Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
File:                     469C2676D76111EB97EB721DC4F9AE02.roa (raw, json)
Hash identifier:          KZJqMSXjpce/PYO9PZaFTw1AjKkd0pgektz4tGJ/sxo=
Subject key identifier:   3D:F6:86:61:E3:F5:CF:8B:CB:20:3D:7F:A3:EA:FB:8D:BA:E6:DB:2F
Certificate issuer:       /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial:       0652
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
Signing time:             Wed 10 Jun 2026 23:27:32 +0000
ROA not before:           Wed 10 Jun 2026 23:27:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142407
IP address blocks:        103.168.8.0/24 maxlen: 24
                          103.168.9.0/24 maxlen: 24
                          2407:7ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
                          rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
        Validity
            Not Before: Jun 10 23:27:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29f2e3-8ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:ae:0d:7a:4c:d7:16:6c:40:47:4e:3a:08:
                    f6:b2:3f:d9:2e:0c:da:dc:dd:a7:7b:fa:b8:64:f9:
                    b8:18:40:f3:3d:45:90:35:00:11:f1:01:10:9c:af:
                    de:67:b0:3d:fe:21:db:bb:4b:b0:15:cf:51:3e:1a:
                    3d:e7:8e:10:56:70:2c:fc:ef:57:8b:e5:b2:61:5e:
                    20:d5:78:72:b3:3a:12:b0:92:f0:3d:be:0b:7c:be:
                    0c:92:a4:4c:22:09:8c:5d:14:ae:68:de:ae:95:15:
                    64:57:3e:64:99:73:f1:09:46:cf:fd:20:a0:8b:5b:
                    91:30:f7:a2:d8:fc:39:43:e7:a1:32:ec:69:b1:c7:
                    36:ad:0a:61:41:7d:c4:a0:13:71:fe:cb:f4:e3:5e:
                    03:66:f7:1b:b5:b1:3c:d1:91:59:df:ee:d5:04:fa:
                    2b:c4:20:f8:a9:ed:0a:20:cf:30:27:0a:00:16:f4:
                    25:38:cd:88:dc:6b:16:17:00:43:80:71:47:76:75:
                    9e:6a:76:a2:fa:a1:cf:f8:25:c1:cd:09:48:85:7e:
                    69:37:b0:4e:45:e6:d8:68:42:d7:34:69:4f:53:3d:
                    7b:bf:fd:4d:09:08:fb:00:74:56:25:80:d2:a4:68:
                    40:3d:b2:71:b4:89:b5:e2:19:c9:21:a4:6a:27:ca:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F6:86:61:E3:F5:CF:8B:CB:20:3D:7F:A3:EA:FB:8D:BA:E6:DB:2F
            X509v3 Authority Key Identifier:
                keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.8.0/23
                IPv6:
                  2407:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:14:78:d7:c3:db:70:68:12:38:a7:4a:69:75:c9:8b:48:f8:
         cf:69:b8:46:69:6b:b2:8f:9f:ee:f5:67:34:c7:72:d6:de:76:
         20:e9:73:2a:60:34:9c:d5:8d:61:9c:a7:ba:7d:07:5b:cd:a9:
         53:16:6c:d8:ac:39:e4:bc:b0:cb:9b:df:64:d0:61:d7:a6:56:
         35:8d:9a:d9:bd:d8:a6:53:03:10:4a:b0:85:10:d8:9a:1c:e6:
         ee:a1:b2:8e:64:1c:3f:1d:8c:ce:76:42:1a:92:c1:99:ae:af:
         66:db:9b:96:1b:f3:75:7c:03:86:9d:42:53:6e:fc:7b:7c:84:
         c2:28:a0:30:a3:7b:43:66:53:35:70:e2:87:62:f1:a9:1c:8e:
         b0:20:2f:5d:84:b9:4d:6f:e2:41:cd:ee:dc:4e:f3:89:21:01:
         c2:3a:29:0c:ad:4f:a3:be:fd:c1:fe:90:24:12:d7:f2:70:d4:
         a5:1a:bc:52:50:c4:b3:2b:2b:a6:86:e5:c9:b3:8e:64:f2:ee:
         f8:44:0c:6d:3b:e6:c7:da:77:bd:b6:a9:01:14:ea:28:27:4c:
         3c:91:29:bb:82:85:f4:96:09:4f:af:42:fa:be:60:d6:54:2e:
         06:16:59:41:cd:ac:d0:21:6e:73:51:03:d9:77:f7:48:aa:e3:
         bd:3e:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:37 2026 by rpki-client