Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa
File:                     45E6E5BA06DC11EA9B939B64C4F9AE02.roa (raw, json)
Hash identifier:          0G6OMftV6r7pwXRj79WaOdv+JwEFm4GYWS5bUDm09Lk=
Subject key identifier:   75:CF:6F:A9:A8:91:66:9F:24:29:13:D5:DC:2A:3F:EC:64:89:0E:3E
Certificate issuer:       /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Certificate serial:       0D00
Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa
Signing time:             Sat 30 May 2026 18:22:11 +0000
ROA not before:           Sat 30 May 2026 18:22:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137579
IP address blocks:        103.114.20.0/22 maxlen: 24
                          2402:c8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3328 (0xd00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
        Validity
            Not Before: May 30 18:22:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1b2ad3-1d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:09:f0:31:e1:a8:2e:cb:0c:e1:e5:6b:c3:
                    df:5d:c6:e0:b9:73:45:82:e4:44:35:c9:72:b0:35:
                    8f:b2:3a:da:10:82:a3:15:d3:46:e2:b0:cc:11:17:
                    32:73:e8:26:1b:aa:e1:12:23:40:99:96:d6:90:3e:
                    66:6c:22:2f:8f:af:24:11:b8:ae:19:31:f4:c4:ff:
                    4f:dd:22:78:5e:52:f7:33:96:13:8a:f3:03:71:ff:
                    96:e2:21:e8:01:6b:1b:d1:73:c9:a8:64:94:ec:65:
                    e6:2e:9e:f9:de:23:f6:57:d2:bc:29:81:cd:6e:af:
                    85:ef:14:fd:fa:24:a1:96:25:9f:89:7a:1f:50:4b:
                    71:fb:8d:69:65:2a:a3:c1:0c:48:f7:5c:03:f4:4d:
                    e4:2b:cb:19:60:ff:89:c6:79:6a:25:bf:b8:79:c0:
                    42:03:ff:1e:dd:ab:29:c9:52:a7:f8:5b:13:70:6b:
                    87:b9:2c:84:b9:5d:20:58:f7:a1:be:05:29:96:46:
                    ff:6e:e2:51:b4:58:dd:df:b4:a3:cd:52:38:06:61:
                    21:c3:04:71:60:b7:b8:51:65:ba:4d:a2:98:b9:c9:
                    d3:a6:7b:c8:e7:21:1e:a1:c7:08:87:9a:c9:43:1e:
                    39:c9:16:ac:56:81:9c:fc:4c:1b:7e:f7:d1:b9:7f:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CF:6F:A9:A8:91:66:9F:24:29:13:D5:DC:2A:3F:EC:64:89:0E:3E
            X509v3 Authority Key Identifier:
                keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.20.0/22
                IPv6:
                  2402:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:60:a5:a9:fc:20:bd:75:a8:b4:4c:d8:11:7d:5b:b7:4d:e0:
         6f:a0:fe:d9:18:ba:92:0d:39:9f:97:fc:ee:9d:93:74:77:5f:
         a0:17:e6:d5:98:58:f4:a2:1a:c2:d4:41:bc:99:ea:a2:fb:d3:
         78:b4:8a:34:34:7e:ea:30:f0:07:95:f7:b0:11:25:f8:d7:a2:
         0c:3d:c9:70:46:36:7b:6f:5e:ab:39:26:d5:5b:cd:b2:4b:87:
         11:3b:3c:2d:6c:b0:f6:b6:95:f0:c1:36:15:a9:ee:28:a3:cd:
         2e:5b:83:ce:73:fa:c5:2f:c2:f0:6d:f3:a6:1d:9a:6e:d2:48:
         d5:b0:82:c0:b9:16:1c:b8:00:24:16:32:f0:51:58:68:73:f9:
         29:11:c7:8e:27:24:87:ff:da:2f:81:41:0e:1a:12:e9:bd:7b:
         c7:bb:01:ea:6e:da:cd:1a:1c:c2:46:13:23:d6:b6:f7:02:aa:
         fa:bf:57:8a:b3:c8:91:8d:03:c0:22:d9:a0:fb:fb:39:97:83:
         cb:a5:1d:11:f9:c7:1c:a1:29:c5:0a:2b:72:57:a9:a1:bd:3d:
         81:64:5e:17:91:ca:e8:78:6b:75:61:e9:b8:94:97:75:64:61:
         03:50:61:7d:e4:27:7e:15:04:79:01:5e:d6:26:ee:8f:7a:9e:
         fc:fd:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:56 2026 by rpki-client