Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa
File:                     297CAAF2600F11F19DD612FE8747A888.roa (raw, json)
Hash identifier:          3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=
Subject key identifier:   39:64:7B:5D:05:48:92:A6:A8:EA:F3:F4:5B:94:89:02:EB:A4:99:01
Certificate issuer:       /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
Certificate serial:       024F
Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa
Signing time:             Fri 05 Jun 2026 03:32:50 +0000
ROA not before:           Fri 05 Jun 2026 03:32:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138611
IP address blocks:        103.206.16.0/24 maxlen: 24
                          2401:160::/32 maxlen: 32
                          2401:160::/46 maxlen: 46
                          2401:160::/48 maxlen: 48
                          2401:160:1::/48 maxlen: 48
                          2401:160:2::/48 maxlen: 48
                          2401:160:3::/48 maxlen: 48
                          2401:160:4::/46 maxlen: 46
                          2401:160:4::/48 maxlen: 48
                          2401:160:5::/48 maxlen: 48
                          2401:160:6::/48 maxlen: 48
                          2401:160:7::/48 maxlen: 48
                          2401:160:8::/48 maxlen: 48
                          2401:160:9::/48 maxlen: 48
                          2401:160:10::/48 maxlen: 48
                          2401:160:11::/48 maxlen: 48
                          2401:160:12::/48 maxlen: 48
                          2401:160:13::/48 maxlen: 48
                          2401:160:14::/48 maxlen: 48
                          2401:160:15::/48 maxlen: 48
                          2401:160:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl
                          rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
        Validity
            Not Before: Jun  5 03:32:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a224362-f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:39:ae:f8:c3:95:ad:ab:28:1c:11:6a:b7:
                    f0:5f:d0:01:40:35:75:27:04:27:f2:e1:16:58:db:
                    ee:bb:69:ad:39:a8:03:84:e6:d9:ff:c3:9f:21:9d:
                    37:7c:83:14:c7:3b:17:13:fe:ca:7f:78:ab:2a:e6:
                    3b:df:f8:b1:fd:22:01:f1:62:61:1c:99:28:4b:d4:
                    69:0e:16:d8:dc:82:1b:2f:73:e5:8c:c9:02:82:a8:
                    1f:94:e3:26:83:1f:35:a1:e4:19:88:1f:94:85:85:
                    c7:26:07:1e:a6:84:a4:ea:01:23:f1:65:82:25:4b:
                    bd:3e:41:9e:a2:a3:77:6c:77:26:62:d3:ea:2f:30:
                    b3:36:c1:dc:12:e9:36:08:ad:e8:2e:9a:18:ee:ef:
                    eb:51:24:d4:1b:5e:63:1c:88:c6:d8:56:79:98:ae:
                    84:f8:ec:43:15:12:ad:f2:79:2f:94:53:59:ac:5f:
                    7d:43:8f:ec:15:2a:94:b2:18:11:18:d5:6b:e7:36:
                    67:64:ac:0c:ce:8d:59:73:ea:a2:7c:10:0a:a8:4d:
                    5f:4d:00:84:bb:9e:34:5f:39:b7:5e:f3:5d:f8:cf:
                    cd:49:73:c3:fa:b6:05:ea:e9:f8:ed:d1:2a:df:b9:
                    32:73:07:fc:b5:ab:b3:3b:32:f5:78:62:f0:19:22:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:7B:5D:05:48:92:A6:A8:EA:F3:F4:5B:94:89:02:EB:A4:99:01
            X509v3 Authority Key Identifier:
                keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.16.0/24
                IPv6:
                  2401:160::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:05:c9:41:e6:af:32:41:35:29:37:be:af:34:b1:72:68:99:
         82:88:de:e3:fc:78:0a:b0:38:3b:42:12:51:3e:65:4f:b4:34:
         be:31:b2:75:dd:d8:85:5e:ad:08:a5:b9:55:7d:b0:c7:1d:8e:
         7f:28:82:22:41:16:74:ff:54:a1:46:2e:03:f6:d8:67:6b:21:
         8d:53:88:f5:ed:0c:35:58:9f:3a:ae:ad:b6:93:db:7e:0c:bb:
         19:82:e0:3a:03:92:a4:1f:ce:a7:1f:44:79:8f:b3:66:ef:0e:
         d0:d6:66:7c:91:85:25:fb:4e:d2:b9:d3:c1:f6:45:43:b4:13:
         37:08:99:26:af:02:6d:72:a2:23:76:cf:17:ce:8b:fd:e3:05:
         0d:ee:d4:40:05:c3:fc:eb:a0:ec:b2:3c:78:8d:89:a5:75:02:
         ad:ed:b8:63:83:6a:90:db:cb:0e:10:a0:85:47:46:7a:7c:0c:
         14:f0:f9:58:4f:94:0f:cb:f1:ea:1e:07:45:d9:f5:97:c6:f2:
         4c:25:a0:99:3e:ea:54:44:ac:f0:2b:20:c2:a0:03:fe:7e:c6:
         a1:4c:17:57:73:fa:40:14:fc:6b:0c:f6:39:66:93:fa:3d:86:
         a5:d9:be:30:12:1f:9d:f5:08:95:44:49:ab:cc:0e:72:c1:ef:
         fd:e1:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:48 2026 by rpki-client