Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa
File:                     2E078068008111F0AB00F337C4F9AE02.roa (raw, json)
Hash identifier:          uEw/9LOu8vieTwN56J5KmadMvH3Azp9f38GOFxp+xjI=
Subject key identifier:   BA:29:50:8C:EB:79:43:83:1F:B8:F7:F9:AE:7A:1D:E9:26:8C:7F:5A
Certificate issuer:       /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial:       274D
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 16:18:19 +0000
ROA not before:           Thu 04 Jun 2026 16:18:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135039
IP address blocks:        103.230.184.0/22 maxlen: 22
                          2400:f380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10061 (0x274d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
        Validity
            Not Before: Jun  4 16:18:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21a54b-b8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:44:67:29:0c:a1:db:09:ec:e0:12:0e:66:
                    9d:5a:1c:49:48:62:5f:7b:c8:87:d0:52:4d:9a:6c:
                    aa:3d:90:58:ba:22:ab:2b:44:2b:13:ad:84:ee:8c:
                    1a:9b:dc:6a:5b:ef:66:94:2e:47:35:fc:fb:10:a8:
                    13:36:06:2b:49:cb:2f:0f:3f:1d:c8:97:f0:7d:18:
                    53:1b:0d:29:56:f9:64:dd:eb:bc:bd:5f:16:cf:cc:
                    26:a8:26:47:49:f9:87:77:f5:7c:a8:5c:9e:af:5c:
                    52:cf:c6:76:b4:9a:15:8c:b1:cb:9a:1b:cd:40:44:
                    b6:27:fb:9c:6c:72:fe:c7:66:a5:04:a2:37:97:81:
                    3f:7c:04:2a:aa:34:bf:ac:29:78:23:e7:42:b1:f9:
                    24:eb:3c:ea:50:c5:99:d3:78:c3:35:d9:cb:01:6b:
                    4a:a4:fd:ca:4e:c4:c4:57:d6:7e:f1:93:26:86:77:
                    18:a5:a7:90:7b:84:8f:6e:6e:64:62:02:af:6a:b8:
                    d8:ac:ba:1e:7c:0d:a3:a6:1f:07:29:17:3e:03:09:
                    c1:03:40:d6:ab:2c:cd:28:d7:5d:a2:21:80:e2:54:
                    a0:c6:3d:8b:07:1f:76:c5:f4:03:51:62:f7:80:2a:
                    10:75:c3:75:67:2a:67:5d:3f:c7:de:e7:1d:78:34:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:50:8C:EB:79:43:83:1F:B8:F7:F9:AE:7A:1D:E9:26:8C:7F:5A
            X509v3 Authority Key Identifier:
                keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.184.0/22
                IPv6:
                  2400:f380::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:ca:1c:2e:f2:8c:6e:66:ca:b1:57:db:b5:de:33:30:5a:
         4c:7f:c0:8a:3a:4d:1f:a9:16:21:2d:a0:0d:39:9a:38:20:56:
         9b:03:f3:7c:77:e5:a6:b8:1e:da:bc:13:be:88:94:a7:7f:19:
         85:69:20:78:d6:f1:9a:d0:33:37:31:51:b5:d1:d5:d8:ec:48:
         46:c5:4b:72:06:32:90:7e:93:f5:b9:f7:30:51:3d:72:0e:78:
         b2:3c:fd:6d:06:25:00:5b:7a:03:9f:87:2a:b2:9c:ec:b9:b9:
         6a:6e:14:da:5a:71:03:f0:80:bf:b5:00:6c:b8:c2:62:e3:a1:
         f7:2d:9e:bc:42:f7:88:8b:4a:38:48:f2:5b:c7:f7:f5:12:6d:
         fa:d7:a7:c0:2f:03:2c:82:96:19:d5:f8:fc:e3:c7:29:71:ed:
         b8:d4:c6:e5:26:c7:5b:0b:97:f8:8f:9a:33:33:db:2f:fb:51:
         75:c1:00:82:25:43:5c:5d:21:a3:25:bd:92:7b:51:d4:1d:d3:
         48:a3:97:5b:e7:77:fc:1f:98:57:44:7d:8b:30:c2:e5:97:0c:
         14:ba:15:ba:5a:0d:21:97:5a:12:fa:1c:54:48:08:ed:4b:ba:
         4d:43:55:c3:3e:2d:34:0c:0f:2a:a2:3d:40:13:0a:4c:26:a9:
         0a:8f:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:12 2026 by rpki-client