Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa
File:                     CD9B103E08DD11ED830BEB5CC4F9AE02.roa (raw, json)
Hash identifier:          yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=
Subject key identifier:   FD:5F:A3:1C:B0:FE:73:63:B2:ED:CB:B2:2C:61:3E:16:81:9A:38:25
Certificate issuer:       /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial:       0356
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa
Signing time:             Sun 07 Jun 2026 01:30:36 +0000
ROA not before:           Sun 07 Jun 2026 01:30:36 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149984
IP address blocks:        103.189.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
        Validity
            Not Before: Jun  7 01:30:36 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a24c9bc-3ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:1f:2e:ba:7e:9f:4f:fd:58:e3:bf:da:88:
                    d9:bf:83:95:45:4b:76:2a:aa:42:66:74:27:dc:f2:
                    3b:18:0c:df:78:48:f3:ce:b5:e1:98:6d:cb:b5:4d:
                    ae:38:a7:2d:9f:e8:6c:30:b5:aa:54:93:e6:3b:52:
                    87:e8:f4:36:d0:9e:f0:2a:6f:f7:a6:f3:b1:26:3d:
                    06:49:e5:06:47:05:76:e0:8d:98:ce:fd:a6:ba:32:
                    71:97:09:3e:c1:c6:12:0c:c0:71:62:65:37:66:f0:
                    2c:99:ae:d2:90:f9:37:1b:d9:e6:da:2c:5d:a0:e1:
                    9f:5f:26:b0:44:9e:f4:9c:b2:97:30:58:04:da:32:
                    1b:d2:86:a3:36:c5:b3:bd:ae:bf:6f:37:b6:d9:3e:
                    08:37:65:79:06:e7:d4:54:3d:39:8d:a5:62:0f:7e:
                    73:1a:98:db:08:01:7f:e9:25:15:0d:78:93:b4:84:
                    8a:b3:83:e1:7d:e2:c7:37:c3:df:a6:48:cc:fd:fe:
                    58:2c:44:b1:f1:80:23:cc:7a:ab:4f:9f:7c:94:0a:
                    55:b2:1f:40:a3:3a:00:ce:a2:1a:88:d0:21:97:3f:
                    e6:fa:a6:9d:50:3f:20:4f:fb:00:64:f6:32:ff:33:
                    b9:36:96:b3:a7:ff:b5:82:c1:60:10:5c:bb:6a:44:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5F:A3:1C:B0:FE:73:63:B2:ED:CB:B2:2C:61:3E:16:81:9A:38:25
            X509v3 Authority Key Identifier:
                keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:de:b8:14:51:38:1a:d9:fd:78:a1:39:e1:39:c7:25:1a:68:
         ac:be:3c:b4:46:cb:63:20:e8:9e:09:1e:37:49:61:97:13:21:
         9b:d5:f7:63:2a:09:0b:be:6b:88:49:9b:37:b3:ee:a2:aa:aa:
         74:74:d5:0e:14:18:ff:61:4e:e7:3a:f0:c1:af:32:8a:f1:dc:
         de:f2:73:21:72:9d:12:25:02:58:13:ee:f7:d7:ba:7f:da:e7:
         20:4a:a8:cb:24:da:37:cb:ad:1e:dc:15:fa:24:27:dd:28:09:
         26:3c:21:f7:7c:fc:3f:fe:6d:48:29:e7:10:e7:83:e4:ac:ca:
         77:a1:e6:54:88:54:61:32:7e:cf:5e:79:57:42:99:6f:f1:6e:
         7d:03:07:b5:fe:3f:91:75:e9:87:30:9d:23:28:4f:ca:e7:fe:
         01:96:42:dd:1d:d4:2b:89:d0:2c:fe:a5:b0:07:73:18:16:34:
         89:8a:72:87:db:ca:af:a5:b1:72:b7:b0:16:ad:1e:88:c9:b7:
         17:d9:c3:2c:74:01:44:f5:07:a5:f2:d7:83:b4:d4:34:33:08:
         f3:22:1c:13:a7:d1:ea:4f:7f:63:b4:5e:a9:f3:3e:c6:06:94:
         6f:68:94:e5:25:b5:fd:3d:8f:a3:de:ce:a3:1a:f4:a0:53:eb:
         91:24:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:22 2026 by rpki-client