Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/4C1DFC6E600F11F1B719D3058847A888.roa
File:                     4C1DFC6E600F11F1B719D3058847A888.roa (raw, json)
Hash identifier:          XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=
Subject key identifier:   08:9A:74:78:A4:31:03:C0:DF:63:16:DB:20:FA:58:DB:CF:9B:4B:B1
Certificate issuer:       /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
Certificate serial:       0250
Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/4C1DFC6E600F11F1B719D3058847A888.roa
Signing time:             Fri 05 Jun 2026 03:32:52 +0000
ROA not before:           Fri 05 Jun 2026 03:32:52 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55492
IP address blocks:        103.206.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl
                          rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
        Validity
            Not Before: Jun  5 03:32:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a224364-4d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:fa:36:2a:ce:38:73:a4:3f:91:fd:2c:20:
                    29:a8:69:d7:be:d0:f2:d7:33:e5:ce:b8:55:57:91:
                    0f:69:74:90:4e:cd:a7:f4:a9:db:2f:c1:8a:de:10:
                    50:7c:63:4e:93:1b:9e:fc:11:61:ef:87:ca:73:0b:
                    ba:92:bd:26:06:9d:fb:bd:45:e0:10:cf:96:53:d5:
                    60:c4:64:99:33:d7:ac:0d:17:13:cb:37:03:50:e8:
                    1b:07:5f:b3:bc:c8:8a:9f:16:31:7b:dd:93:d6:6f:
                    f6:26:88:08:55:16:07:04:d5:f9:26:69:02:a2:e1:
                    4c:06:a8:27:55:36:6f:2b:af:c3:b8:df:6d:0a:7f:
                    b1:6d:da:52:82:65:3e:fe:ba:0e:44:aa:63:24:47:
                    7f:53:4a:ff:0d:5f:aa:8f:d5:7a:23:7e:f9:5b:94:
                    c8:03:3d:d7:d1:52:2e:78:23:ce:42:7a:b1:20:16:
                    d7:ab:f9:bd:9b:93:71:83:66:3f:93:31:d0:58:a4:
                    cc:6a:8f:61:ad:20:0e:26:af:45:cc:cd:20:cf:b4:
                    da:54:e9:31:0c:14:08:ee:ff:28:01:97:fc:f0:cd:
                    6e:18:e6:41:21:ae:62:e6:20:c7:a9:a3:20:10:61:
                    6d:7c:b9:cb:61:04:19:05:1d:2b:ca:60:64:1d:2e:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9A:74:78:A4:31:03:C0:DF:63:16:DB:20:FA:58:DB:CF:9B:4B:B1
            X509v3 Authority Key Identifier:
                keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/4C1DFC6E600F11F1B719D3058847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:5d:7e:2e:cc:2e:e7:de:e8:bd:d8:d1:15:0e:af:1e:87:
         d1:d5:5b:23:41:e5:36:1d:f0:59:ee:19:29:0d:f1:16:76:2e:
         d7:76:31:c9:24:e8:4c:7d:b4:f6:68:14:e8:ef:c0:85:05:56:
         10:e5:40:79:62:4d:b7:6b:7a:8b:9e:69:49:1d:72:01:8e:8a:
         81:15:95:d5:1f:4a:1c:cc:31:ab:c3:2e:69:13:89:9c:a7:7a:
         1a:89:25:61:4f:4f:d0:e3:ff:21:67:a4:cf:d2:73:57:fd:58:
         25:68:f1:31:40:e6:22:4a:1f:99:98:48:30:3e:b5:77:59:1c:
         62:4f:a2:2f:6f:7e:c7:98:9a:4e:b8:00:4d:41:ed:b4:27:49:
         2e:09:2c:ba:cc:16:e9:dc:10:98:c4:ba:cc:4f:60:f8:3d:94:
         f4:eb:55:20:d5:93:d4:ce:bb:e4:97:60:84:38:09:ef:72:53:
         d1:43:af:bf:f4:43:4b:9c:b4:1a:bd:45:32:64:4f:1f:0f:73:
         d3:3a:9c:d7:b9:40:8d:fd:cf:41:0a:76:fa:91:06:ce:d8:cd:
         ab:02:68:26:c2:d2:3f:8f:12:21:f4:33:5f:c3:58:90:f9:a1:
         16:9f:2e:d6:0c:0e:d6:c8:3d:b8:6d:47:e2:ed:3b:52:fe:b1:
         ee:40:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:57 2026 by rpki-client