Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
File:                     23C2AF26267111F19CC61B4CAD833773.roa (raw, json)
Hash identifier:          96OHm5flKtG3HpGx8qNjs1cZoYkHYYW1WQFro4+87nk=
Subject key identifier:   04:88:6D:B8:F8:68:84:80:0F:45:F4:10:D5:8A:B7:FF:E4:A7:C7:3B
Certificate issuer:       /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Certificate serial:       3B
Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
Signing time:             Fri 05 Jun 2026 09:40:31 +0000
ROA not before:           Fri 05 Jun 2026 09:40:31 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152848
IP address blocks:        103.155.60.0/24 maxlen: 24
                          103.155.61.0/24 maxlen: 24
                          2001:df3:cdc0::/48 maxlen: 48
                          2402:5c20::/32 maxlen: 32
                          2402:5c20:1000::/48 maxlen: 48
                          2402:5c20:1001::/48 maxlen: 48
                          2402:5c20:1002::/48 maxlen: 48
                          2402:5c20:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
        Validity
            Not Before: Jun  5 09:40:31 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22998f-0828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:a5:ac:cc:8f:65:6a:5e:5e:ce:91:00:4e:
                    02:d7:81:ee:96:64:53:16:31:a9:12:57:47:96:c8:
                    e0:bb:e4:8f:72:10:8e:5b:c5:b2:cc:97:f6:b7:a5:
                    60:28:2c:80:2a:bf:44:d4:ab:5f:59:e1:4f:d7:33:
                    14:0c:e4:df:96:9a:62:5f:f4:ef:8d:9e:0b:c2:f5:
                    38:fd:29:d7:a8:fe:46:15:31:db:da:da:b2:f7:fa:
                    09:40:7d:95:e6:92:71:4c:11:bb:41:ee:f1:25:53:
                    28:b6:03:87:37:62:bc:cb:25:f5:b6:1f:e4:ac:0f:
                    d7:90:82:98:87:0a:c1:dd:75:60:0c:ad:8c:e2:3a:
                    c6:2a:fd:80:e6:9a:45:f5:c7:78:03:13:60:44:4b:
                    e7:77:e5:ac:53:c4:3d:de:4d:3b:85:11:80:95:06:
                    3c:b8:b2:bb:69:48:a5:3b:95:ae:b7:1c:c5:6e:53:
                    34:1c:a3:5a:63:2e:5c:63:98:5d:68:07:53:34:40:
                    9b:8d:8c:30:99:87:71:c0:d3:f1:eb:65:ad:99:5e:
                    6a:a1:dd:00:6b:f1:62:2b:6f:0c:3d:92:59:0b:c2:
                    7a:f2:91:72:97:70:95:9e:26:fd:bf:ff:53:eb:65:
                    aa:b8:8a:1f:89:0b:d6:2d:d8:b2:dd:3c:8c:90:c4:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:88:6D:B8:F8:68:84:80:0F:45:F4:10:D5:8A:B7:FF:E4:A7:C7:3B
            X509v3 Authority Key Identifier:
                keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.60.0/23
                IPv6:
                  2001:df3:cdc0::/48
                  2402:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:d5:b7:2f:f7:2f:bc:ad:64:29:c9:15:0d:a3:0b:77:a4:
         07:ab:d2:6f:62:0c:44:ab:70:64:f3:85:2f:ce:a1:0b:92:0a:
         2a:a6:45:fc:c3:01:36:4e:39:48:1e:bb:ea:94:f2:33:55:f2:
         e1:84:13:62:0d:fb:88:d7:ed:2c:f7:ac:f4:b0:80:65:c7:26:
         22:9c:cf:e3:d0:49:7d:b9:12:e5:8c:45:f6:51:01:70:9f:3b:
         4e:af:41:07:90:79:ff:ba:72:1b:dc:a2:41:39:9a:6f:05:56:
         88:ea:59:69:a6:7a:be:1b:6c:f5:bc:29:3b:3a:e5:6e:91:d5:
         8c:db:e7:7c:37:70:62:9f:e9:4d:f3:5e:a1:16:12:57:09:de:
         29:1f:78:23:31:af:b6:3b:63:7e:68:c8:84:db:df:7a:f7:6d:
         95:d6:f0:ba:bb:5a:03:59:10:1a:3c:97:d6:d8:7e:bb:df:e2:
         b7:92:01:33:11:8a:1b:ba:ac:43:4a:1c:da:2f:a7:a2:2a:0c:
         9c:81:34:b3:45:ef:3e:25:be:00:e9:9b:9b:36:4f:84:f4:34:
         42:b6:4b:ee:78:50:e2:e0:a5:85:1f:c3:b3:70:59:74:bb:53:
         51:d1:27:1d:b5:e1:bd:d2:28:cd:f6:03:f8:71:32:d4:67:01:
         95:e6:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:48 2026 by rpki-client