Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa
File:                     AE1747DE13FC11EEAD14AF35C4F9AE02.roa (raw, json)
Hash identifier:          E1zUkI9TO0W/ED1pfVMhvoec/8ENjTvyLHbMDkKK8Fw=
Subject key identifier:   9C:07:57:81:98:BF:44:27:1C:AA:37:AD:AE:5A:D2:61:8F:F4:74:25
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       0235
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 03:33:53 +0000
ROA not before:           Fri 05 Jun 2026 03:33:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151346
IP address blocks:        103.208.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Jun  5 03:33:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2243a1-0cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:38:65:f0:6a:00:c6:34:d3:95:eb:56:ab:
                    c2:74:e1:94:03:f3:0a:a2:a8:e5:d3:b4:48:4b:f7:
                    03:20:4b:d7:93:31:d0:e2:b7:67:db:5f:b6:05:9e:
                    cc:9a:eb:ce:d0:d4:33:c3:38:75:84:eb:91:90:51:
                    8e:25:ed:66:a8:2d:8f:f7:9f:0d:c8:0c:92:df:f5:
                    9d:43:f2:4d:19:57:82:d3:3d:d7:ba:91:b1:0d:ab:
                    55:7e:4b:25:8d:a3:1c:0c:64:7d:32:c5:53:f5:d0:
                    8d:6c:05:a9:88:ff:83:5a:c0:a1:ff:b1:b8:19:db:
                    e4:1b:4b:3f:66:f2:dc:e7:84:6d:4b:09:80:86:2a:
                    55:43:ff:9e:71:a6:fb:3e:16:0a:e5:4f:bd:72:0c:
                    95:00:c4:5c:ce:c1:14:2a:81:c9:8a:76:6a:b1:58:
                    bd:1b:b9:a3:e3:a8:2f:a1:30:8d:4f:6b:11:aa:df:
                    91:77:d5:b4:c7:01:fa:60:d4:7c:33:56:fa:0f:fb:
                    e6:63:3d:37:24:3e:ea:00:53:7c:8c:10:e4:b8:b3:
                    3d:a4:c1:53:2c:ef:ff:08:57:8b:b7:9b:7a:eb:fa:
                    dd:48:2c:ff:bf:f5:00:0c:eb:7c:bd:9c:20:11:1d:
                    7f:23:61:de:a1:66:34:4e:d7:56:87:ea:6d:56:5f:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:07:57:81:98:BF:44:27:1C:AA:37:AD:AE:5A:D2:61:8F:F4:74:25
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/AE1747DE13FC11EEAD14AF35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:6a:68:d9:16:cd:f8:1d:bd:b3:ab:4e:25:c5:6c:a7:80:bc:
         49:b7:a2:1b:07:6a:b1:52:d7:66:be:22:a4:68:54:76:a7:6a:
         ab:42:c4:2b:3b:da:f7:9a:b0:64:6e:6c:bf:0a:0d:00:b4:27:
         c8:d2:a9:d7:09:c7:a0:70:33:5b:73:7c:7d:46:3c:97:a5:8d:
         a1:0e:55:1e:e3:23:7f:2f:d0:69:4d:6c:0a:9b:d2:bc:0d:bd:
         a0:cc:f1:1c:f6:13:a5:17:69:92:78:bb:21:c1:18:87:7a:08:
         f4:53:83:4e:70:3d:1c:35:be:e9:8c:d1:f8:dc:71:92:90:17:
         29:07:f3:43:d5:b9:3f:fa:9f:c2:6c:90:3f:7a:6c:8c:41:a0:
         f9:22:ce:83:3c:a9:da:38:52:e8:99:be:57:d4:ff:8d:4b:e0:
         c0:f3:7b:d5:43:68:27:f8:53:52:46:96:85:db:78:dc:e6:fa:
         05:74:f3:9c:57:ae:1d:f3:2f:dc:82:9a:6b:68:19:a7:1b:16:
         b2:b9:de:01:ce:d3:34:2a:f3:ef:4b:45:29:e2:fb:51:94:3b:
         3d:ad:3e:f1:d7:ef:5c:f2:91:24:aa:bf:d6:c0:2a:f3:e5:44:
         9f:f4:fe:f5:33:a9:56:f9:ec:c5:b0:56:e1:3b:9f:65:2e:4c:
         23:d6:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:09 2026 by rpki-client