Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
File:                     22DA1C02131B11EC83377D59C4F9AE02.roa (raw, json)
Hash identifier:          rpeucbwRthNChjV1mTa6b5UV/jF0VBkI5SXoALE4F0M=
Subject key identifier:   0D:0C:D9:7C:AD:BF:5D:FF:1B:9B:11:A7:7C:D8:79:E3:E6:52:5C:53
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       05BF
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
Signing time:             Sat 06 Jun 2026 23:27:58 +0000
ROA not before:           Sat 06 Jun 2026 23:27:58 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142295
IP address blocks:        103.167.158.0/24 maxlen: 24
                          103.167.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jun  6 23:27:58 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a24acfe-fd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:32:0d:a9:ec:9f:5f:16:13:5c:43:96:a2:
                    55:3d:50:7a:53:52:29:68:fb:0b:15:04:83:00:b8:
                    57:5c:0a:86:ce:ca:f6:c5:27:2b:08:ad:3f:f4:02:
                    e2:c7:a5:3a:52:f4:a8:83:d8:71:bf:f9:ae:5d:c0:
                    9e:d3:b0:b2:b9:7b:92:65:8c:be:79:e9:8f:60:04:
                    29:76:09:a4:85:25:35:e6:42:5d:36:39:17:73:65:
                    a4:5d:d4:3d:e2:b8:0f:17:ac:1a:7f:c1:64:97:24:
                    95:4d:50:ad:ec:89:d2:3d:ac:ae:fa:7e:2b:33:a0:
                    0e:b8:c2:fb:30:72:43:8c:1c:fd:91:67:28:ff:7a:
                    c8:69:c3:a2:8c:2a:60:38:d7:f8:65:0d:d7:ad:55:
                    50:f0:00:f0:a7:9c:36:90:48:3d:2f:7b:a2:6e:78:
                    d5:83:23:33:94:e5:1e:4f:e3:f8:7f:81:93:42:5f:
                    65:bb:3d:4d:4f:9c:ee:e2:8e:fd:47:1e:bf:11:5a:
                    40:20:bb:72:3c:69:b5:b5:c6:54:60:f6:20:44:e9:
                    3e:06:8b:81:e3:9a:a5:46:70:38:1e:88:a0:51:53:
                    ad:0a:65:40:99:0a:19:63:df:2d:f8:32:78:00:78:
                    83:69:d4:a2:f9:2b:04:e4:c7:e6:59:94:df:e4:6a:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0C:D9:7C:AD:BF:5D:FF:1B:9B:11:A7:7C:D8:79:E3:E6:52:5C:53
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:1f:2a:64:f2:8d:64:b2:c0:b3:c7:fd:32:b1:41:6e:b4:
         d1:8e:be:64:2b:22:89:22:f9:7d:55:8f:ae:b6:38:de:5b:77:
         f7:a3:87:9f:04:6d:15:58:64:0f:76:fe:d8:3a:15:09:23:2b:
         15:12:57:d9:d6:ce:08:5f:22:62:65:31:d6:58:b7:a2:17:a3:
         cd:c5:1c:1f:8e:b9:5b:b7:81:cc:19:e5:78:65:42:f6:85:4f:
         ec:c2:6c:0d:a0:3e:fb:30:1a:ad:06:3e:b7:81:37:a7:54:f8:
         cc:ad:f8:79:a2:93:d5:0f:dc:16:21:8b:75:07:00:74:b2:c8:
         1b:34:0a:5e:09:eb:e8:b1:d1:ff:38:78:9d:70:25:4c:19:2e:
         05:60:29:d7:30:a8:2b:75:50:9e:17:49:df:c2:6c:15:6a:14:
         7a:ee:3e:62:5e:07:db:62:0f:a4:6c:fe:1e:73:b9:cf:a9:f7:
         7e:f4:e0:3b:2a:b0:d3:ad:28:bd:75:c6:0c:0e:43:af:38:68:
         f4:3c:87:6a:96:83:ac:5d:d4:c6:d7:10:1b:e8:e3:23:1c:86:
         de:bc:1f:8d:f0:7b:2b:de:b7:5c:83:2e:0e:c7:9f:03:6a:40:
         52:12:bc:51:8b:f6:46:3c:d5:0b:9e:08:a1:3d:a4:db:b8:7b:
         8d:55:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:08 2026 by rpki-client