Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
File:                     1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (raw, json)
Hash identifier:          LAHOIKFpFwzBjLaubjqrHvEvm+1tow0c4OEU5ikCXiU=
Subject key identifier:   A9:82:B3:98:DF:2D:81:92:5B:23:33:09:D9:E3:3B:61:B9:0D:6C:8C
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       0247
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
Signing time:             Wed 27 May 2026 03:33:44 +0000
ROA not before:           Wed 27 May 2026 03:33:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135158
IP address blocks:        103.69.78.0/24 maxlen: 24
                          103.69.79.0/24 maxlen: 24
                          2400:f960::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: May 27 03:33:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a166618-e185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:d0:36:1a:83:c8:dd:3e:5a:71:d4:5c:8e:
                    b2:b9:26:34:62:91:bf:b5:be:d8:32:b1:5d:7e:27:
                    52:28:e3:91:b8:54:72:87:f2:2e:65:2d:ac:d2:0c:
                    84:c2:93:a7:cf:4d:c1:6a:6c:45:56:a5:dd:67:9d:
                    04:3b:b9:f9:1c:b0:c9:5b:cf:76:b3:f1:7a:c8:dd:
                    ca:ce:d1:e9:d2:ee:da:c2:72:17:95:95:20:44:f1:
                    2b:69:93:24:b1:65:1b:73:a2:16:83:14:cf:10:ed:
                    64:c4:c4:ac:a6:8c:4d:32:0e:5c:53:15:34:fa:b1:
                    8f:d3:d1:6e:72:ac:e3:23:94:81:ec:c3:b2:21:51:
                    6c:8e:8a:45:58:e4:5d:b3:cc:ca:4a:d4:a0:33:8d:
                    0b:2f:f6:cc:59:93:ce:e6:25:5f:90:2f:5f:c3:17:
                    7a:17:82:16:a2:6e:71:b7:cb:ba:08:7a:36:0a:c0:
                    58:82:76:ce:b2:a3:a2:98:af:19:4f:f6:10:a6:c4:
                    d6:d9:80:79:f2:2f:d3:63:b3:0d:f3:b4:eb:4f:92:
                    87:80:24:30:4a:38:e7:a9:f4:12:9c:8b:a1:33:36:
                    0f:5b:24:6c:f3:4f:a7:cf:65:9c:ad:76:b4:e2:91:
                    b9:b7:2f:b5:6b:3b:55:1b:ff:37:55:86:8d:b9:fc:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:82:B3:98:DF:2D:81:92:5B:23:33:09:D9:E3:3B:61:B9:0D:6C:8C
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.78.0/23
                IPv6:
                  2400:f960::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:e7:5f:65:ce:74:31:7a:bd:56:ab:94:1c:69:56:8b:9b:
         ef:56:8e:50:ce:60:32:55:e1:52:17:91:66:6b:7f:f3:eb:ce:
         40:20:12:89:7c:b0:a6:45:1d:1a:cf:02:26:b6:77:ba:e5:7b:
         49:de:55:4e:c4:6f:76:99:ec:ae:af:f6:ae:3f:17:46:3b:82:
         57:74:0b:f9:f2:cb:84:61:9d:9c:d8:54:8e:23:2f:b6:93:24:
         e4:6d:ba:e3:a9:00:1e:b6:3e:70:3c:9c:44:19:18:73:cb:35:
         6d:0f:f5:35:90:24:63:94:69:da:2c:b1:8a:de:07:28:ad:ba:
         10:dd:b8:ef:ba:c5:06:ba:b1:a9:f2:8d:5a:61:89:9a:33:a2:
         06:3f:f6:78:61:ba:69:87:bb:2e:6b:84:3e:12:05:ce:a2:2e:
         3a:8d:15:47:ec:95:e1:6f:53:70:47:9e:93:25:3c:4f:87:42:
         ea:a4:c3:94:0a:61:0f:20:49:a2:05:1c:c6:b0:c6:de:23:58:
         bd:0f:4f:2e:0d:75:1f:ac:ed:da:f4:25:82:c4:d0:38:f1:e8:
         59:08:65:63:26:47:7b:71:0f:be:93:1a:0a:a6:f3:6e:fd:43:
         27:18:fd:5b:59:bf:5b:91:bc:89:37:c1:72:39:65:a8:55:3a:
         a5:42:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:21 2026 by rpki-client