Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/C03BA12660AC11F1B80142DA7A47A888.roa
File:                     C03BA12660AC11F1B80142DA7A47A888.roa (raw, json)
Hash identifier:          1rlNF5wln/DSnw+mW/H0rHcAvMGY9erbcPvffsjkYjg=
Subject key identifier:   2E:EF:B5:25:C5:44:FA:AD:BB:41:A0:A9:AF:BD:A8:A6:25:65:C4:53
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0AA3
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/C03BA12660AC11F1B80142DA7A47A888.roa
Signing time:             Tue 09 Jun 2026 01:54:52 +0000
ROA not before:           Tue 09 Jun 2026 01:54:52 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.26.33.0/24 maxlen: 24
                          103.26.34.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jun  9 01:54:52 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a27726c-93a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:80:b7:e6:e7:ad:0d:a1:ca:87:ed:3c:1d:
                    d5:a9:24:c5:01:ff:0a:c4:0a:78:52:4b:46:e2:b3:
                    53:ec:e7:de:95:d9:9f:ce:45:0e:da:5e:11:f7:89:
                    3e:0d:d1:f2:6d:b1:1b:34:c1:b7:d7:fe:2e:8d:7a:
                    f2:c0:8a:f7:9c:1c:49:ec:7f:1d:fd:6b:57:a5:be:
                    c5:9a:42:e0:90:d7:eb:11:40:8c:33:20:35:c3:d7:
                    50:61:f7:86:22:26:2d:50:13:39:73:3e:16:31:7f:
                    db:ce:e5:1f:fa:b5:4e:c0:f7:99:17:9f:a3:27:34:
                    ec:fc:d3:74:3d:3c:19:e3:fb:2c:08:e7:45:84:1b:
                    80:83:4e:57:92:57:5d:62:a3:86:41:23:21:91:e0:
                    bb:3a:48:d2:d4:d9:85:55:44:29:97:bf:35:42:56:
                    94:89:6e:b7:77:a9:87:1b:58:a9:e8:2d:a0:c3:36:
                    7b:69:72:7b:74:6c:76:d6:67:d6:6e:f0:c6:82:67:
                    21:1f:ef:01:71:00:64:b9:24:d3:a9:66:f1:a2:07:
                    d6:88:35:1c:ff:59:e0:fd:db:83:4e:9a:a3:e3:12:
                    77:4c:8d:e5:32:9e:88:f8:8a:15:8e:00:56:9a:dc:
                    5c:fd:13:ed:92:c3:09:5e:75:06:9f:41:05:d0:84:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:B5:25:C5:44:FA:AD:BB:41:A0:A9:AF:BD:A8:A6:25:65:C4:53
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/C03BA12660AC11F1B80142DA7A47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.33.0-103.26.35.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:f2:bb:71:80:32:f4:03:85:e3:a4:b9:9a:52:44:44:a2:
         d0:75:16:cf:9c:85:70:7d:6c:61:af:9e:64:9e:fa:1f:cc:fe:
         be:97:3a:c7:e2:d5:8f:1e:45:d7:4d:30:18:dd:f9:5a:1b:a1:
         26:dc:c9:e7:3a:46:aa:ed:17:d5:0e:c4:14:b0:d4:a9:3c:5d:
         24:7b:93:72:80:28:f3:77:ed:07:cd:46:23:19:83:a4:f4:a6:
         17:20:05:9d:7e:56:9b:3c:9c:41:61:58:42:ea:70:a5:d4:9a:
         c7:1f:b2:39:d0:9a:d9:ad:b8:d7:d6:16:b5:90:ba:93:71:e9:
         b3:23:db:5d:58:0f:9b:53:85:32:9f:f5:46:76:83:6e:79:09:
         73:6d:6e:f4:2c:83:0c:a3:0a:f7:23:ba:56:70:d4:03:c7:0e:
         56:6d:77:b6:f1:c4:13:a9:ae:7d:51:d8:e5:76:e2:9e:29:c6:
         2b:a9:88:74:4b:dd:33:62:fa:67:ff:18:85:7e:96:dc:77:aa:
         e3:a5:61:90:25:86:bc:c5:d9:cb:14:b7:b9:90:16:24:76:f7:
         8b:83:89:1f:ea:f6:41:e5:b4:76:44:dd:08:b2:b3:d2:9d:7f:
         a5:e2:93:18:a0:7a:a2:4f:e2:14:d3:5a:db:60:82:87:d5:cf:
         e1:1c:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:42:01 2026 by rpki-client