)
Hash identifier:          v/cYedkAqRKh3ztstNufD8S6zF7j1cUxZPyvJUeefHY=
Subject key identifier:   24:5C:E6:E7:E0:6B:F1:7B:7F:7B:B3:AF:ED:45:7F:3D:57:29:98:62
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0DE8
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa
Signing time:             Sat 08 Aug 2026 18:35:32 +0000
ROA not before:           Sat 08 Aug 2026 18:35:32 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     395363
IP address blocks:        103.80.4.0/24 maxlen: 24
                          103.80.5.0/24 maxlen: 24
                          2400:4840::/48 maxlen: 48
                          2400:4840:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Aug  8 18:35:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7776f4-628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:61:7b:2a:af:4d:41:f9:f6:b4:be:8b:ef:
                    35:ff:55:f6:98:7a:c8:05:fe:f5:26:33:9e:db:ea:
                    93:c4:16:b9:19:46:42:fe:fc:7e:c0:9a:85:f8:25:
                    03:5b:91:52:19:4c:f0:1c:e3:58:7b:eb:d8:7d:45:
                    63:7a:4e:30:e1:e3:47:f8:9b:0d:21:f3:f5:da:74:
                    46:6b:c3:ae:f4:db:a0:80:33:0c:7b:45:0a:52:40:
                    aa:1a:0b:7a:ed:43:d0:43:12:88:46:a5:28:0c:72:
                    83:bc:bd:cc:26:62:bc:97:e5:91:04:47:39:c2:a2:
                    4a:8f:de:6c:79:b2:de:61:fe:1c:2f:05:36:6e:2f:
                    e7:5e:f0:4e:fb:38:72:3c:fb:4a:04:28:89:24:74:
                    5c:b2:6f:aa:af:13:98:91:b5:01:66:d1:60:eb:60:
                    6b:c4:69:d4:8b:f0:65:ca:b2:44:7e:18:0f:00:51:
                    6f:91:67:1c:50:19:f0:2e:12:1c:87:d0:04:7d:96:
                    27:29:2e:38:70:b8:b3:3a:ef:e9:05:55:e1:a7:fc:
                    0d:30:df:86:4d:ac:95:87:a4:3f:b8:9e:77:86:5d:
                    57:bd:3a:9e:f2:72:82:e1:9d:08:10:22:50:df:bd:
                    a1:ea:71:50:f7:85:15:6a:37:e8:6d:e1:df:90:03:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:E6:E7:E0:6B:F1:7B:7F:7B:B3:AF:ED:45:7F:3D:57:29:98:62
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.4.0/23
                IPv6:
                  2400:4840::/48
                  2400:4840:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:8b:0f:eb:f3:d9:67:ec:aa:70:5f:0a:36:89:ef:ff:f0:
         19:92:ae:80:ab:46:2b:65:9a:43:26:f0:8f:84:64:89:e8:7d:
         5f:65:94:97:6d:49:98:04:68:b7:1f:7b:75:68:a1:29:a9:97:
         ad:4e:fc:91:df:3c:26:d8:0b:05:34:b1:da:fd:69:ad:b2:df:
         7e:01:67:c0:3b:70:52:33:e3:8f:9b:24:45:8a:60:e3:bc:6b:
         af:be:9e:5b:90:1d:2c:4a:ce:8a:12:9d:38:14:0e:30:e6:7b:
         6d:f3:06:b4:1d:2e:a5:7d:28:fa:ac:11:57:d0:38:67:90:65:
         86:24:91:ac:f5:c1:22:55:9e:5d:fb:49:54:f2:e8:31:fc:1b:
         dd:06:ad:20:a7:45:21:58:cd:c1:2a:55:5f:60:2c:eb:55:76:
         3c:85:bd:7c:06:70:da:2d:67:c3:28:dd:4d:04:0a:e6:f1:cb:
         ff:b3:ea:8f:0c:86:1f:01:fd:38:2b:d2:f0:ce:ea:fe:e2:a1:
         93:4b:b1:0b:81:52:ec:b7:5a:91:42:88:db:b5:0e:94:42:b9:
         d6:17:25:f5:7d:bc:01:eb:7b:06:b5:3b:c2:ef:8f:65:18:3b:
         ef:f8:ec:dc:e0:ab:0b:0b:c7:7d:74:81:6d:2b:78:ea:a0:12:
         99:91:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:32 2026 by rpki-client