Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
File:                     3CED465E8E0811EE8450D961C4F9AE02.roa (raw, json)
Hash identifier:          ziV25lfjtFOT+vBGm4XLNNAFbNMnNRrhayXY3daFNNs=
Subject key identifier:   62:6A:2D:84:E8:FC:65:C2:F3:54:A8:EF:28:34:14:51:72:77:D5:30
Certificate issuer:       /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial:       01F1
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
Signing time:             Mon 01 Jun 2026 04:34:08 +0000
ROA not before:           Mon 01 Jun 2026 04:34:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149849
IP address blocks:        103.188.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
        Validity
            Not Before: Jun  1 04:34:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1d0bc0-7bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:1f:ea:ac:a0:f8:c8:9a:c5:07:2d:55:00:
                    53:f3:be:18:1e:d7:9f:66:44:4b:64:e7:56:bc:8e:
                    81:05:e5:a9:01:fe:6a:26:15:34:1d:d6:7e:13:29:
                    a2:37:78:2b:33:50:74:7e:6b:75:d4:c9:44:19:e4:
                    fd:6a:27:19:79:e7:b4:db:8a:65:c9:09:b7:d9:d7:
                    d8:3f:c4:fd:35:f5:26:b1:54:d7:24:02:16:cc:ad:
                    d8:05:bb:47:3d:dd:e9:85:a6:b9:fb:82:9a:1f:8d:
                    90:95:04:dd:83:93:90:f1:69:2d:d3:2b:ec:7e:90:
                    3b:ae:81:23:f8:44:f1:9c:f7:e2:d8:b8:56:88:5e:
                    f0:fd:db:50:52:08:ba:90:25:04:d6:cc:ba:55:b3:
                    2f:d4:c2:ac:16:c7:4c:a7:76:9c:66:c8:c3:93:45:
                    11:fa:19:28:9a:8e:a6:92:cf:8a:dd:0a:31:11:cb:
                    03:9f:06:a2:35:ed:da:a5:e1:5f:fe:81:4c:6b:11:
                    25:60:5f:84:98:33:d1:9c:b8:90:53:e0:52:36:39:
                    7b:49:f7:b3:d8:2a:3c:c3:79:b3:85:6d:7b:06:4a:
                    31:0d:bb:dd:b6:59:49:ba:c2:b9:42:1a:6b:a4:85:
                    5d:fd:29:12:82:e4:d8:6c:e3:56:ee:36:be:4d:03:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:2D:84:E8:FC:65:C2:F3:54:A8:EF:28:34:14:51:72:77:D5:30
            X509v3 Authority Key Identifier:
                keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:df:b6:a1:12:b8:aa:50:41:28:4f:12:3b:af:5e:0d:e0:
         74:e3:ec:d6:df:c3:49:4d:cf:6b:b7:5f:b2:d9:29:7b:ea:e3:
         c1:3d:43:52:7e:d2:40:41:4a:74:17:f5:ed:77:47:ac:05:48:
         89:ae:ad:ff:72:4d:9a:e5:34:dd:22:05:b3:d4:59:00:e8:aa:
         b3:1d:ff:ee:ac:83:a0:b1:5b:97:5b:af:5b:34:60:4f:55:55:
         39:64:92:22:6e:cd:a9:70:c4:18:29:51:9a:3e:3e:61:bc:26:
         f2:f9:1e:b2:be:8e:13:56:dd:64:9c:f6:62:51:7f:c4:b3:70:
         ee:60:76:9d:9f:9f:ea:70:7e:f1:4f:45:f3:ed:56:31:b8:d9:
         8f:0e:12:4f:85:e4:8e:d1:9b:26:88:75:5b:3a:f1:65:07:bd:
         1e:a3:4a:f5:b7:46:79:fa:af:e7:27:96:85:14:28:35:6c:f8:
         5a:af:5f:d3:2e:d6:34:57:37:68:66:d0:e5:46:bb:9d:68:c1:
         d6:05:a3:7d:98:01:3a:87:48:23:77:aa:12:94:93:1c:1b:d1:
         4a:d2:ad:a3:f5:65:5f:c3:97:28:ad:ea:dd:a1:a5:52:9f:67:
         6d:7c:18:fd:f8:e0:44:5d:fb:fb:8b:02:bb:f2:1d:f8:d2:59:
         a5:ea:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:35 2026 by rpki-client