Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa
File:                     996419B6627D11F1B70F09038E47A888.roa (raw, json)
Hash identifier:          6fwP2rsJ1aYLnM+RF5A41SVQIk30a/xQCKjUg+QU10c=
Subject key identifier:   43:B8:5C:8B:C7:BE:E4:2A:41:48:78:4B:75:D9:36:A8:D6:A2:95:87
Certificate issuer:       /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial:       04E5
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa
Signing time:             Sun 07 Jun 2026 14:35:23 +0000
ROA not before:           Sun 07 Jun 2026 14:35:23 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149421
IP address blocks:        103.179.24.0/23 maxlen: 24
                          2001:df0:4540::/48 maxlen: 48
                          2402:35a0::/32 maxlen: 32
                          2402:35a0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
        Validity
            Not Before: Jun  7 14:35:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a2581ab-9722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:31:bd:20:42:b4:2b:00:5d:cc:2f:e6:76:
                    18:9b:bf:6b:7f:39:67:60:c2:ec:0b:3e:1a:89:a6:
                    63:4c:90:67:c7:2e:2d:5a:4b:a8:05:1c:dc:99:1c:
                    80:f9:aa:1d:ea:67:98:98:4c:13:db:e0:c1:33:3c:
                    d9:3c:e3:ed:f7:d8:39:67:5b:0e:b3:43:09:fa:ca:
                    84:2e:3a:6e:e0:55:07:5d:b8:b5:b3:c2:a5:a2:6a:
                    b6:a5:7c:41:56:bc:27:4e:09:8e:17:6a:5b:88:6b:
                    e8:40:8f:e6:83:89:49:df:0f:e4:87:b9:dd:a3:bf:
                    8d:e2:45:30:3a:ae:c6:0c:4d:1d:f3:3b:5e:e0:82:
                    44:0d:bb:60:2c:82:7a:96:02:f5:b3:db:31:af:ea:
                    38:33:f8:8b:30:eb:77:39:43:a2:c4:81:1f:f6:50:
                    72:ad:60:38:85:0c:5d:3d:18:ce:bb:0a:30:57:a5:
                    90:da:a4:d0:bd:de:ea:9e:af:84:ff:b1:45:e5:10:
                    b2:13:5c:25:84:fe:74:b1:94:6b:49:33:7c:bc:17:
                    a9:b6:60:dc:45:09:b8:c7:94:f3:3e:39:23:69:90:
                    d4:36:0a:cb:4b:04:d8:57:93:5e:66:52:79:e4:d4:
                    1f:f5:6c:0a:08:b5:6b:97:f4:97:19:d2:5d:86:3b:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B8:5C:8B:C7:BE:E4:2A:41:48:78:4B:75:D9:36:A8:D6:A2:95:87
            X509v3 Authority Key Identifier:
                keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.24.0/23
                IPv6:
                  2001:df0:4540::/48
                  2402:35a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:87:72:a0:30:1a:4b:ca:66:72:bd:e3:be:0a:37:f3:48:
         51:fd:1f:3d:80:55:62:26:90:6e:36:b4:c4:cb:63:0b:9b:ff:
         d2:65:b5:d8:a4:1c:8b:e0:98:68:ee:15:e4:a7:92:12:ff:c8:
         5c:ac:e9:b9:3a:7e:bc:81:dd:2e:a6:cf:04:e9:d5:6b:8d:55:
         60:17:01:c2:a5:81:1d:5a:20:51:b6:42:cc:72:f3:fd:d8:91:
         9e:d9:40:41:fe:59:70:89:ca:ba:bc:b8:78:66:88:cb:10:7b:
         a2:44:ec:3f:0c:c6:aa:3c:9f:55:dc:58:7a:c1:ce:d5:08:ab:
         a5:2d:55:37:fc:62:37:4e:48:aa:ec:7a:36:e9:cc:93:36:5f:
         74:15:79:1e:81:fc:01:ca:71:ce:87:d2:e6:29:b3:1f:7f:50:
         50:30:d2:9a:d2:ec:4f:62:84:d7:aa:3f:fd:1b:e4:ec:f9:94:
         33:bc:0d:b9:f6:a4:23:f6:08:c7:94:4c:2a:09:63:e2:b3:ed:
         4d:40:7b:a5:42:98:e9:b6:a9:97:1e:e5:b4:7f:73:15:ac:35:
         a7:52:5b:4e:60:ac:ca:86:ef:76:ac:41:d9:04:cc:ce:76:cf:
         1b:38:0f:ab:07:17:dc:b1:42:9c:ba:c3:75:d0:6d:78:4d:2c:
         74:a5:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:48:32 2026 by rpki-client