Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/57BDB7A85E7011F1A73FCCD7147AAC22.roa
File:                     57BDB7A85E7011F1A73FCCD7147AAC22.roa (raw, json)
Hash identifier:          D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=
Subject key identifier:   B2:D0:16:EA:04:63:28:B4:48:57:1D:52:77:FF:A6:3B:FA:89:28:4E
Certificate issuer:       /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial:       08EB
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/57BDB7A85E7011F1A73FCCD7147AAC22.roa
Signing time:             Tue 02 Jun 2026 10:46:43 +0000
ROA not before:           Tue 02 Jun 2026 10:46:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     22244
IP address blocks:        103.30.232.0/24 maxlen: 24
                          103.30.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
        Validity
            Not Before: Jun  2 10:46:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1eb493-a4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:42:08:24:1b:15:c0:f4:29:f1:2d:46:c6:
                    df:05:e6:11:b1:ff:1c:da:e4:25:51:f3:90:db:d3:
                    04:e7:72:c9:c0:18:94:f1:4e:70:68:b9:03:56:af:
                    2c:1f:b0:67:02:74:10:f9:5f:fb:f1:94:b3:11:51:
                    81:1c:c8:b6:43:36:b6:4a:43:93:e9:b3:8b:a7:37:
                    b8:ac:71:2c:a8:d4:38:5e:20:d0:e4:a5:6d:6e:b4:
                    23:3a:36:41:4a:3e:2a:e8:db:9b:00:0b:58:f4:0d:
                    ff:23:65:6d:a7:8d:7e:a2:32:8d:26:4c:0d:80:9e:
                    e9:ff:b4:ae:4c:54:16:83:8d:56:54:43:4f:26:fe:
                    08:6c:7a:9c:21:56:e3:e5:83:f0:38:90:84:e9:3f:
                    b6:0a:00:93:a2:ed:04:88:66:fd:6b:79:e8:ed:5d:
                    1f:05:80:00:6b:e7:51:9f:ce:89:74:b2:3f:06:67:
                    59:8f:29:79:e1:95:fa:95:d9:09:ac:ac:74:e1:03:
                    a5:26:12:f9:a9:99:ea:7d:d0:b0:ab:4a:33:f0:be:
                    95:39:df:14:16:87:2a:fa:b7:f9:df:17:08:c4:26:
                    a2:6d:55:f9:72:bc:07:8e:76:44:ff:49:3b:05:75:
                    8b:0b:cf:db:ab:6a:7b:a7:02:d4:e8:5f:2e:e6:ad:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:16:EA:04:63:28:B4:48:57:1D:52:77:FF:A6:3B:FA:89:28:4E
            X509v3 Authority Key Identifier:
                keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/57BDB7A85E7011F1A73FCCD7147AAC22.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:82:67:51:81:78:cc:e2:e1:1c:84:c6:78:d9:ae:09:0c:36:
         ac:20:7c:1f:75:53:e7:db:dd:21:5a:b6:98:0f:c7:af:2b:ec:
         81:d5:61:66:5f:c7:55:f9:af:ab:cc:5a:4c:db:7f:21:f6:ed:
         3d:a1:bc:ab:3c:3b:1c:27:ad:2e:33:b0:35:eb:7b:0d:c9:f4:
         af:df:7a:6f:2d:28:dc:dc:d5:8e:df:bb:73:9c:e5:28:bd:20:
         c4:50:a4:d2:e1:7e:e7:78:54:9e:36:c2:4b:1a:f6:08:2c:14:
         63:13:cc:46:5f:17:ab:3f:22:f2:6d:48:7a:f0:fa:90:3e:27:
         61:43:7b:ab:e5:6c:23:7f:ad:04:64:2b:59:f1:a2:26:00:9c:
         9f:78:c5:93:86:73:28:60:91:4d:61:53:dc:74:e7:0b:2c:ad:
         63:fa:e8:a7:23:4c:12:c6:0f:46:38:b2:42:64:8c:f8:2a:f4:
         c6:43:60:9c:2c:54:b5:1d:8f:fc:23:52:3f:e1:e8:d2:33:97:
         73:f7:50:b3:c0:64:e1:1a:ce:d9:c7:f1:8a:40:6a:be:16:44:
         12:2d:11:e1:6e:7c:0c:ce:70:93:a6:62:71:90:2f:9c:8f:ca:
         78:f0:7f:68:05:00:da:c2:31:a0:4a:d1:af:de:13:68:4b:48:
         26:ae:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:58 2026 by rpki-client