Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DBED3B7C011411EAAB0EF153C4F9AE02.roa
File:                     DBED3B7C011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier:          FnVWhChRr11R5lpk40SJBFENshJaIF0/rxDkqiwSIcM=
Subject key identifier:   A6:AF:A8:02:FD:40:41:97:64:FD:39:AA:95:71:4E:DB:3B:F5:5C:4E
Certificate issuer:       /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial:       0D56
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DBED3B7C011411EAAB0EF153C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 18:22:55 +0000
ROA not before:           Thu 04 Jun 2026 18:22:55 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     24028
IP address blocks:        43.239.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
        Validity
            Not Before: Jun  4 18:22:55 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21c27f-4677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:bd:d7:04:0e:4a:4e:87:d6:cc:2f:62:aa:
                    b1:c5:7b:93:73:07:54:c2:f1:2a:0d:23:5c:ef:c3:
                    4b:af:04:23:d9:b6:5b:56:7f:a9:a2:34:19:98:52:
                    0b:01:ce:f7:47:8c:03:32:f7:74:a0:e3:b6:70:97:
                    60:20:da:2e:5b:54:e8:b3:7d:ec:ab:8d:27:38:03:
                    d4:f9:c7:cd:74:3a:40:ef:b9:9c:1e:a0:18:7c:90:
                    85:07:ec:06:db:ab:83:d0:57:06:09:9f:d9:da:0c:
                    dc:13:44:f0:41:80:76:38:ff:65:40:61:0e:86:14:
                    46:23:bb:c0:c5:16:b6:7e:91:40:18:66:ee:3b:3c:
                    22:6d:76:7b:5e:b6:93:fd:ea:80:71:14:1f:29:c7:
                    15:84:dc:a7:b3:fe:06:ea:98:6b:2f:c6:7b:a0:8c:
                    4c:e6:e5:92:cf:fe:6a:2c:63:06:25:7c:f8:f0:c2:
                    16:21:4c:98:fa:ce:f1:68:63:ac:39:ed:05:50:96:
                    8b:b4:0b:14:42:55:80:dc:01:2d:95:ef:ee:4f:a7:
                    6f:3d:08:f6:83:2a:88:99:b1:4f:7b:c8:38:bf:24:
                    7e:2f:e7:ed:e4:4b:26:45:bd:54:a0:f8:42:74:c0:
                    bd:71:9f:4c:11:e0:2b:23:e5:f2:be:b0:9a:04:09:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AF:A8:02:FD:40:41:97:64:FD:39:AA:95:71:4E:DB:3B:F5:5C:4E
            X509v3 Authority Key Identifier:
                keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/DBED3B7C011411EAAB0EF153C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:1a:f8:0c:f8:78:43:cb:a8:c0:f6:e7:e1:f1:16:d0:df:
         75:f6:8f:bc:73:32:84:31:60:98:b4:97:65:6f:13:e9:34:23:
         e5:d6:30:09:7c:ad:f7:35:0c:9b:08:65:df:d9:e4:44:65:43:
         85:17:d9:ee:ae:bb:c6:19:83:38:ad:67:91:0e:31:f2:cb:53:
         36:93:28:04:ae:12:8b:7f:ea:ad:df:a5:0e:dd:92:11:dc:dc:
         be:fb:60:28:49:0a:90:53:ca:0d:d2:4f:5a:98:5e:60:89:c0:
         8c:00:a8:aa:6d:97:d6:5e:d6:0a:85:b6:61:66:08:24:9f:0a:
         78:c8:7c:a1:8b:80:c9:46:09:e8:1c:b3:56:f6:31:59:b3:8c:
         24:a1:80:37:c5:56:5d:08:9d:fb:a1:30:a8:58:79:70:eb:86:
         bd:e9:26:da:54:b1:50:58:7c:3b:34:ff:1a:eb:26:e9:ec:ce:
         6e:73:1d:27:9d:46:f7:39:75:e8:ff:02:bc:f5:4f:ce:e8:54:
         8b:fc:ed:d4:1c:f8:0c:cf:a5:67:a5:ce:59:0f:36:31:96:94:
         55:8e:ed:dc:d8:46:8c:b8:15:43:80:30:d4:ae:89:2d:ee:ca:
         16:88:b8:0c:9d:6d:66:35:52:03:99:6d:18:ee:5f:eb:8b:81:
         e7:6b:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:14 2026 by rpki-client