Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/CC4C064A802D11F18FD74CD965A30FBC.roa
File:                     CC4C064A802D11F18FD74CD965A30FBC.roa (raw, json)
Hash identifier:          nU+7f9cDRzh3u8X6B0Mt2pSEFogtEH9ZNVDC0mAJIzA=
Subject key identifier:   8A:60:02:D2:41:D3:4B:B2:FA:2E:9E:A4:6F:4F:E8:EB:89:51:F9:07
Certificate issuer:       /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial:       02B8
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/CC4C064A802D11F18FD74CD965A30FBC.roa
Signing time:             Wed 15 Jul 2026 09:16:02 +0000
ROA not before:           Wed 15 Jul 2026 09:16:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        103.243.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
                          rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Validity
            Not Before: Jul 15 09:16:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a574fd2-3177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:17:d4:92:8c:73:05:61:65:a4:fa:30:42:
                    fb:d7:6d:c0:51:42:98:11:4a:04:51:35:62:49:43:
                    37:3f:b3:0b:b3:65:64:2c:c0:1a:0b:c3:bd:75:9d:
                    3a:e4:0b:2e:21:7e:b7:4f:76:ea:21:26:09:6c:98:
                    dd:6b:e4:b8:2b:44:31:98:56:1e:66:b7:e4:c3:45:
                    b0:f9:d9:bc:1a:1f:a3:fb:28:a2:d8:8e:de:44:a8:
                    f3:8b:b4:ef:4e:d5:dc:af:a8:39:ab:1e:09:5d:36:
                    0f:29:40:d5:59:92:1c:1a:61:3a:1b:c7:5f:58:fd:
                    fa:4d:2f:65:d4:db:97:37:97:60:15:00:5f:81:f8:
                    ae:e6:c1:71:84:8e:75:11:ec:78:2b:e1:41:32:25:
                    ec:59:3b:2d:59:76:a4:30:46:69:48:2c:c8:cd:11:
                    9f:28:4e:ba:ab:3c:c9:75:4f:9b:7a:6c:f1:99:f6:
                    50:76:15:cc:ab:7b:23:83:6d:09:51:b8:6d:ba:dd:
                    7a:10:7f:c0:67:8f:80:98:0b:7e:3b:f2:1e:d9:f6:
                    3e:fa:fc:93:59:bc:a7:13:37:9d:99:94:2a:f5:4e:
                    0d:af:2c:e2:6e:3e:a6:5f:44:a4:5d:cd:07:fe:da:
                    f5:b5:60:c5:9d:8a:71:70:53:19:4c:76:92:91:92:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:60:02:D2:41:D3:4B:B2:FA:2E:9E:A4:6F:4F:E8:EB:89:51:F9:07
            X509v3 Authority Key Identifier:
                keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/CC4C064A802D11F18FD74CD965A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f6:04:60:97:54:62:ed:98:32:c3:b7:78:99:65:b1:2f:c1:
         c4:23:92:8d:dc:df:40:86:db:3b:fc:fc:35:b3:cf:51:52:73:
         98:db:2e:12:4b:76:0c:d9:3c:0c:24:ad:fd:75:02:73:98:6c:
         4d:66:c5:02:04:13:51:57:6d:50:21:e5:f8:31:e1:ac:d4:14:
         a3:dd:21:ed:6e:05:ba:89:ab:43:0f:fe:db:19:83:08:6e:e6:
         11:ee:97:21:14:b7:3e:2b:9d:c1:e9:e2:ce:10:36:27:16:84:
         f3:e5:bb:6b:9a:f0:d7:b9:1d:9c:a9:b4:5e:ae:65:6a:a2:fe:
         35:f1:d0:a6:82:59:78:48:da:cc:be:e2:3e:a9:06:4f:22:33:
         10:2b:97:fd:4b:d1:08:15:13:23:38:9d:df:ba:d7:26:19:03:
         ab:2d:20:dc:f2:dc:45:00:29:47:9c:5f:76:4c:69:3a:3f:f6:
         b4:37:27:df:dc:ab:99:bd:c0:b6:84:04:65:f5:57:5b:5b:2c:
         c8:61:75:6b:93:38:a4:44:06:3e:0f:a9:5f:3c:70:be:1f:3e:
         cd:e5:ca:a2:12:2e:13:f3:1a:16:a7:66:78:32:d6:f7:87:6a:
         e0:6e:92:c7:9d:d9:55:2b:e4:2e:23:b0:28:ec:2e:39:42:cd:
         9c:b5:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:31:31 2026 by rpki-client