Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa
File:                     9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (raw, json)
Hash identifier:          CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=
Subject key identifier:   9F:CF:C3:FC:A7:D1:76:73:AC:F7:CD:FE:F8:BE:C6:90:6F:9B:64:B3
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       0507
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 00:29:07 +0000
ROA not before:           Fri 05 Jun 2026 00:29:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.231.12.0/22 maxlen: 24
                          202.181.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jun  5 00:29:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a221853-a38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:13:90:33:9b:66:00:33:58:aa:38:b0:c6:
                    19:20:d3:29:75:a8:16:de:96:06:c4:d0:da:5b:5a:
                    a8:2a:24:53:b4:0d:ae:c1:e6:9a:69:78:09:0f:fc:
                    17:30:94:48:d5:3e:db:32:b5:38:e2:45:c0:c2:4e:
                    23:c6:b7:77:c4:5f:17:cb:9a:ac:f2:60:6c:19:5a:
                    94:ad:6b:d2:ce:7a:4c:f7:2e:ee:45:42:bf:91:2b:
                    2f:50:4d:06:6a:10:c5:ad:0e:35:42:ea:95:ee:eb:
                    06:b0:87:ef:e7:f1:ee:f1:60:e0:6b:cb:e8:24:05:
                    13:e8:c5:a6:a8:f9:6f:7c:28:31:6e:7f:c6:e1:ae:
                    fc:78:93:76:c4:61:57:51:a7:46:b7:9f:fa:f4:71:
                    a6:2c:41:b0:8b:36:61:0d:e2:29:f0:81:00:7d:74:
                    f9:01:86:30:70:97:38:00:01:61:a2:ce:20:81:a8:
                    b9:ef:a0:f7:7c:c0:33:66:59:66:21:6f:e2:11:3e:
                    21:20:7c:a9:52:6f:0d:08:34:d6:f6:e4:f4:9c:f5:
                    b5:ad:b3:c4:a1:05:84:71:bb:4e:e6:d7:fe:1c:1b:
                    7a:22:97:2e:d8:91:c5:8d:14:d9:9f:30:1f:24:cb:
                    ff:67:73:e3:c2:d0:67:9c:81:8b:9e:88:a0:d9:d0:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CF:C3:FC:A7:D1:76:73:AC:F7:CD:FE:F8:BE:C6:90:6F:9B:64:B3
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.12.0/22
                  202.181.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:94:ed:09:3c:5f:52:0a:16:6d:a9:57:6e:b8:58:01:77:
         ac:60:fd:f0:3d:f5:f1:23:d2:b3:e4:d9:7b:40:3a:ec:5d:0c:
         78:89:88:1a:7a:32:bb:d6:c9:10:54:11:a4:e5:78:c6:3a:c6:
         7d:0b:5f:2b:9e:ce:46:64:91:cd:60:51:aa:c8:ce:61:8e:6d:
         fa:5d:43:5a:0e:24:c6:2c:fb:26:97:66:5e:f1:43:ea:22:94:
         6d:04:62:db:1c:26:17:c6:f3:47:b5:14:72:92:f8:de:07:8a:
         18:22:f1:4c:62:71:66:03:a6:e2:13:62:c3:8c:d5:bd:f8:ad:
         37:da:52:84:32:44:5d:09:ab:89:55:f7:cb:9b:7e:3e:d8:19:
         89:c8:29:99:06:27:bc:f9:0f:4a:d1:a1:c6:3b:19:14:df:68:
         b0:6e:1c:71:14:bb:b1:89:a9:02:42:53:31:1b:b9:43:c3:60:
         0d:f1:df:20:58:99:18:a9:97:18:68:a4:ef:73:af:c6:90:e7:
         3b:7d:7e:55:05:76:9d:61:a3:0a:e1:20:52:88:ac:af:82:3c:
         55:ef:2f:f0:5f:a2:8a:25:89:a4:b0:a2:f8:67:65:9f:e9:2f:
         be:96:73:29:13:d9:87:0d:51:e7:74:2a:24:a2:b0:e9:02:a0:
         25:f0:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:06 2026 by rpki-client