Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/B214E89862DF11F1B42E082E6B47A888.roa
File:                     B214E89862DF11F1B42E082E6B47A888.roa (raw, json)
Hash identifier:          67D5OAf3QDK83q26hEzjDiIhbelSrK6yBD/M0iQ72XE=
Subject key identifier:   6A:D8:38:15:AA:76:DE:7B:FC:9B:5B:39:45:50:48:52:D6:7C:97:22
Certificate issuer:       /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial:       354A
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/B214E89862DF11F1B42E082E6B47A888.roa
Signing time:             Mon 08 Jun 2026 04:20:33 +0000
ROA not before:           Mon 08 Jun 2026 04:20:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38858
IP address blocks:        103.105.144.0/24 maxlen: 24
                          103.105.145.0/24 maxlen: 24
                          103.105.146.0/24 maxlen: 24
                          103.105.147.0/24 maxlen: 24
                          115.124.0.0/21 maxlen: 21
                          124.158.16.0/21 maxlen: 21
                          203.29.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
                          rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
        Validity
            Not Before: Jun  8 04:20:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a264311-5106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:bf:34:a7:92:1e:e6:6a:10:da:c9:84:d1:
                    1a:1c:7c:cc:c2:d6:35:69:17:78:e7:32:b1:9e:9f:
                    6a:37:79:3e:5c:e8:3d:6e:c9:c2:ba:46:a4:cd:04:
                    84:74:d7:22:26:46:0b:6e:3a:59:cd:b1:86:50:2e:
                    fc:39:92:fc:ea:61:f8:c4:10:18:d1:f4:08:02:e4:
                    a6:69:b3:ea:aa:10:84:f2:47:c7:1c:f2:51:4c:8e:
                    8c:a6:48:20:c8:1e:e8:83:8f:a4:52:e5:70:18:7e:
                    44:6e:d9:6f:6c:ac:01:d7:43:0c:08:b0:f1:8a:59:
                    cb:65:d5:e4:5f:06:c8:3a:98:b7:b1:e8:c9:59:8f:
                    a2:e2:61:ea:9f:c8:12:67:8b:34:c4:18:1a:2e:36:
                    09:a6:3f:62:85:eb:bb:a5:08:30:ed:79:4f:e6:9f:
                    93:74:c6:9e:f0:b9:b5:a1:60:4b:92:42:dd:10:a4:
                    c9:48:67:51:89:05:1c:99:5a:fc:7c:ca:57:31:36:
                    63:74:d8:26:9d:4a:c9:8a:bf:0e:34:57:65:13:b1:
                    88:c3:aa:16:57:16:48:89:dd:09:7f:98:e1:7b:8f:
                    9a:e1:62:14:bb:22:77:3e:ac:0a:fa:31:f1:e7:06:
                    31:3f:1a:20:54:04:b9:00:fd:d8:5e:07:01:cc:9a:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:38:15:AA:76:DE:7B:FC:9B:5B:39:45:50:48:52:D6:7C:97:22
            X509v3 Authority Key Identifier:
                keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/B214E89862DF11F1B42E082E6B47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.144.0/22
                  115.124.0.0/21
                  124.158.16.0/21
                  203.29.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:8c:93:d3:ff:71:d6:10:88:41:17:4e:a8:2b:5e:df:a6:
         d7:af:ef:bb:87:4f:ab:3c:58:b3:2b:f2:25:01:41:3b:7a:c1:
         e7:fa:c5:c7:fe:84:dd:89:6b:f5:0c:68:bb:0b:ce:09:5d:a1:
         f5:33:d1:54:b1:3e:1e:54:7a:9b:eb:dc:33:d5:43:94:53:4f:
         7c:b7:13:b0:27:76:16:9f:34:c1:74:e5:0e:82:12:04:8f:b7:
         16:d1:2b:1e:8e:8e:5b:0b:56:2b:9b:84:a4:cf:c2:35:ae:85:
         fb:5f:d6:6c:c1:7c:4d:11:51:d8:e4:68:7d:87:2e:9e:ce:f9:
         02:38:f4:b8:46:53:01:33:4f:e5:f7:f7:a7:3c:66:b5:02:37:
         2c:fc:a5:18:7d:dd:5b:fc:84:f4:04:0c:2b:77:b8:e8:5e:6d:
         fa:40:1e:e8:08:89:d3:8e:c7:f6:2b:00:16:f1:23:c9:b9:27:
         c0:df:65:dc:ec:e8:eb:85:e3:a8:38:9b:b0:91:92:67:84:86:
         6d:84:fd:df:9f:9c:a3:a1:bd:34:ed:b8:6f:a2:95:a6:91:7f:
         79:fc:0d:9f:13:96:09:5e:54:b0:27:81:d3:5a:db:c0:2c:9c:
         63:e7:85:ff:f5:64:97:4e:da:a0:07:c0:04:59:76:34:d8:57:
         c7:2f:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:16:37 2026 by rpki-client