Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
File:                     8B802D485F2211EC88AA0F84C4F9AE02.roa (raw, json)
Hash identifier:          rJhV33fhTZ9wWjDZMsmY3oUmfWvnegOyW8s4W29U15g=
Subject key identifier:   EB:B1:FC:4B:A8:A4:E1:E2:20:E6:5E:ED:05:79:C5:EC:16:D9:67:B4
Certificate issuer:       /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial:       0AB3
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
Signing time:             Sat 06 Jun 2026 20:23:22 +0000
ROA not before:           Sat 06 Jun 2026 20:23:22 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     41477
IP address blocks:        103.219.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
        Validity
            Not Before: Jun  6 20:23:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2481ba-2c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:2d:50:05:55:9f:08:9a:79:1e:f5:3b:7f:
                    6f:af:df:e1:a1:e6:94:7e:0a:03:46:5f:fe:af:5e:
                    d9:8f:e4:5d:f3:5c:b0:a5:d7:21:1b:f8:ac:01:eb:
                    66:06:f4:08:e1:3e:06:c6:36:ce:c2:c9:40:71:7b:
                    48:2e:2a:7e:9e:db:d4:52:be:6d:af:7a:2b:db:93:
                    a5:5f:a1:e3:3f:a9:c7:ec:66:2d:cc:d5:66:2c:fe:
                    13:6b:f3:ef:b6:08:f1:7b:14:0f:40:f5:32:f5:7e:
                    c2:fd:e1:87:a6:72:05:0d:4c:07:73:3f:62:df:00:
                    34:65:29:48:b5:4a:42:3b:1b:71:6e:9a:7d:26:d0:
                    97:b6:64:66:7f:b1:8e:8c:c5:6a:9f:35:03:7a:70:
                    43:a3:1a:83:f5:02:0b:5e:cc:a4:1f:c9:e0:16:71:
                    f8:96:2e:61:bd:6e:29:51:bf:3d:f0:0a:9f:e7:b5:
                    c8:4b:91:7b:ce:ec:b3:00:6c:63:7a:b4:56:e2:52:
                    00:33:bb:0e:91:1e:18:20:66:93:e3:61:08:8b:aa:
                    8d:95:44:7a:66:19:04:cc:f7:d7:76:37:50:58:e7:
                    73:69:73:cf:4a:30:cb:e1:66:52:4f:3b:2a:33:d9:
                    b6:d7:1a:39:fa:87:0f:24:d0:17:c6:0a:38:48:a7:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:FC:4B:A8:A4:E1:E2:20:E6:5E:ED:05:79:C5:EC:16:D9:67:B4
            X509v3 Authority Key Identifier:
                keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:74:82:c6:1c:ba:ee:e6:f1:de:f1:c3:f8:ee:7b:6c:fc:70:
         79:5a:ae:3b:5f:fc:c0:51:8a:5a:dc:79:5d:67:45:9f:e7:4d:
         b5:bf:d9:4f:7c:ef:23:34:9c:70:19:44:1d:44:52:f4:40:a3:
         d6:68:83:0f:42:b7:92:af:1c:7f:7d:4b:48:eb:0c:05:7c:e4:
         c6:11:74:74:5d:e8:61:96:cb:65:31:a2:84:bb:8c:90:ae:89:
         fb:cc:2e:1d:b9:c9:26:a6:70:f2:7a:42:a0:9d:cc:04:7d:28:
         f7:d4:3c:9d:58:af:f6:71:25:a9:dd:ac:43:9d:7a:51:55:8a:
         6c:9b:85:b9:b9:57:eb:b0:21:74:b5:f7:c2:28:ff:33:db:7b:
         b2:4b:4d:2a:d0:dc:41:61:5c:d5:1b:83:dc:f0:27:e4:d3:20:
         53:ec:4d:86:3a:a9:52:02:e9:26:71:a6:7b:c5:0b:65:5e:41:
         6a:26:6f:9b:da:e8:8e:8b:a5:97:6b:1a:5b:15:a1:20:74:c6:
         ed:92:09:11:e9:8a:78:fc:06:be:c2:59:33:38:18:a1:a8:f6:
         dd:f3:71:eb:c8:b4:0b:dc:7a:73:47:08:bb:62:0d:2f:90:34:
         f4:7c:d9:c6:86:ff:2b:df:34:f8:fd:18:cb:54:14:41:75:19:
         d1:19:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:52 2026 by rpki-client