Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa
File:                     083000C22A6F11EC9AD38840C4F9AE02.roa (raw, json)
Hash identifier:          9ZEEK3IQ8UuFSqgHtrQ6O84JIh+FgFNIqrwN+9CFIi8=
Subject key identifier:   64:40:C6:43:7C:16:36:18:29:FD:D9:04:3F:B5:A9:B2:57:E3:1C:B3
Certificate issuer:       /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial:       058F
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa
Signing time:             Mon 22 Jun 2026 23:27:27 +0000
ROA not before:           Mon 22 Jun 2026 23:27:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142547
IP address blocks:        103.168.224.0/23 maxlen: 23
                          103.168.224.0/24 maxlen: 24
                          103.168.225.0/24 maxlen: 24
                          2001:df6:e080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
        Validity
            Not Before: Jun 22 23:27:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a39c4df-6407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e9:66:0e:b8:4c:bb:df:51:fd:11:5c:cf:f1:
                    97:57:f1:7a:07:45:d7:71:1b:ae:1a:ba:4e:35:df:
                    9a:88:78:45:38:0d:10:3a:78:bb:57:c1:3e:77:37:
                    1b:12:01:54:40:62:24:ac:47:be:a8:38:00:35:f6:
                    f4:10:b6:c9:1c:e3:09:26:bf:3e:46:0e:66:d3:cb:
                    c1:b0:c0:c2:c0:88:f3:cc:c4:53:b9:7b:e8:df:8b:
                    ec:da:96:22:cf:cd:ff:78:8d:92:16:20:70:61:fe:
                    53:f8:1b:43:b6:ec:c2:1c:98:bc:a6:89:8e:86:5b:
                    1f:38:86:5a:39:d6:a6:8e:03:e2:79:7f:8e:c6:e1:
                    c4:b1:5e:c2:c3:6f:5d:2d:36:0d:27:6f:f1:c3:9e:
                    99:5d:2b:2d:0f:78:6c:67:c4:ea:57:c0:2f:8f:d8:
                    02:ce:40:65:b5:ca:7c:9d:74:24:ad:bb:12:4e:86:
                    73:12:55:f8:d8:b1:c7:d7:de:23:b7:5d:47:88:a1:
                    23:49:7e:08:21:54:e9:01:da:90:a4:66:ce:e6:5f:
                    e4:cc:64:6b:6e:a3:fa:6e:47:10:90:28:f7:16:70:
                    3b:9e:0f:92:73:02:64:5d:f0:64:4a:01:25:24:90:
                    f3:e5:87:72:e0:6c:3a:de:28:bc:fd:4b:cd:19:86:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:40:C6:43:7C:16:36:18:29:FD:D9:04:3F:B5:A9:B2:57:E3:1C:B3
            X509v3 Authority Key Identifier:
                keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.224.0/23
                IPv6:
                  2001:df6:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:fe:70:e4:4f:9b:28:85:2d:14:03:b0:d3:8c:fc:92:ac:03:
         ab:f3:dd:d9:77:87:ee:00:23:ce:4c:d8:93:62:d6:19:18:da:
         a5:b4:63:9f:0c:e7:ea:44:41:26:1e:65:c2:d5:f9:50:f3:65:
         31:09:dd:7c:33:c2:88:ff:ec:68:53:52:9f:04:8d:32:5a:0d:
         3e:ae:7b:84:66:62:95:94:93:d8:74:f8:54:cb:ba:07:94:33:
         b3:f7:24:79:3a:af:33:64:2c:37:69:90:af:fd:ef:35:1d:a1:
         3f:a0:5f:21:73:a2:21:eb:63:b1:36:ff:d2:e9:8f:94:48:76:
         36:17:3d:0c:86:f8:ce:51:2b:c1:1a:00:b5:22:6a:c9:8e:fc:
         49:29:6c:34:6e:01:19:4d:0c:9e:42:a0:02:e2:5e:82:5f:e7:
         d1:9e:d1:b5:07:35:26:08:4e:5c:15:05:c8:4d:09:65:14:ac:
         10:16:6a:f2:6f:50:0f:07:5c:6d:e5:d8:62:26:9f:f1:c5:ae:
         33:02:0a:58:c4:e7:63:0f:71:3f:ab:73:de:d3:69:53:28:b0:
         81:5f:8b:3b:01:eb:35:40:ae:e3:74:95:8f:ab:48:4e:97:be:
         98:03:79:0f:51:34:be:4d:24:33:42:f8:6a:06:6d:ac:3c:88:
         7c:72:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:47 2026 by rpki-client