Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa
File:                     7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (raw, json)
Hash identifier:          N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=
Subject key identifier:   80:68:15:5B:95:CD:CC:8E:0D:60:D7:5C:59:BF:18:05:38:E9:FA:A3
Certificate issuer:       /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial:       01C9
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa
Signing time:             Thu 11 Jun 2026 06:41:43 +0000
ROA not before:           Thu 11 Jun 2026 06:41:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     213549
IP address blocks:        103.14.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
        Validity
            Not Before: Jun 11 06:41:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a58a7-ad98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:86:99:8f:a0:e2:42:07:f6:6c:fe:08:7c:
                    c0:1c:f1:97:cc:3c:96:57:8f:36:51:86:6a:ad:47:
                    f3:0c:e2:76:e9:9e:09:0d:9f:94:f8:e1:78:00:d2:
                    c7:b4:af:58:63:b8:32:cd:26:c9:47:e8:3e:d3:7f:
                    be:81:29:7a:3b:ea:b1:0c:82:c4:a4:99:e3:c2:53:
                    ba:ed:35:56:3e:89:4d:a7:08:75:fe:e0:07:5c:57:
                    0d:88:3a:85:cf:bf:20:b1:54:1e:45:9f:cb:19:bb:
                    8f:21:a8:0e:74:e9:e7:46:c9:16:f8:46:f6:b8:a4:
                    74:6b:a6:ac:50:ec:8b:63:c2:15:14:6a:3c:52:af:
                    93:8e:a1:d7:33:de:d8:13:17:71:4d:e1:02:0a:77:
                    02:62:20:61:5e:ea:ef:09:93:36:61:93:76:cc:b5:
                    b0:63:7a:5c:9d:2a:26:23:58:42:aa:5d:c5:34:0e:
                    95:8b:a0:39:e8:2c:49:42:ea:27:7a:10:ab:c8:d8:
                    79:33:c0:e5:b3:70:b5:79:03:e7:21:b3:eb:44:06:
                    f4:66:e8:39:b7:bf:a8:85:37:85:86:37:20:f5:b7:
                    ee:e3:67:a2:f3:48:cb:71:36:5c:14:fe:aa:cb:0d:
                    3f:49:60:5e:95:3a:b2:38:fd:b1:8a:4a:50:86:73:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:15:5B:95:CD:CC:8E:0D:60:D7:5C:59:BF:18:05:38:E9:FA:A3
            X509v3 Authority Key Identifier:
                keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:fd:b3:72:68:48:03:7c:59:b5:1a:87:9d:80:3f:68:b8:1d:
         c2:7b:60:00:7e:d9:35:1e:d8:e1:70:55:e9:ec:4e:03:8c:5f:
         e3:cc:c5:db:43:fd:e6:9b:b5:32:88:7c:e7:19:db:0f:7e:34:
         d5:8a:43:e4:fa:e0:07:90:85:f7:6f:24:80:ca:48:25:4f:29:
         5f:94:7b:c5:db:0f:21:3e:79:cb:d3:52:23:b8:a3:cb:27:a2:
         98:42:1b:1d:65:c1:03:5d:7a:e5:bb:7d:35:e5:6a:8c:12:72:
         81:85:a5:97:9e:80:60:fb:04:b0:51:92:ac:f4:dc:f4:00:68:
         a9:6a:f7:80:9c:e3:50:8b:e3:a0:17:b1:95:01:a6:39:9d:f2:
         5f:0b:4c:c7:17:f9:13:3f:41:75:1e:9a:5e:1b:d2:17:c6:9a:
         6a:38:37:79:a6:d0:7d:64:d6:6d:28:6a:11:fe:50:e4:e8:94:
         09:2b:31:9e:f2:d9:a6:3d:6d:01:73:74:e5:a0:e1:59:7b:d1:
         03:ed:e5:2b:87:75:d8:f1:c2:31:e7:57:46:d3:83:f9:6d:0c:
         0e:12:1d:fc:37:a6:1f:d1:db:c2:40:24:94:a9:49:cb:cd:5a:
         c3:c9:47:bd:e5:26:a6:77:cf:f8:31:e1:5e:1a:90:9c:13:4f:
         39:7c:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:03 2026 by rpki-client