Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/85CB3A8A4A9D11F1A2093B779BEE528E.roa
File:                     85CB3A8A4A9D11F1A2093B779BEE528E.roa (raw, json)
Hash identifier:          HPg54/GUrW2e3ZBjByhQdgJ3W185EITXukQZc69O0IY=
Subject key identifier:   E6:7C:7A:61:41:65:A2:3F:DC:80:4D:3D:CD:FA:54:7F:AC:EA:0A:AB
Certificate issuer:       /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
Certificate serial:       1612
Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/85CB3A8A4A9D11F1A2093B779BEE528E.roa
Signing time:             Mon 08 Jun 2026 17:19:43 +0000
ROA not before:           Mon 08 Jun 2026 17:19:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137572
IP address blocks:        103.113.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl
                          rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5650 (0x1612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
        Validity
            Not Before: Jun  8 17:19:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a26f9af-dbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:ca:a3:33:7e:10:6f:14:e4:9b:a1:57:96:
                    f1:a5:44:08:30:34:59:dd:29:9d:19:28:28:55:e7:
                    e1:0f:a1:74:ce:77:9c:59:4b:b3:1c:16:bb:2d:08:
                    fa:be:a2:01:71:07:cd:5f:af:75:50:4c:ab:02:cf:
                    ea:6f:d8:49:e2:1d:28:bd:fb:1f:97:1c:a3:cf:26:
                    5e:12:50:0b:81:27:70:f8:a4:01:3f:63:18:b1:45:
                    23:9f:a9:80:c2:bb:ca:8b:52:0e:31:4b:0e:d2:26:
                    25:1c:38:21:4a:8b:0a:f5:40:11:9a:d8:9d:c9:18:
                    8e:ac:ad:da:1a:dd:f5:58:3f:00:5b:cd:59:00:f3:
                    42:f6:15:f9:0c:a5:85:fd:86:5c:ad:06:69:25:7f:
                    5b:99:0c:e3:10:33:30:bf:fc:25:b6:4d:50:94:a7:
                    2d:a4:de:20:a7:90:73:e0:a0:50:54:b5:6e:0b:79:
                    b0:58:68:59:f1:02:5e:cf:2a:22:b6:ba:f2:94:01:
                    71:59:40:8d:91:85:cb:47:8d:a0:23:fe:cc:de:96:
                    bb:2d:4b:99:79:b4:5f:12:df:c2:f2:90:e0:d6:dc:
                    19:01:e3:bd:30:27:7b:b6:55:f6:ba:84:c7:02:f6:
                    5b:05:fe:c2:1d:14:13:d4:bd:ca:d7:31:22:c4:5b:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:7A:61:41:65:A2:3F:DC:80:4D:3D:CD:FA:54:7F:AC:EA:0A:AB
            X509v3 Authority Key Identifier:
                keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/85CB3A8A4A9D11F1A2093B779BEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:7e:98:79:c1:2b:62:01:31:e7:b6:56:ef:f5:ea:30:22:
         14:49:d4:95:82:52:d3:0f:96:77:69:6a:f3:dc:bd:c9:dd:28:
         e7:cd:4b:dd:7c:4f:3f:86:54:f7:b9:77:51:68:2d:66:4b:b0:
         37:44:c6:03:61:d0:2c:04:6d:ae:af:69:93:fe:49:43:06:ef:
         cb:28:7a:30:4a:05:09:c6:b5:d3:e3:ba:96:ba:6a:71:b6:5d:
         6d:a5:b4:15:02:be:4a:8e:39:17:2a:4b:b8:2b:01:d8:27:47:
         43:e9:12:3e:d3:ce:94:1f:81:37:b7:48:03:ae:aa:da:54:0f:
         75:f4:9e:b1:18:71:1f:b9:51:09:c1:24:dd:fe:60:00:f9:ae:
         30:7d:8c:7a:e5:53:b7:5b:1d:c0:e5:4e:39:70:f8:a9:8a:d7:
         05:59:16:96:8b:f0:d6:b2:d5:18:b4:46:20:d4:b1:76:a9:b1:
         dc:b1:96:d9:d4:eb:3c:50:a0:83:ed:b9:30:f3:8f:a1:58:9f:
         bb:e6:65:11:d4:fb:6a:1e:11:4b:c6:c4:da:c4:40:15:2a:ae:
         a3:80:b3:dc:90:8d:bc:57:f5:3a:49:9f:c7:29:21:57:24:ac:
         bf:91:ad:30:f5:30:53:3c:b2:3e:d2:6d:30:7f:54:62:9d:4f:
         9e:47:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:12 2026 by rpki-client