Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
File:                     688AF35CC09511EC8CFFDB10C4F9AE02.roa (raw, json)
Hash identifier:          GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=
Subject key identifier:   F4:78:3F:94:6B:FE:0E:16:27:BB:1C:8E:F8:64:B8:EE:12:B3:2B:56
Certificate issuer:       /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial:       0405
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
Signing time:             Sun 07 Jun 2026 00:30:21 +0000
ROA not before:           Sun 07 Jun 2026 00:30:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132372
IP address blocks:        103.186.116.0/24 maxlen: 24
                          103.186.117.0/24 maxlen: 24
                          2001:df0:a8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
                          rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
        Validity
            Not Before: Jun  7 00:30:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a24bb9c-e378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:16:7b:dc:63:e3:b3:23:18:36:d9:01:d3:
                    9c:a5:9c:1f:95:41:4e:e1:17:ef:13:81:f3:75:82:
                    ff:b9:20:da:23:94:27:42:34:4d:5b:89:d4:87:7a:
                    f7:cd:3b:c7:20:86:0d:6c:5c:d4:5c:3f:b6:fe:45:
                    d5:de:8a:27:cc:87:38:24:79:72:6f:79:5d:c8:3d:
                    1d:78:4d:e7:4f:c2:db:21:d6:e2:39:dc:ac:e1:d8:
                    ba:32:d5:ad:64:63:e2:ad:c7:36:83:f3:27:d2:77:
                    2d:05:92:12:65:56:72:6a:7a:9f:9b:7b:b5:ca:9f:
                    67:93:d3:ee:2d:70:e1:0a:d8:9e:11:e3:37:3e:26:
                    ea:45:8a:a8:17:a2:87:ef:f5:d0:83:52:40:65:d9:
                    a4:a7:bf:ae:7d:5a:93:a9:3b:49:ab:1d:7c:8c:c2:
                    e3:4d:fb:f7:cc:5f:78:bc:13:e5:a8:01:1d:f1:fb:
                    0a:d2:99:ca:fc:00:27:05:0f:78:29:f1:93:87:53:
                    f3:14:0f:9a:44:55:46:44:b5:04:70:3c:0f:4b:99:
                    db:10:43:33:fd:70:8b:22:89:b3:36:f0:61:0e:2d:
                    d2:5f:45:db:e4:e7:25:9f:91:fb:75:10:85:dc:9c:
                    e4:5d:20:a4:fa:86:b8:1f:36:0a:8e:b2:a2:36:11:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:3F:94:6B:FE:0E:16:27:BB:1C:8E:F8:64:B8:EE:12:B3:2B:56
            X509v3 Authority Key Identifier:
                keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.116.0/23
                IPv6:
                  2001:df0:a8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:63:b1:0f:5a:65:59:8b:8e:96:34:09:42:fa:5b:2f:4a:bb:
         08:c2:1b:84:d2:00:fe:a3:63:07:c4:a3:ca:28:5a:f9:9c:03:
         c2:a5:22:23:eb:01:2c:23:27:45:20:0a:02:77:ed:6a:5d:9d:
         de:ad:62:b5:71:e0:58:c9:86:23:8f:92:aa:ab:89:13:68:ab:
         b8:a9:d2:ca:6e:b4:46:fd:72:bd:e1:52:5e:e1:49:e0:ed:15:
         80:55:4f:3a:e2:7d:1f:4e:df:c6:b0:a1:2a:ff:75:76:e7:c8:
         68:0a:7e:0b:ea:f4:04:c3:fa:a8:30:92:2d:ae:a3:53:80:58:
         59:8e:ec:90:fe:71:25:73:a5:8e:ef:02:29:a0:c0:47:49:60:
         4e:57:cd:78:74:6f:f1:e7:6b:2a:67:7e:f6:0a:62:46:56:13:
         55:50:74:09:e3:dd:88:98:31:bc:9c:a1:f2:00:b3:59:ae:b7:
         3f:6b:c7:37:df:40:cf:5b:a0:b2:48:0b:b7:0d:76:66:c7:66:
         e5:9b:35:29:f9:2c:c5:66:ea:26:0a:b1:09:a2:15:77:73:96:
         78:91:13:1e:21:f0:8d:a9:64:fc:38:e0:40:c1:53:29:2e:57:
         13:9b:0e:3b:fc:06:fb:8a:02:b8:67:02:34:89:42:7b:8e:28:
         cf:5e:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:14:42 2026 by rpki-client