Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/24C380E04F8811F1995B86AB91833773.roa
File:                     24C380E04F8811F1995B86AB91833773.roa (raw, json)
Hash identifier:          i/C/Zv+lf4zgTKZQlSdIZArw/siwXGF8uhHhJmmLFFo=
Subject key identifier:   D9:7D:E7:9A:93:12:E9:8F:D7:DF:89:84:C4:3A:C7:33:39:20:2D:D2
Certificate issuer:       /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial:       66
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/24C380E04F8811F1995B86AB91833773.roa
Signing time:             Thu 14 May 2026 11:45:00 +0000
ROA not before:           Thu 14 May 2026 11:45:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     23672
IP address blocks:        103.155.182.0/24 maxlen: 24
                          103.155.183.0/24 maxlen: 24
                          203.78.165.0/24 maxlen: 24
                          2402:3020::/32 maxlen: 32
                          2402:3020::/36 maxlen: 36
                          2402:3020:1000::/36 maxlen: 36
                          2402:3020:2000::/36 maxlen: 36
                          2402:3020:3000::/36 maxlen: 36
                          2402:3020:4000::/36 maxlen: 36
                          2402:3020:5000::/36 maxlen: 36
                          2402:3020:6000::/36 maxlen: 36
                          2402:3020:7000::/36 maxlen: 36
                          2402:3020:8000::/36 maxlen: 36
                          2402:3020:9000::/36 maxlen: 36
                          2402:3020:a000::/36 maxlen: 36
                          2402:3020:b000::/36 maxlen: 36
                          2402:3020:c000::/36 maxlen: 36
                          2402:3020:d000::/36 maxlen: 36
                          2402:3020:e000::/36 maxlen: 36
                          2402:3020:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
        Validity
            Not Before: May 14 11:45:00 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a05b5bc-90c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:b3:41:49:b5:56:5f:05:63:40:dd:9c:85:
                    1f:f4:3f:a4:4f:b0:c4:b3:31:94:1b:24:83:48:74:
                    59:a3:a1:66:18:75:3c:f1:3f:8c:a3:12:9e:9d:3b:
                    6a:b7:d6:75:95:f1:07:f1:0f:55:df:67:fe:33:af:
                    fa:4d:17:8d:92:1d:a0:8d:7e:cf:ff:48:2c:50:ae:
                    8f:8e:ab:aa:94:5a:6a:62:db:ef:05:e5:46:7e:de:
                    29:c4:c4:b2:46:7b:19:ce:73:a8:0d:5b:a9:fc:61:
                    e0:c7:d7:d1:46:59:39:4a:99:25:db:c2:1b:23:69:
                    30:d7:dd:ed:2a:7c:4f:82:28:32:98:95:c7:63:dc:
                    b2:5a:cf:2f:ed:25:b6:29:ab:fe:c0:2c:8a:42:06:
                    38:e7:e2:23:90:5c:2c:50:fa:30:fd:db:9b:8e:38:
                    46:97:f7:e7:da:33:f5:04:e2:5d:7d:98:6c:84:52:
                    30:69:04:08:ee:83:5a:72:40:d8:bb:c3:47:d0:6b:
                    35:56:e0:c5:ac:91:f8:93:eb:77:53:90:63:d5:19:
                    bc:70:48:f5:4f:bd:54:a4:e1:35:78:7f:4e:54:b2:
                    d3:e8:7d:1f:54:7d:67:03:3b:65:04:99:d7:80:43:
                    2d:81:d2:21:03:35:6c:70:dd:ad:c1:90:b4:1d:98:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:E7:9A:93:12:E9:8F:D7:DF:89:84:C4:3A:C7:33:39:20:2D:D2
            X509v3 Authority Key Identifier:
                keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/24C380E04F8811F1995B86AB91833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.182.0/23
                  203.78.165.0/24
                IPv6:
                  2402:3020::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:9f:13:12:12:fb:4c:fe:7e:b9:73:ab:df:3a:78:8e:e1:1a:
         ef:7d:01:9c:7a:2e:17:18:b9:b3:db:33:1c:3e:34:9c:b5:c7:
         86:76:06:d9:55:13:32:6f:db:e1:c8:0d:53:71:30:3c:b9:e3:
         dd:b7:d2:88:30:5d:85:a0:54:4f:27:17:d3:e1:20:3f:b4:2f:
         90:91:c1:b9:5f:fa:18:a7:d4:c0:fa:bc:25:bb:14:8b:81:db:
         7d:d3:0d:61:b8:5e:02:90:69:a9:36:07:fe:24:74:1c:fa:d3:
         ce:c5:34:fa:f0:18:89:28:0b:63:ab:b6:c5:28:4f:df:f8:ef:
         e9:a9:98:21:9d:83:6c:0e:00:89:7b:70:2b:30:fe:df:75:47:
         f7:ca:72:48:2e:cc:f1:bc:a5:6e:b9:84:12:82:39:d1:94:2c:
         25:1e:c6:c8:8a:93:3a:61:84:df:0e:3e:e1:94:8e:70:6d:21:
         37:5d:11:85:d7:19:38:65:50:10:ce:48:2d:3e:c0:f7:97:df:
         12:f8:ef:b2:9d:c0:a4:2f:ad:ee:dd:0f:84:af:b0:fb:7c:43:
         59:5b:c4:0b:37:76:ba:1b:e8:f9:42:9f:41:b1:b2:fc:8b:20:
         39:6c:bf:a5:11:60:42:bf:ed:55:d2:f9:d5:fe:41:69:81:49:
         01:36:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:44 2026 by rpki-client