Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/2F7267121DD411F18819F3DA0B3D8C67.roa
File:                     2F7267121DD411F18819F3DA0B3D8C67.roa (raw, json)
Hash identifier:          oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=
Subject key identifier:   1F:01:00:6C:65:EE:34:7A:3D:22:AD:74:28:6B:E1:FE:65:4A:DA:89
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       08AC
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/2F7267121DD411F18819F3DA0B3D8C67.roa
Signing time:             Fri 12 Jun 2026 19:21:26 +0000
ROA not before:           Fri 12 Jun 2026 19:21:26 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150774
IP address blocks:        103.214.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: Jun 12 19:21:26 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2c5c36-2de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:c8:a2:ca:45:5e:07:b8:e0:b3:d1:d0:db:
                    9f:4c:b2:bd:0b:17:a8:ca:d9:24:0d:a5:e8:70:9f:
                    b1:8f:d1:e1:f9:f8:15:bb:2c:69:a3:44:74:0b:69:
                    bb:0f:a4:af:17:3c:63:fe:4f:4f:c3:b3:1f:3b:6e:
                    7e:7f:18:29:64:1f:98:b5:05:fa:bf:5d:48:c9:3e:
                    73:0f:5a:f7:05:0e:b5:88:a6:3b:b5:e4:1b:53:d9:
                    76:68:15:74:5e:8a:d0:3d:b2:30:8e:70:5a:c6:63:
                    1e:bf:93:16:20:24:ac:39:09:95:d7:ef:20:54:e7:
                    b2:5c:3a:30:12:d0:ab:51:57:94:03:fb:53:fb:33:
                    5e:95:1f:fb:03:28:c4:da:f8:af:3c:9a:f8:10:4a:
                    24:f5:7d:a1:6c:c9:ee:74:d7:f9:96:9d:fc:02:8e:
                    32:af:91:b3:1f:8f:b8:b1:d9:56:bd:aa:ba:ea:a2:
                    57:ae:84:d7:f2:a0:e2:14:91:bf:c1:9d:0e:38:1a:
                    c5:58:cb:66:20:06:c9:d3:64:e4:24:34:d7:4e:34:
                    f0:ed:c2:72:43:42:6e:9e:f1:bd:99:fd:33:22:8f:
                    d3:d2:cb:1a:0d:81:af:42:74:86:81:2b:c8:e9:71:
                    30:58:60:fd:11:88:d0:b5:42:3d:d7:3a:fa:fa:fd:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:00:6C:65:EE:34:7A:3D:22:AD:74:28:6B:E1:FE:65:4A:DA:89
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/2F7267121DD411F18819F3DA0B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:18:c0:41:8d:bf:fc:d8:0c:15:80:f3:be:37:89:e3:a8:3a:
         9b:aa:aa:36:7a:e0:41:41:5c:b0:e3:06:71:44:d7:8d:4b:d6:
         5d:01:69:74:c0:1e:3d:d8:1b:39:a1:7c:95:1a:f6:90:54:ca:
         93:63:2f:16:eb:dc:c3:18:f2:ed:a6:8e:f1:f4:6b:2a:4c:4a:
         8f:54:ef:d0:ca:b1:6c:8f:39:71:7f:b4:6d:2e:07:e2:fb:c2:
         14:1d:aa:c6:be:4b:3b:a4:9e:42:d7:93:7b:85:27:1f:59:88:
         34:23:94:7e:38:78:f9:22:3a:f4:9d:71:5c:a5:32:a2:0d:34:
         96:07:96:45:65:a5:82:09:de:06:09:a1:10:80:c5:14:de:78:
         00:3d:6e:f6:b6:6f:40:e6:2d:46:94:bc:35:80:9a:ca:b2:86:
         bd:61:53:9b:84:6f:e9:b8:ad:0b:b3:6f:34:f8:37:2e:c6:49:
         42:84:31:23:e2:f8:e3:d0:05:fd:48:06:f1:fc:7c:c9:e6:a2:
         b2:d1:39:95:9d:e4:33:36:15:0e:c3:18:27:60:7b:9c:75:20:
         89:7a:a4:85:f0:fe:25:fb:88:20:20:13:fd:c1:75:cb:e3:4f:
         01:98:a1:0d:99:94:3a:66:69:ee:a6:db:cf:eb:c5:47:1f:ae:
         00:ef:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:27 2026 by rpki-client