Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/FA39CA70790E11EE86665E43C4F9AE02.roa
File:                     FA39CA70790E11EE86665E43C4F9AE02.roa (raw, json)
Hash identifier:          qksLlFXwBUMsQOyxRo8A6UN7BwpA5nqATz7EUEOusR8=
Subject key identifier:   00:7A:34:45:AC:48:2A:DF:EE:9C:66:30:FC:C8:19:6C:6D:90:9C:B4
Certificate issuer:       /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Certificate serial:       01F3
Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/FA39CA70790E11EE86665E43C4F9AE02.roa
Signing time:             Sat 13 Jun 2026 03:32:30 +0000
ROA not before:           Sat 13 Jun 2026 03:32:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9792
IP address blocks:        203.1.240.0/21 maxlen: 21
                          2406:11c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
        Validity
            Not Before: Jun 13 03:32:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2ccf4e-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:99:d6:e8:ef:7f:7b:e5:bf:21:e7:cd:20:
                    0b:55:34:9e:9c:23:b6:d1:bc:d0:3f:a0:e8:fa:cd:
                    d9:fd:1b:bf:eb:a5:4a:54:02:1e:bd:f7:a3:e5:9e:
                    44:21:f6:73:43:ae:72:ea:bd:25:8d:85:52:c3:b1:
                    53:8f:9c:55:72:17:56:16:f2:f8:e3:9d:ca:8c:9c:
                    71:c2:17:8b:93:9e:61:21:b5:a0:e2:7b:ce:fd:32:
                    0a:1d:ce:e9:4c:69:21:23:58:85:18:e3:f3:6a:3f:
                    c5:37:a3:3f:04:67:02:ff:19:c6:dd:cf:23:3c:c9:
                    3d:af:f5:29:f9:bc:44:62:8f:44:97:30:6e:59:70:
                    b1:86:3d:a0:e7:68:48:8f:a0:0e:68:77:ee:0a:61:
                    61:c5:4f:c9:eb:6a:9b:75:05:fc:f7:1f:8b:04:2d:
                    f6:f5:90:c9:bf:5c:51:72:0f:69:32:84:83:1a:91:
                    a2:c7:84:aa:35:3b:65:ce:90:07:13:76:21:ec:b8:
                    05:c5:cc:b6:72:9c:50:23:e9:a4:ed:93:51:7c:d4:
                    03:82:bd:25:56:d7:7a:e9:80:17:0b:18:bb:f9:89:
                    62:4f:f8:b1:d9:8a:f6:89:7f:51:1d:ae:e9:17:9a:
                    70:97:9a:c4:fe:7e:02:27:78:f8:42:de:ce:4e:54:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:34:45:AC:48:2A:DF:EE:9C:66:30:FC:C8:19:6C:6D:90:9C:B4
            X509v3 Authority Key Identifier:
                keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/FA39CA70790E11EE86665E43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.1.240.0/21
                IPv6:
                  2406:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:bf:a5:ec:fc:58:ea:bb:b7:2b:d2:c4:f0:1b:5d:fa:7f:
         ad:c0:55:20:76:e3:1f:40:b7:28:2f:b4:15:3b:17:e5:db:59:
         4a:23:9b:5a:92:c4:47:6d:0e:67:31:58:9e:7e:a0:0e:11:2f:
         3b:57:0d:c5:90:d0:40:1a:68:12:72:89:80:c9:20:25:ff:47:
         90:d8:fe:76:73:0c:dd:fb:ae:f0:d6:d1:85:fd:3c:fa:0c:a3:
         b5:55:5e:46:2d:b0:62:14:36:05:15:6e:a9:93:22:de:36:9d:
         12:bb:6b:4c:a7:78:26:88:54:cd:54:e9:01:01:61:7d:aa:df:
         5a:87:56:f9:f2:d0:b1:7e:2b:b2:26:a9:e6:56:98:f7:b0:70:
         5b:a3:97:b8:36:a9:89:07:0a:9f:c6:47:73:fd:34:b9:92:1d:
         cf:28:5d:d7:8e:99:44:ff:2e:6d:b1:ee:2c:94:e0:e1:0c:2e:
         48:e0:36:e8:3a:6d:01:87:69:12:cf:9a:d2:12:24:c6:86:1c:
         24:53:c5:a8:40:ff:f8:7d:08:6a:77:63:f3:44:51:72:0b:47:
         da:c8:c5:8d:27:ca:10:79:8a:d7:47:a1:b0:b4:54:b4:cf:9f:
         3c:89:de:c8:fd:74:4d:7b:32:fd:c7:cb:7d:98:ae:45:e1:37:
         af:af:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:50 2026 by rpki-client