Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
File:                     305312F67CA011F098F1673CC4F9AE02.roa (raw, json)
Hash identifier:          lhzM9z8OXSZtL42dACsDKb2baY92Tpkrj0DbKY+bzHY=
Subject key identifier:   B8:79:12:16:A2:93:DF:50:82:95:52:57:B2:EB:12:B2:75:BF:95:FC
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0A99
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 20:23:41 +0000
ROA not before:           Thu 04 Jun 2026 20:23:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     15380
IP address blocks:        103.26.33.0/24 maxlen: 24
                          103.26.34.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713 (0xa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jun  4 20:23:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21decd-e6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:4b:9d:0b:4d:70:c8:ed:06:57:eb:46:53:
                    5f:c0:25:f8:38:02:82:fb:33:d5:bd:cf:f3:7d:ed:
                    56:de:56:cd:73:c0:60:8b:72:f4:e2:f2:93:ee:fa:
                    a7:26:d5:c1:1b:28:cb:4d:58:e2:29:06:63:f4:19:
                    68:6d:94:67:63:e5:69:bc:53:a0:91:b1:cb:b3:da:
                    28:f5:61:21:57:39:cd:f2:5b:33:18:aa:f1:ff:a4:
                    d5:e0:ae:6b:3d:12:6e:92:6e:52:cf:95:c7:49:2f:
                    86:53:18:5a:9e:27:ad:85:27:46:ac:f2:24:81:7d:
                    ea:36:0e:64:3c:fb:62:64:ea:8f:5e:69:f2:00:17:
                    9c:7f:56:5e:ad:11:05:92:38:d7:68:a0:69:6b:21:
                    65:2f:55:9b:8f:83:d9:aa:21:10:98:18:b3:34:36:
                    1a:b0:1c:64:25:56:ee:3c:48:9d:49:02:1d:3f:95:
                    09:a0:5a:ce:78:ef:56:02:e1:7c:7a:15:75:93:86:
                    3f:9c:e9:9c:82:16:be:65:25:4b:b9:65:25:45:1a:
                    f8:7f:09:98:6c:03:be:23:24:1e:4e:13:4a:49:7d:
                    f5:e3:a3:7e:f4:d8:9c:75:05:71:5b:d5:0b:0d:56:
                    08:e9:88:c6:ce:a6:1d:49:31:b3:2e:52:cb:a5:62:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:12:16:A2:93:DF:50:82:95:52:57:B2:EB:12:B2:75:BF:95:FC
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.33.0-103.26.35.255

    Signature Algorithm: sha256WithRSAEncryption
         53:08:64:df:d7:59:28:db:79:48:2e:dc:19:04:d5:71:2f:84:
         6b:e5:0d:91:99:66:67:84:4f:e3:6c:0b:ee:f0:e1:04:cf:5c:
         ad:26:02:7c:f2:82:1b:f0:58:1d:b4:c1:8f:3c:eb:fd:7a:1b:
         4f:c4:59:17:6a:0e:56:74:31:43:75:da:91:92:a0:b2:ba:42:
         67:76:b4:05:3c:58:6a:46:3f:14:22:9c:27:bb:18:01:ac:9b:
         7d:60:ac:e4:d8:db:ab:c8:54:cb:5b:48:cf:1a:c4:29:35:4c:
         90:32:82:d6:90:4f:f4:67:bb:b7:98:9a:99:8c:cf:9d:e1:57:
         b8:5f:8a:cc:e0:44:18:1a:dc:bf:27:b6:0c:ae:bb:7e:6f:04:
         48:b7:21:b3:d8:60:e2:55:05:63:4a:17:73:4e:f1:e7:2a:32:
         a7:f7:63:41:84:88:1c:f5:7d:5f:cb:8e:be:ab:87:c6:6d:48:
         2f:73:13:09:10:fe:e6:49:84:2b:55:9d:2f:dc:e4:90:c1:9f:
         04:03:f2:a9:6d:c3:37:29:a5:41:33:a3:10:d2:79:25:5f:33:
         f4:fd:b8:bd:b0:9b:14:42:65:5b:f3:12:fe:b0:bb:dd:6e:aa:
         f4:77:7a:00:58:f3:f9:47:e4:fc:85:b0:aa:03:ec:2e:ea:18:
         09:d9:f6:d7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC
MERGMTE2NEUwHhcNMjYwNjA0MjAyMzQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGVjZC1lNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkPhLnQtNcMjtBlfrRlNfwCX4OAKC+zPVvc/zfe1W3lbNc8Bgi3L04vKT7vqn
JtXBGyjLTVjiKQZj9BlobZRnY+VpvFOgkbHLs9oo9WEhVznN8lszGKrx/6TV4K5r
PRJukm5Sz5XHSS+GUxhaniethSdGrPIkgX3qNg5kPPtiZOqPXmnyABecf1ZerREF
kjjXaKBpayFlL1Wbj4PZqiEQmBizNDYasBxkJVbuPEidSQIdP5UJoFrOeO9WAuF8
ehV1k4Y/nOmcgha+ZSVLuWUlRRr4fwmYbAO+IyQeThNKSX3146N+9NicdQVxW9UL
DVYI6YjGzqYdSTGzLlLLpWKYIwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLh5Ehai
k99QgpVSV7LrErJ1v5X8MB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy
QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTBBNkMvQjkxNkYzODg4MkMyMTFFQTlBNTE0NjM5QzRGOUFFMDIvMzA1MzEyRjY3
Q0EwMTFGMDk4RjE2NzNDQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnGiEDBAJnGiAwDQYJKoZIhvcNAQELBQADggEBAFMIZN/XWSjb
eUgu3BkE1XEvhGvlDZGZZmeET+NsC+7w4QTPXK0mAnzyghvwWB20wY886/16G0/E
WRdqDlZ0MUN12pGSoLK6Qmd2tAU8WGpGPxQinCe7GAGsm31grOTY26vIVMtbSM8a
xCk1TJAygtaQT/Rnu7eYmpmMz53hV7hfiszgRBga3L8ntgyuu35vBEi3IbPYYOJV
BWNKF3NO8ecqMqf3Y0GEiBz1fV/Ljr6rh8ZtSC9zEwkQ/uZJhCtVnS/c5JDBnwQD
8qltwzcppUEzoxDSeSVfM/T9uL2wmxRCZVvzEv6wu91uqvR3egBY8/lH5PyFsKoD
7C7qGAnZ9tc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:20 2026 by rpki-client