Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa
File:                     B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (raw, json)
Hash identifier:          /XqmWl0Lkpfwb/6OseBLnwbOxOiRnyM7JBZ6D7Rj8oA=
Subject key identifier:   AF:B7:8F:DA:65:D2:70:64:C1:E9:20:71:19:C5:B9:E5:58:97:0B:58
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0A9A
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 20:23:43 +0000
ROA not before:           Thu 04 Jun 2026 20:23:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17941
IP address blocks:        103.26.32.0/22 maxlen: 22
                          103.26.33.0/24 maxlen: 24
                          103.26.34.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
                          2404:5480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2714 (0xa9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jun  4 20:23:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21dece-4c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:85:65:a3:67:28:ce:5e:bc:48:ee:c5:6c:
                    98:30:d5:80:d0:88:3e:6b:ed:17:02:cd:2d:f7:78:
                    03:3e:ed:46:a7:d4:03:a5:7e:b1:68:f6:79:84:c7:
                    f1:f3:48:a7:31:17:bd:04:69:41:a1:94:0b:a1:d6:
                    4a:35:01:94:d2:6e:84:7d:3b:3a:13:1b:22:a3:67:
                    1a:67:cc:05:b8:a1:ff:85:ab:01:f4:e4:c3:9d:5d:
                    5e:51:71:28:c1:8a:b0:67:f3:d9:b0:b6:e7:4e:d9:
                    1d:7c:82:65:ee:a4:0a:ef:96:bd:b5:20:5b:6c:90:
                    12:ae:0a:01:1f:79:b5:b0:88:db:24:6d:11:cc:36:
                    a9:d8:48:43:75:ea:c9:b2:06:24:e2:88:02:ab:21:
                    be:f5:ae:b6:40:a5:8a:97:f9:62:79:91:5c:35:94:
                    4b:16:6f:de:24:16:ed:88:44:ac:90:5c:e9:7d:b4:
                    05:c5:35:40:ec:9a:3a:4f:65:da:84:24:17:f5:5e:
                    8e:66:02:f8:0a:9a:c7:78:ae:16:35:cb:7a:a2:3e:
                    f4:1b:f4:d9:fa:31:1b:31:08:2b:87:88:88:57:53:
                    12:24:a4:27:8c:f0:c7:ee:f7:17:d1:c2:51:bd:b1:
                    db:f1:98:01:a4:7b:78:19:1e:7b:56:f3:5a:ee:28:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:8F:DA:65:D2:70:64:C1:E9:20:71:19:C5:B9:E5:58:97:0B:58
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.32.0/22
                IPv6:
                  2404:5480::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:14:e1:48:d6:e8:a4:e9:70:7a:cb:a5:9c:84:06:d7:57:b9:
         83:ac:75:69:e8:18:aa:d0:b5:5a:1e:cf:32:92:50:df:3f:38:
         08:45:2a:ac:39:7d:0a:e7:79:ab:5b:6b:67:a0:58:6f:d4:1f:
         92:91:8f:47:9f:15:ed:2e:69:dc:97:16:01:c9:20:10:c5:6d:
         59:8c:5d:0d:38:a9:98:db:d9:5e:77:c9:99:72:c2:cd:b0:e9:
         06:58:5d:17:56:de:01:ce:76:31:ed:a9:b2:50:c0:2b:aa:35:
         36:fa:d0:a8:19:4c:5d:32:f3:6b:f1:b2:27:d3:45:78:6f:45:
         07:24:f5:31:9f:39:3e:46:52:8f:5e:5e:78:31:a6:3d:52:e1:
         4c:0b:9c:67:58:d6:d9:f7:da:a5:6f:26:b6:1a:ac:d8:22:a2:
         4d:89:4f:8c:a8:2a:8b:86:6a:f8:47:15:49:6e:d8:4d:38:0b:
         3f:99:ab:fa:11:f1:dd:cf:96:7a:a7:90:68:21:f1:1d:36:91:
         4f:ca:13:fa:e0:6f:b2:36:97:39:e8:9f:41:5b:79:bb:cb:10:
         2b:00:ef:21:6e:ea:7c:be:3a:1d:7d:29:ba:2a:aa:6e:51:59:
         05:fb:fc:c3:5e:4f:20:11:aa:70:09:c6:47:d7:c9:b8:77:89:
         7f:16:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:26 2026 by rpki-client