Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
File:                     659779341A4511EAA4C46765C4F9AE02.roa (raw, json)
Hash identifier:          BNIFm55B08Bbs0Bkol6koWZAIFo7mgipfcEIOPi+WrU=
Subject key identifier:   61:16:5F:F9:CF:63:E9:E4:54:DB:38:A9:38:54:CD:31:B7:E0:27:F5
Certificate issuer:       /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial:       0C98
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
Signing time:             Tue 26 May 2026 19:26:16 +0000
ROA not before:           Tue 26 May 2026 19:26:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137575
IP address blocks:        103.113.244.0/24 maxlen: 24
                          103.113.245.0/24 maxlen: 24
                          103.115.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
                          rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3224 (0xc98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
        Validity
            Not Before: May 26 19:26:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a15f3d8-cab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:7d:27:31:75:1b:1b:21:55:3e:c4:4f:1e:
                    47:43:0f:3a:3e:87:3c:3b:48:50:b7:67:be:b8:c6:
                    c3:5e:92:e2:d6:a6:6d:f0:a2:91:67:97:dc:5e:97:
                    46:69:6c:60:75:c1:40:eb:43:60:e3:36:8e:65:a9:
                    5c:cf:ea:61:4a:42:c1:a1:66:cf:67:ee:2d:7e:71:
                    e7:80:f7:ff:84:a1:9f:7c:1d:c1:55:ed:b1:93:9f:
                    e1:95:09:c3:58:c1:8a:49:e8:dd:57:ae:3e:df:75:
                    c7:70:66:8c:58:d5:23:0e:80:71:e6:63:c9:c9:5a:
                    9d:99:75:fa:67:31:4f:14:9a:24:14:4f:f4:d0:66:
                    f7:7e:69:38:f0:86:91:48:02:50:1c:c2:44:cb:96:
                    e9:29:bc:80:9c:9f:f5:f7:1c:ed:1f:5e:75:63:31:
                    cf:b7:00:5a:69:af:b7:aa:75:70:ec:c7:49:0c:03:
                    11:3d:a1:f3:8f:1c:e7:ea:dc:22:13:de:3c:c1:07:
                    60:1a:26:69:72:07:ee:f3:fd:06:c0:87:31:4d:60:
                    e8:ed:ea:70:5c:b4:48:aa:52:bb:c4:c0:d6:49:c5:
                    6a:4d:35:82:f0:90:61:72:13:78:56:d0:c4:b8:1c:
                    41:16:d6:7d:fa:cc:d3:56:41:fe:ff:e7:05:ba:5c:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:16:5F:F9:CF:63:E9:E4:54:DB:38:A9:38:54:CD:31:B7:E0:27:F5
            X509v3 Authority Key Identifier:
                keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.244.0/23
                  103.115.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:4f:8b:5c:06:25:41:cf:8c:e1:30:81:d5:26:e5:70:9c:
         34:be:37:c0:c0:d8:f5:34:7f:f6:96:4d:45:48:51:6d:31:3c:
         eb:34:bf:c5:97:bf:fb:94:38:0c:a3:bb:87:10:f5:b5:b8:bf:
         66:c6:24:c6:cd:cd:a6:4d:4b:7e:06:3f:b1:a7:20:e1:d8:3d:
         c4:95:22:9d:56:33:13:9e:ac:f1:0b:d6:c3:63:ec:f2:a2:77:
         10:19:4b:63:e8:9b:0e:fa:e6:70:79:9b:d6:6b:57:72:86:c3:
         d8:32:0b:6c:aa:c6:5c:4e:97:73:28:3d:83:39:68:a7:39:36:
         13:87:24:ca:f4:31:f1:05:de:44:c1:6e:0e:2c:2e:fd:50:26:
         8b:46:73:09:b4:44:0b:1e:f7:1e:56:56:c3:04:f9:5d:d9:9a:
         d4:35:c9:76:ba:21:d8:aa:cd:e1:c3:ce:76:9a:ba:23:a0:e9:
         d8:ec:72:93:82:b9:61:64:2c:c1:04:9c:ed:95:6d:c3:9d:f2:
         18:c2:7e:5b:5c:ab:3f:69:69:7f:3b:7b:2c:ea:c5:5d:45:1e:
         5e:b4:f2:eb:54:79:ae:51:f4:60:fc:4e:18:ae:00:21:23:01:
         b3:59:05:05:9d:88:4e:3f:8b:53:72:75:f1:bf:a9:b1:9f:8e:
         e7:b5:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:32:06 2026 by rpki-client