Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/F98DEF9A231F11EB99F53580C4F9AE02.roa
File:                     F98DEF9A231F11EB99F53580C4F9AE02.roa (raw, json)
Hash identifier:          MMtbNQJMN6S4OIeEKXKOY3PxiKyZUm2osdIwKT/I6/8=
Subject key identifier:   87:31:91:C7:0E:58:2E:6F:BC:6F:CA:A1:AE:D7:4C:E7:E1:7A:49:4F
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       107E
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/F98DEF9A231F11EB99F53580C4F9AE02.roa
Signing time:             Thu 28 May 2026 17:22:28 +0000
ROA not before:           Thu 28 May 2026 17:22:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.113.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4222 (0x107e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 28 17:22:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1879d4-b56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:dd:b0:eb:ab:cd:4f:2f:a8:ad:cf:ff:c8:
                    85:80:91:ad:52:74:8b:6f:09:1c:62:c0:94:af:6a:
                    97:a6:95:79:d0:72:da:91:76:ca:9d:8a:7a:93:2a:
                    32:8e:46:39:7b:8f:02:8c:43:5b:52:be:79:57:8d:
                    99:5a:58:ab:18:cb:54:e4:af:03:a9:6a:f0:9d:cc:
                    ca:3d:83:e5:4d:5c:bc:06:61:43:c2:63:16:11:38:
                    cd:a0:aa:44:0e:f5:12:fc:e3:c0:8f:14:7d:04:9b:
                    82:df:24:1c:0c:9a:58:3e:34:4c:fa:9b:df:58:25:
                    7b:c0:d4:ab:f8:36:b9:db:b1:57:8d:f8:4f:61:47:
                    ef:bc:1d:3c:4f:2e:7b:45:cb:b8:4f:86:28:e2:ca:
                    92:b6:75:92:41:7c:ed:66:f1:c7:fb:16:95:cd:94:
                    bd:7b:c4:75:be:72:71:8c:04:ad:65:ea:57:ba:76:
                    0f:ee:dc:09:06:ff:b2:2e:3b:75:10:b5:d9:7e:a4:
                    bf:d1:01:24:46:37:00:c5:b8:5c:c0:53:f9:64:89:
                    47:23:3d:72:8b:ba:0e:6c:5b:3d:ff:4f:e6:15:9b:
                    28:7c:49:5f:d9:55:55:e8:80:9c:a8:8b:1e:8f:d3:
                    16:33:d1:e4:a1:59:ce:b3:f2:6e:e6:65:21:74:08:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:31:91:C7:0E:58:2E:6F:BC:6F:CA:A1:AE:D7:4C:E7:E1:7A:49:4F
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/F98DEF9A231F11EB99F53580C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:1b:6e:23:c3:4f:d9:1e:ac:d4:3d:3d:c1:7f:dd:d1:e0:
         09:cb:12:a4:b8:5a:a6:7d:b8:00:bf:80:85:81:2c:f0:0e:c8:
         db:db:fc:92:4d:d8:b3:2b:7d:ec:78:91:03:3c:a2:56:6c:de:
         1a:e8:72:fc:6e:5e:71:59:7c:42:03:48:9a:9f:52:6a:c6:80:
         1f:c4:7f:b7:83:e8:95:6d:15:85:f2:8b:e4:c9:79:8f:30:f6:
         54:00:45:0b:60:8e:3a:23:61:d5:62:1e:0d:aa:36:8f:aa:f4:
         c2:88:e7:a6:9b:04:50:2a:b4:21:d2:09:0c:0d:07:5c:2d:a3:
         fb:dc:c0:fc:ca:74:4f:6c:6c:39:ce:69:72:53:58:c6:b2:b4:
         b3:48:9c:a3:9e:28:11:16:7d:11:74:46:81:b6:06:a4:89:aa:
         3a:8d:d8:ea:55:27:36:8d:ea:0a:d8:5c:96:34:5e:81:76:cd:
         a1:1f:44:97:05:b9:a8:1f:45:f6:d1:4d:32:3b:a2:ce:d2:ef:
         a3:b3:08:a1:c8:a1:e8:f3:12:5b:d6:37:04:0c:46:b1:5d:26:
         f3:f0:54:84:73:21:d7:74:04:b9:7a:c5:0a:fc:ba:6f:98:26:
         22:6b:8c:39:6b:4d:bb:ed:6f:b6:74:bf:fa:8b:3e:8a:27:81:
         55:98:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:21:11 2026 by rpki-client