Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa
File:                     80379A8A09EA11EC8762242CC4F9AE02.roa (raw, json)
Hash identifier:          Un4DnmggrBjXGFTyGBzn1cMPqmwN8vWQWjZr5nOFlxg=
Subject key identifier:   B2:E4:CB:CC:A0:82:E3:10:7B:BD:DB:BE:5E:A3:75:65:74:27:DD:6E
Certificate issuer:       /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial:       060B
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa
Signing time:             Sun 02 Aug 2026 23:44:13 +0000
ROA not before:           Sun 02 Aug 2026 23:44:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139664
IP address blocks:        103.22.196.0/22 maxlen: 22
                          103.22.196.0/24 maxlen: 24
                          103.22.197.0/24 maxlen: 24
                          103.22.198.0/24 maxlen: 24
                          103.22.199.0/24 maxlen: 24
                          115.31.88.0/21 maxlen: 21
                          115.31.88.0/24 maxlen: 24
                          115.31.89.0/24 maxlen: 24
                          115.31.90.0/24 maxlen: 24
                          115.31.91.0/24 maxlen: 24
                          115.31.92.0/24 maxlen: 24
                          115.31.93.0/24 maxlen: 24
                          115.31.94.0/24 maxlen: 24
                          115.31.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
                          rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
        Validity
            Not Before: Aug  2 23:44:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6fd64d-5969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:47:c4:26:f5:fe:80:44:45:6a:62:d6:8a:
                    20:14:7b:1c:fa:36:0d:9b:f5:f2:4c:cb:2f:ce:f8:
                    b5:4a:b2:a6:11:f2:8f:a3:ee:c6:9b:be:4f:75:6c:
                    ed:eb:ed:4e:a5:65:cf:fc:41:1e:81:df:34:15:1a:
                    2e:1f:b8:43:75:14:7a:d2:e4:11:61:92:b3:9c:e2:
                    9c:24:8d:a1:f3:de:60:03:53:10:ba:4f:f1:93:2c:
                    08:d5:24:61:0e:14:51:88:3e:78:eb:23:1d:e7:0b:
                    2c:6f:3d:06:cf:5c:46:db:fc:6d:ab:73:ab:63:f7:
                    b2:df:4c:23:d4:a6:70:19:e8:5e:70:78:6e:e8:92:
                    d1:0e:2d:6b:39:89:64:f0:3d:cb:3e:90:5e:64:5b:
                    ae:3f:64:fc:c1:05:af:40:6c:69:64:22:01:6c:50:
                    41:cb:f7:47:70:a8:51:cf:fc:14:79:ad:82:8d:be:
                    e5:46:3c:1b:82:04:42:33:08:32:7d:d3:c1:a6:e1:
                    0d:c6:f0:3d:7e:57:6b:51:4d:0b:c1:3c:70:43:f7:
                    18:1b:cc:eb:4d:14:00:e9:89:0b:7b:d4:33:90:3f:
                    95:40:d5:2a:c7:9e:ab:b1:23:2f:d1:46:23:c1:c1:
                    7f:24:c9:ef:01:74:b8:4f:d3:11:8e:de:0f:ae:d7:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:CB:CC:A0:82:E3:10:7B:BD:DB:BE:5E:A3:75:65:74:27:DD:6E
            X509v3 Authority Key Identifier:
                keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.196.0/22
                  115.31.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:90:01:11:80:12:31:7a:6d:16:b4:99:d8:af:2b:e6:b7:d4:
         46:f0:e7:12:2d:c4:f3:e6:64:51:99:63:e5:fa:4b:ab:8f:76:
         d7:1e:10:02:2d:68:3a:81:89:36:e5:b1:87:62:c1:96:f5:40:
         1c:49:e9:fe:70:86:c6:c1:1f:9d:02:88:3c:11:5d:b7:8b:2d:
         01:80:45:c8:62:0b:32:fa:0b:0c:7d:d6:c5:6e:06:4f:06:78:
         9e:c2:2e:98:79:10:fe:b5:ad:33:dc:d8:b9:01:c0:89:a7:76:
         09:29:fc:0d:8a:27:3b:a0:1e:fa:60:ff:20:e9:1c:63:bb:8c:
         8a:d0:af:b0:7f:71:08:ac:b4:f3:d9:08:9f:8a:58:40:44:40:
         40:32:57:3a:44:1a:4d:92:97:03:a8:9b:86:39:61:38:6e:79:
         08:46:17:94:a5:dd:15:a8:67:f2:d9:37:4c:fd:04:f6:49:5f:
         6b:d4:2b:04:23:ee:e9:30:e0:5a:0d:28:3b:88:3f:ae:a0:95:
         b1:27:92:90:51:6d:83:10:c3:f3:e4:ae:88:70:8e:d7:d3:c1:
         d4:4b:89:d6:ff:4f:82:e9:c3:17:ef:3d:09:4f:14:87:26:15:
         fa:16:1d:46:ff:c0:0c:d2:b5:6c:f4:43:24:12:bc:b9:ba:ec:
         2f:66:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:03 2026 by rpki-client