Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa
File:                     F87AC94C35BB11EDB0314E29C4F9AE02.roa (raw, json)
Hash identifier:          pPiTdxcTSKQC9bLQgoFkEVRy/4ESB7z1gzijBfyBjgI=
Subject key identifier:   D4:BA:93:75:E3:EF:1B:9C:DB:3A:8D:4C:76:BE:66:B3:E0:62:FC:35
Certificate issuer:       /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial:       0912
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa
Signing time:             Sun 31 May 2026 18:03:58 +0000
ROA not before:           Sun 31 May 2026 18:03:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137498
IP address blocks:        103.110.216.0/22 maxlen: 22
                          103.110.216.0/24 maxlen: 24
                          103.110.217.0/24 maxlen: 24
                          103.110.218.0/24 maxlen: 24
                          103.110.219.0/24 maxlen: 24
                          2402:9040::/32 maxlen: 32
                          2402:9040::/36 maxlen: 36
                          2402:9040:1000::/36 maxlen: 36
                          2402:9040:2000::/36 maxlen: 36
                          2402:9040:3000::/36 maxlen: 36
                          2402:9040:4000::/36 maxlen: 36
                          2402:9040:5000::/36 maxlen: 36
                          2402:9040:6000::/36 maxlen: 36
                          2402:9040:7000::/36 maxlen: 36
                          2402:9040:8000::/36 maxlen: 36
                          2402:9040:9000::/36 maxlen: 36
                          2402:9040:a000::/36 maxlen: 36
                          2402:9040:b000::/36 maxlen: 36
                          2402:9040:c000::/36 maxlen: 36
                          2402:9040:d000::/36 maxlen: 36
                          2402:9040:e000::/36 maxlen: 36
                          2402:9040:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
        Validity
            Not Before: May 31 18:03:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c780d-1c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:30:13:3e:96:13:08:72:14:73:63:99:9d:
                    ce:44:af:9b:49:d6:d9:85:95:62:c9:5e:ca:8a:2a:
                    a1:cd:94:96:ca:d9:f8:fb:c1:d1:8e:97:d1:e4:fb:
                    9f:74:1f:ed:1d:ad:e9:41:f5:ef:35:d7:59:a4:e4:
                    64:b4:51:a1:29:5e:65:fc:9b:02:03:92:99:c4:8a:
                    54:4e:73:f4:a4:f7:0f:be:0d:7b:92:5e:aa:75:6b:
                    9a:b0:f6:a7:fd:d0:ed:2e:c9:35:90:da:f7:3d:1e:
                    22:51:f1:c6:ac:08:50:1a:ac:63:a0:0e:e2:95:f2:
                    3c:9d:20:5a:d3:f9:31:f3:69:69:ad:21:de:69:4f:
                    3f:32:9c:cc:2c:1e:f5:0e:ce:b7:66:14:be:05:7e:
                    6b:17:81:11:c0:54:e6:a7:f9:46:9f:e9:67:72:23:
                    e6:a1:cc:ab:8c:71:2a:9c:f1:43:3d:fc:5d:91:02:
                    8d:36:19:c7:56:1f:31:f5:16:9c:3e:af:50:b1:86:
                    3c:b1:40:5d:66:82:ff:e6:35:34:70:32:cc:5c:40:
                    0c:6b:f9:49:31:4f:60:74:53:5b:b5:51:23:c7:29:
                    e5:e6:51:50:87:86:3c:a3:c0:93:b7:b7:f6:4e:cd:
                    0b:77:83:9f:37:22:06:60:9d:92:e7:dd:47:e6:d7:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:93:75:E3:EF:1B:9C:DB:3A:8D:4C:76:BE:66:B3:E0:62:FC:35
            X509v3 Authority Key Identifier:
                keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.216.0/22
                IPv6:
                  2402:9040::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:8f:6a:45:b7:09:cf:67:41:e5:08:26:7f:11:66:5a:6f:64:
         5b:dd:63:c2:01:d0:87:d3:70:b9:74:89:6c:fa:9f:01:58:50:
         10:25:fa:58:ee:e4:ba:14:28:dc:84:86:ca:a9:59:2c:c1:0d:
         e2:c8:5b:83:cc:d1:33:11:c3:f1:70:9f:a3:98:ff:76:b5:01:
         0d:b7:18:7e:11:b4:99:44:70:df:c2:8c:65:44:01:0a:66:90:
         83:af:1a:9e:1c:7a:e6:f6:31:37:96:7b:c0:26:2c:7a:1e:39:
         23:7c:64:09:0f:91:29:f4:7b:0a:19:26:7b:c1:05:6e:0e:27:
         19:11:48:e8:f5:6a:a9:4d:b3:ab:55:00:3e:4a:ec:f9:88:59:
         d1:81:c2:49:01:c2:2c:4e:72:81:22:d4:8f:d6:75:4b:7a:f8:
         8e:89:02:37:36:1b:49:da:13:bc:16:d2:5e:2c:80:3f:68:d2:
         8c:eb:1f:9a:7b:f2:5c:ee:54:8f:2b:01:84:e9:dc:c6:36:9a:
         a0:ae:a4:e4:fb:6e:84:5b:77:2a:7d:e8:df:7e:5d:da:39:f2:
         85:f4:40:29:e4:7a:5e:be:e9:f8:1e:9c:61:ce:fe:0b:96:0c:
         8b:07:01:8c:98:2f:87:f8:45:4b:9c:34:ec:79:e1:32:6b:f6:
         13:f7:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:55 2026 by rpki-client