Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
File:                     F4777FBEEDDA11EF9731160CC4F9AE02.roa (raw, json)
Hash identifier:          tZoqe0Wr8WxlyxJlU9JnoVv0Dbj1abCtUlpInyE8avA=
Subject key identifier:   12:A4:25:2A:35:A2:6C:4D:EA:0C:D4:CF:47:CD:48:BB:8A:B6:F3:B1
Certificate issuer:       /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial:       01C8
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 04:36:39 +0000
ROA not before:           Fri 05 Jun 2026 04:36:39 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63150
IP address blocks:        103.219.192.0/24 maxlen: 24
                          103.219.193.0/24 maxlen: 24
                          103.219.194.0/24 maxlen: 24
                          103.219.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
        Validity
            Not Before: Jun  5 04:36:39 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a225257-eab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:f2:1e:7d:74:54:e0:e8:a1:81:dd:a0:f3:
                    8b:5c:27:19:9b:38:55:cd:5f:08:7b:e9:b0:6c:38:
                    aa:2f:5e:5e:bf:d6:9c:21:1d:72:82:50:61:53:a1:
                    14:0b:f7:e9:32:5a:49:df:0e:89:74:bc:ff:76:b7:
                    ae:5b:b5:b8:af:31:ae:48:42:ea:17:f4:81:98:a9:
                    56:f8:8f:ec:c3:1c:22:95:fa:31:f6:cb:eb:df:37:
                    cf:d4:ea:56:5c:22:7f:75:a8:8d:df:0a:f4:14:4e:
                    96:c0:52:40:5c:ee:db:5c:93:b1:19:02:18:92:97:
                    02:cd:68:f0:42:34:ba:3e:a4:c6:58:f3:e9:38:a3:
                    ea:ae:06:5f:2e:4e:93:f1:8e:f7:fe:40:f3:da:88:
                    1e:c1:74:8a:ea:f3:dc:05:bd:33:9f:83:8f:5c:56:
                    2a:8d:af:5f:d3:06:ba:cc:ca:d8:c0:26:1c:d9:ac:
                    c7:ac:90:0e:25:2e:12:8f:04:34:85:2d:5d:2f:3b:
                    fc:bd:4e:f1:2b:f1:1d:83:66:25:45:6d:86:86:9d:
                    9a:cc:6e:f8:64:50:ec:df:2b:e5:df:48:f1:85:bb:
                    13:fb:c1:df:d0:66:6f:76:58:a8:fb:6a:10:00:7f:
                    69:be:33:2b:a7:00:af:8d:0f:a9:ae:bb:71:a4:d6:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:25:2A:35:A2:6C:4D:EA:0C:D4:CF:47:CD:48:BB:8A:B6:F3:B1
            X509v3 Authority Key Identifier:
                keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:8c:c6:e6:fa:2c:fb:62:da:31:42:58:06:e1:6a:59:f6:
         11:c5:23:30:16:8e:71:c9:f7:3d:19:52:44:e9:8a:d5:9f:5d:
         53:37:1e:be:49:90:cc:7f:e3:9a:35:2b:43:42:2f:ac:62:6a:
         de:99:7b:60:57:72:d5:12:23:14:82:14:42:d3:09:80:df:34:
         0f:ab:37:9b:65:b2:7d:30:09:dd:18:63:fe:6d:c8:47:4a:41:
         e3:e6:33:ca:a0:d7:a2:c1:21:f0:60:1e:38:42:aa:5d:a8:61:
         50:a4:db:31:02:7b:ed:71:01:4e:94:8e:64:6f:f8:7b:7a:78:
         d2:5d:06:cd:91:5c:cc:d9:d2:ea:10:93:20:c4:90:dd:49:45:
         4c:bd:04:25:30:d2:e7:02:ac:d3:dc:13:de:e4:0a:f0:5f:93:
         11:27:59:1a:47:5e:35:d5:d6:0f:d5:bd:5d:be:56:4f:8b:d6:
         a6:4c:43:a5:75:4e:54:a5:ee:72:5a:82:5c:2b:ef:28:e2:a7:
         01:27:2e:f7:77:2c:62:b4:d7:ff:fc:99:c6:5b:27:7f:59:b2:
         d7:95:fe:19:f9:80:97:f0:01:9d:0a:3a:96:6d:9f:0c:e5:68:
         fb:42:7a:a2:4d:9d:30:72:da:36:60:54:24:cd:7d:2e:b1:b7:
         85:b1:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:28 2026 by rpki-client