Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa
File:                     0BC9660CE3AC11EAAAC85761C4F9AE02.roa (raw, json)
Hash identifier:          g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=
Subject key identifier:   23:37:A1:F7:2A:83:A7:36:BB:BC:B1:37:91:15:78:FB:1D:ED:96:35
Certificate issuer:       /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial:       08C6
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa
Signing time:             Sat 06 Jun 2026 20:25:18 +0000
ROA not before:           Sat 06 Jun 2026 20:25:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     200077
IP address blocks:        103.214.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
        Validity
            Not Before: Jun  6 20:25:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a24822e-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:70:e6:aa:a7:99:d5:cd:0d:85:80:a7:7d:
                    3a:70:04:b4:b1:66:ea:df:2d:2d:08:e7:cd:ae:32:
                    c2:3e:f3:4f:ef:ae:44:a2:12:a6:9f:56:d1:d1:9b:
                    1d:07:c9:fb:01:c5:0a:08:c9:31:2d:c1:10:dc:17:
                    d2:2f:ad:9e:14:02:e0:bc:fe:6b:05:94:c2:0d:f4:
                    2d:cb:02:10:ce:fb:68:44:50:4f:c2:26:53:f4:4d:
                    85:b2:74:15:48:07:95:3d:c6:f3:d2:95:f6:8c:17:
                    e3:da:19:ff:d0:6f:3f:64:c1:24:ec:f6:b2:1b:e2:
                    3a:e2:37:e0:30:43:e4:98:f8:2b:0b:3e:c0:77:b6:
                    d0:17:b3:5e:1d:ac:22:0a:28:c2:8b:40:5a:40:3e:
                    40:5b:13:cd:4c:9f:4d:b6:9d:cf:10:f5:5c:f0:7e:
                    46:0f:67:4a:d2:58:e2:8c:d1:a3:b8:4e:c0:28:a9:
                    e4:c4:46:5a:6a:14:b5:0e:ea:da:2c:68:f1:a9:ec:
                    35:89:68:58:51:5a:80:d5:8f:62:2a:32:57:fc:65:
                    f6:3e:ce:70:bb:84:a2:1a:ac:c2:89:34:20:fd:5c:
                    cf:1e:ba:6a:b2:71:bc:1a:0e:9c:fa:39:b0:6f:5f:
                    d4:78:c6:0c:69:5d:9b:4a:27:ad:9c:0e:38:03:57:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:37:A1:F7:2A:83:A7:36:BB:BC:B1:37:91:15:78:FB:1D:ED:96:35
            X509v3 Authority Key Identifier:
                keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:94:26:af:df:bc:36:d5:0c:4c:cd:44:f3:64:f5:2a:3a:
         0a:34:48:53:59:42:3f:6c:e1:83:62:fa:64:d9:de:21:5a:0b:
         d9:a3:18:0c:ee:0c:4c:8b:c3:a3:6c:2e:b2:fd:1c:b8:5a:bc:
         f4:08:8d:56:df:99:85:e4:fb:18:7e:8f:6f:3e:12:21:4e:ab:
         62:40:2f:7c:35:cc:a1:00:1c:32:2f:29:d3:6b:33:5c:72:74:
         4f:b2:1d:eb:25:f8:8a:78:f7:b6:6d:39:3c:86:b1:cd:9b:3a:
         f7:3c:79:e9:6f:5a:7e:c3:5d:07:ab:a5:7b:5a:be:e4:e6:73:
         58:de:0b:e6:7d:a4:3d:85:cc:03:f7:af:26:61:c9:17:6c:e4:
         e1:0d:0d:18:a9:c2:8d:c0:c0:2a:a2:97:26:1e:85:4c:2d:2d:
         6c:2a:cd:65:c3:e8:f4:ad:15:a5:75:e2:5d:ca:57:4f:eb:4c:
         da:8b:3c:1b:be:7b:fb:0a:f6:a2:bd:ff:71:5a:db:cf:c5:c9:
         65:41:f5:09:be:6b:e5:c2:7a:79:ac:92:44:6f:24:c9:79:b6:
         59:af:5f:9d:dc:d5:32:2c:5a:2b:be:5b:17:bb:c9:6a:ad:d2:
         90:71:7c:13:41:6e:6a:a2:51:0b:11:b8:7f:1d:7b:d6:fc:9e:
         fd:a1:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:35:07 2026 by rpki-client