Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B922DB22E84211EA918B8F09C4F9AE02.roa
File:                     B922DB22E84211EA918B8F09C4F9AE02.roa (raw, json)
Hash identifier:          8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=
Subject key identifier:   55:3E:D3:6E:D2:6F:F5:09:5A:5D:0C:AA:A2:EC:43:BE:2A:C6:13:43
Certificate issuer:       /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
Certificate serial:       0ECE
Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B922DB22E84211EA918B8F09C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 18:21:36 +0000
ROA not before:           Thu 04 Jun 2026 18:21:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132757
IP address blocks:        103.215.224.0/22 maxlen: 24
                          157.119.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl
                          rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
        Validity
            Not Before: Jun  4 18:21:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21c230-ae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:03:29:dc:29:e0:58:94:00:39:84:9a:ec:
                    37:4c:22:33:3b:b4:23:ec:a2:bd:fb:19:33:df:26:
                    59:58:1c:2d:74:19:66:b5:06:f7:b4:b5:d2:7e:a2:
                    38:53:23:ce:f9:a0:11:b4:db:14:7c:47:d6:ff:9b:
                    2b:77:9d:d0:ce:83:30:0e:57:62:7c:05:03:60:8e:
                    fd:33:04:be:39:b8:6f:2f:57:3c:f3:b3:4f:07:a8:
                    ad:87:41:70:87:d2:94:3c:25:48:1d:7a:1b:18:1b:
                    ac:6e:4c:e8:4a:76:1e:eb:68:7b:06:7e:9c:16:8b:
                    4a:ef:47:69:96:42:fc:01:03:cf:e3:71:b9:5b:12:
                    5e:ca:e9:13:0c:8c:2f:2a:b8:a3:85:67:10:64:3a:
                    fe:f8:06:11:33:a5:39:03:38:74:39:ea:31:5c:17:
                    e5:e4:7c:f8:9b:c4:0a:d7:23:f5:28:13:6d:29:3a:
                    b6:3b:21:f6:a3:98:1a:3d:c5:1e:fb:a3:24:25:b3:
                    0c:c1:7e:48:5a:d2:00:59:3c:c6:b6:cc:9f:a9:2d:
                    46:83:e5:85:c5:50:26:f2:cf:a6:df:1f:36:37:7e:
                    91:4b:c6:a7:c5:20:9e:cf:1f:2e:60:b3:2d:f1:ce:
                    e8:af:73:b0:d9:6f:6c:80:64:c5:45:29:93:04:1f:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:D3:6E:D2:6F:F5:09:5A:5D:0C:AA:A2:EC:43:BE:2A:C6:13:43
            X509v3 Authority Key Identifier:
                keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B922DB22E84211EA918B8F09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.224.0/22
                  157.119.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:71:e9:5b:c3:cb:bd:0a:fd:9e:9a:b0:52:47:4e:c9:74:
         8b:28:df:87:d0:db:35:b3:32:f5:89:cc:14:ec:a6:ae:a4:9a:
         70:88:b1:f0:02:e5:8c:d7:f3:6f:14:ac:0c:f1:52:30:10:4c:
         5d:80:4d:69:88:f8:c0:e0:3e:c8:4c:8c:3f:d7:50:a1:68:e1:
         da:70:08:f9:ee:fd:06:35:5b:94:dc:26:f2:6b:21:6c:26:aa:
         28:6c:5a:bc:e3:ec:a4:24:a0:35:7d:7f:05:a5:31:53:4c:5a:
         03:97:04:a0:e6:84:07:27:b5:1c:cf:dc:13:27:81:50:04:69:
         22:43:e5:22:9b:09:57:a0:e7:7a:02:53:c8:57:9a:f2:76:37:
         2d:50:42:dc:00:08:9b:b0:03:65:97:b3:77:32:65:8c:d9:57:
         5f:2b:3a:01:ac:14:a4:e5:d0:b1:56:b3:7c:64:f3:15:55:4c:
         75:90:d4:ba:2c:67:1d:31:d5:12:b6:6c:20:b6:c4:d5:14:ee:
         dc:c2:5f:a4:8f:d8:c5:ef:89:8a:d6:ce:ca:41:ce:3d:fd:ef:
         a4:51:a7:ca:9f:4b:78:1a:f8:69:34:8a:3a:07:e6:f5:08:00:
         41:6e:16:dd:38:60:10:dc:07:7b:e8:78:40:5f:1b:18:d5:55:
         b2:a9:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:43 2026 by rpki-client