Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa
File:                     624086E2E99611EA930A5B74C4F9AE02.roa (raw, json)
Hash identifier:          j1ZQSkQIYFS+gldnyZ+dTEQnL4DNzl2Ixm3soEFr45s=
Subject key identifier:   B3:5D:FB:24:8A:11:EC:26:51:80:53:4F:54:87:E5:47:18:C3:FA:87
Certificate issuer:       /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial:       08E1
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 10:36:52 +0000
ROA not before:           Tue 02 Jun 2026 10:36:52 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138005
IP address blocks:        103.30.232.0/24 maxlen: 24
                          103.30.233.0/24 maxlen: 24
                          103.30.234.0/24 maxlen: 24
                          103.30.235.0/24 maxlen: 24
                          103.244.56.0/24 maxlen: 24
                          103.244.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
        Validity
            Not Before: Jun  2 10:36:52 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1eb244-2c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:29:69:a4:a1:75:0a:54:c9:52:c7:3f:e2:
                    e4:3b:6f:83:67:13:ce:d0:8e:87:e9:f7:f3:df:86:
                    b4:de:3a:e3:45:b4:aa:4c:8f:e1:02:df:ae:a7:b3:
                    f8:ae:f5:d5:10:3b:56:c1:3d:79:d6:4b:fc:48:6d:
                    24:b6:85:7e:de:3a:dd:80:18:a6:b8:c6:d6:e4:d1:
                    3c:23:80:8c:70:d0:b6:c6:ed:cb:fd:4d:d3:83:44:
                    a8:26:2a:7a:c7:a1:1f:9f:91:50:fd:96:9d:f2:54:
                    d0:5e:18:ad:14:1e:2d:be:46:14:20:8c:67:48:c4:
                    2f:0d:68:ef:f1:c7:ef:c4:3d:dc:01:f1:67:1b:e1:
                    4f:88:34:75:9b:bd:c5:af:46:61:57:ac:52:3d:08:
                    cb:a0:f3:6f:db:fb:a3:7a:a6:19:d5:1a:47:3e:a2:
                    bb:20:99:f6:8d:12:b2:7e:39:72:8b:d3:b9:c0:33:
                    fd:83:5a:0e:08:56:81:81:32:ff:95:03:11:58:8c:
                    3f:04:ba:67:34:18:32:4a:92:9a:fc:b2:e5:cd:02:
                    fa:49:f0:0e:c3:32:2f:d3:d6:30:f8:40:44:47:13:
                    75:7b:35:5e:3d:86:01:95:dd:f0:81:e2:c2:7b:43:
                    a8:fa:23:1a:9b:e5:d0:0b:41:04:b3:f2:16:44:80:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5D:FB:24:8A:11:EC:26:51:80:53:4F:54:87:E5:47:18:C3:FA:87
            X509v3 Authority Key Identifier:
                keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/624086E2E99611EA930A5B74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.232.0/22
                  103.244.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:90:32:04:f4:45:1a:60:b9:d4:d9:99:59:57:b9:74:86:f7:
         4c:c8:ed:5d:a0:7c:90:b9:f8:46:84:ac:33:ff:99:31:c6:99:
         95:77:b9:61:54:66:cd:e6:ff:1e:ee:05:72:5e:2a:af:75:f9:
         b9:fe:3f:06:07:9e:27:7b:86:20:92:a3:52:ff:17:22:b5:ce:
         63:29:b9:9e:4f:ec:5a:bb:af:c5:72:39:5c:fb:f3:2a:66:05:
         ed:1e:13:78:62:f6:d6:b5:9d:02:95:5e:e0:cb:5b:55:01:3c:
         64:ff:e7:f9:a2:d9:68:32:56:f9:51:70:74:6a:2b:1f:f8:8b:
         a8:68:b9:c7:e1:4f:e0:c7:08:37:ae:3a:6e:a1:a7:65:ac:86:
         90:e6:9c:bd:11:39:aa:47:29:64:ef:38:21:95:48:1d:e0:e8:
         fe:f7:a0:72:a2:c5:c7:1a:cd:84:c1:27:e5:fc:b4:ca:81:3d:
         f7:41:a5:b2:de:25:91:79:fb:8e:41:ac:5d:f7:0a:69:7a:41:
         3e:78:ae:d4:44:90:4f:ef:6e:d6:0b:bc:54:96:08:fb:46:ea:
         bd:17:81:06:8a:3b:7b:67:18:4f:10:c3:fa:80:dd:6e:44:58:
         28:b0:4d:4e:fd:16:55:e4:4c:31:db:09:99:59:f4:01:c1:e2:
         04:6d:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:52 2026 by rpki-client