Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
File:                     F11B4C14E40111ECBD78E571C4F9AE02.roa (raw, json)
Hash identifier:          TDZ9GRT7CbtPoByROT6gvRqDQKkISdui8U28+wGu2U8=
Subject key identifier:   74:10:FC:F0:1D:BC:39:47:90:A8:26:16:AD:7B:1D:95:68:6D:C4:B2
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       053E
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
Signing time:             Wed 03 Jun 2026 00:28:39 +0000
ROA not before:           Wed 03 Jun 2026 00:28:39 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     58909
IP address blocks:        103.24.200.0/22 maxlen: 22
                          2400:c6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Jun  3 00:28:39 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1f7537-bdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:74:64:aa:b4:62:fb:12:f9:4d:f2:1a:ba:
                    7d:e5:6e:86:f7:62:7a:30:25:6f:62:e4:b1:52:aa:
                    60:e3:0f:c5:ce:83:f8:27:35:aa:db:7a:e7:43:ba:
                    09:33:0f:d2:9c:6d:7b:10:63:2d:5d:4c:bf:91:cb:
                    0c:0b:9b:6a:be:fb:2d:9f:56:66:91:8b:8c:15:f9:
                    0f:9a:4a:74:1a:c2:22:79:0a:2d:02:46:43:2a:3f:
                    01:89:70:fa:5a:76:1e:07:0d:32:76:11:b1:5a:78:
                    6c:05:87:04:ce:2c:8c:91:5a:d0:da:a5:e8:08:d0:
                    b5:71:94:a9:5d:4d:a5:62:74:1d:34:53:ea:f9:2a:
                    49:8e:2c:fe:79:42:13:6c:28:74:ce:a7:8a:dd:07:
                    96:06:b8:55:02:75:6c:28:45:e4:08:4d:87:67:d9:
                    de:06:d3:ba:9e:9d:04:c2:dd:e0:34:ec:9e:1c:c5:
                    24:69:78:59:a0:7a:a8:91:3f:a5:85:49:7d:9b:da:
                    24:d4:c3:f9:e8:cb:b7:00:d6:3a:c0:16:56:28:1e:
                    55:04:cd:be:f4:30:c4:14:e3:1e:31:5a:a8:13:08:
                    28:86:84:a0:ce:99:97:5a:23:ff:c7:63:61:5e:f1:
                    ad:f8:9b:0d:34:e0:d3:f9:db:e8:e9:b5:8e:67:b6:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:FC:F0:1D:BC:39:47:90:A8:26:16:AD:7B:1D:95:68:6D:C4:B2
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.200.0/22
                IPv6:
                  2400:c6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:03:75:6c:e7:f6:a0:62:fb:bb:73:13:70:bf:ff:a7:c0:
         c7:40:9e:e6:ec:ed:c6:a9:e7:3f:00:51:7b:f1:e9:c0:f2:f2:
         d0:7d:5c:ab:bd:d5:c9:0f:7f:3d:da:99:4d:b4:4f:6c:1a:be:
         44:7c:37:e1:b6:d0:7a:6a:fe:3d:0b:0a:85:0e:f2:4e:7d:f1:
         52:a8:88:7d:2c:60:ee:9d:f4:42:8a:a7:e3:33:0b:62:fc:1a:
         2c:13:1a:e0:91:4a:12:c6:70:e8:52:e3:c6:4b:b8:de:b7:10:
         d9:3e:60:4d:d3:b6:e7:a3:0f:b2:42:70:cf:0b:dc:e9:c7:15:
         84:32:27:67:9c:b4:23:94:81:45:8a:44:15:e9:71:62:d8:a2:
         c3:b8:a7:90:0f:69:bf:41:01:55:40:07:69:a0:87:df:68:61:
         d4:26:cc:fd:ba:bf:f6:18:97:4e:68:4b:49:66:a8:d5:e5:3e:
         76:06:13:e0:fc:6c:65:b6:a1:fc:63:34:10:ed:d2:d5:40:1c:
         d1:2e:25:1e:85:d9:c3:47:1c:b2:f2:35:2c:48:53:88:3b:5c:
         fc:1b:01:78:ad:e1:b3:08:0d:6b:18:aa:10:f8:78:f6:cf:e4:
         76:1b:ee:3a:86:c3:53:a3:3c:64:27:4d:bc:9c:ab:1c:d2:f6:
         9b:fe:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:00 2026 by rpki-client