Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
File:                     B3876B1821C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          MalwjoN5cuoqPXC8qDmvp2vBk51alqMZE2wuotImz1Q=
Subject key identifier:   67:58:31:9F:D3:D6:82:F3:B8:BD:67:A7:DF:A0:6C:70:95:D7:B5:5B
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       1081
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa
Signing time:             Thu 28 May 2026 17:22:34 +0000
ROA not before:           Thu 28 May 2026 17:22:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        103.113.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4225 (0x1081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 28 17:22:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1879da-4da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:38:96:4d:90:03:66:9d:84:87:de:a0:7c:
                    59:90:53:ee:5d:ce:8e:57:43:5d:88:ee:cb:38:34:
                    61:91:cc:76:84:96:bb:48:8b:1e:60:2d:c9:18:e4:
                    b7:3c:66:d2:f9:2e:61:5d:72:43:c1:2e:45:00:03:
                    24:8a:c5:92:9b:20:b3:ec:bc:b2:cf:62:36:c1:68:
                    fa:b7:a7:6a:ea:3d:20:3d:51:d1:e5:9d:ae:55:ec:
                    e8:04:48:ec:fc:fa:eb:72:a3:df:1a:8e:ba:03:38:
                    25:cf:d8:6d:39:2f:8d:9b:72:72:f4:66:a9:7a:1b:
                    ea:07:ad:6f:db:27:42:8c:aa:2d:11:ff:86:93:4b:
                    b2:ab:e7:7d:52:fb:d8:95:64:87:25:3b:ac:80:d2:
                    42:48:79:ec:ba:5c:e5:a5:87:f7:c0:f7:bd:94:34:
                    30:c4:d0:1a:08:2a:1d:fd:be:d8:27:80:28:71:37:
                    35:24:b1:70:98:96:f1:b9:b7:c9:2f:85:2b:ac:17:
                    b7:05:79:24:01:9f:89:dd:43:f3:7f:6b:8e:55:e8:
                    ac:49:57:2b:ed:a5:78:dc:67:cd:41:2e:19:96:3c:
                    eb:a8:4a:b8:87:0b:e0:8b:37:44:1d:24:29:75:6a:
                    86:a2:84:dc:e0:c2:cf:9a:d2:c7:c2:c9:d6:db:fd:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:31:9F:D3:D6:82:F3:B8:BD:67:A7:DF:A0:6C:70:95:D7:B5:5B
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:01:4a:88:fc:20:39:de:24:2b:7d:be:08:51:1f:7b:22:85:
         93:e9:19:85:02:d6:7b:71:9f:04:d4:ec:5c:34:4e:7c:be:da:
         f7:aa:24:2a:6a:73:ec:6d:bd:a9:23:fe:e1:cd:54:55:f6:ff:
         e4:f3:95:f7:76:ab:75:9a:5d:2d:56:49:6e:ac:10:8d:86:57:
         c7:8a:5b:27:69:c0:e9:af:91:1d:e6:b3:ee:b3:71:21:ce:94:
         47:a2:bb:85:03:18:ce:a4:8a:a1:29:14:48:0a:2f:5c:4e:3b:
         4b:3c:07:12:07:07:28:9f:c3:d6:3f:0a:93:f2:10:b5:e3:dc:
         95:6c:15:b7:02:86:87:0c:2e:9f:37:47:d1:bb:ff:fb:5a:05:
         9c:18:05:f6:a9:40:59:10:f8:72:26:cb:c6:39:66:fb:91:ab:
         c3:81:31:c9:3d:82:95:01:0b:92:a7:74:54:8f:64:2a:c2:bc:
         b1:ec:4e:b9:bd:7c:64:e1:30:e2:7e:06:00:97:2d:bc:c3:ab:
         96:4e:b9:c3:e5:6f:c4:9d:82:a0:79:1d:ba:55:63:c5:f9:7c:
         86:cb:a7:cc:f5:e1:cd:e8:f1:4b:f6:72:60:0f:e0:c2:4e:81:
         8e:2f:3d:f3:db:ce:27:8b:89:d2:cb:59:06:08:6c:42:80:19:
         58:20:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:00 2026 by rpki-client