Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
File:                     7588035C913E11EFB46E9A72C4F9AE02.roa (raw, json)
Hash identifier:          MmWRFerEe26M/98UPURwOZll8JnafXZbQUp9p9WdUVM=
Subject key identifier:   60:54:F4:B9:A4:12:30:86:3B:18:AD:4E:13:BB:7C:BC:B8:B5:5A:E3
Certificate issuer:       /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial:       0203
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:36:57 +0000
ROA not before:           Tue 03 Jun 2025 04:01:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58914
IP address blocks:        103.24.64.0/22 maxlen: 24
                          2406:b300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
                          rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327
        Validity
            Not Before: Jun  3 04:01:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3de89-ebea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:61:5a:19:12:7c:a1:07:26:dc:5a:07:d2:
                    51:a3:31:33:d9:51:d4:50:29:af:e1:63:a1:4a:59:
                    47:b2:85:9a:94:03:e9:6a:e3:87:79:f4:4a:cc:ad:
                    c0:0e:ac:c4:62:65:69:b2:c0:18:f2:3d:ad:62:2a:
                    df:91:eb:c5:c9:51:ad:7f:46:d8:70:28:49:03:54:
                    75:12:ee:73:96:32:db:ec:8c:3d:7a:b4:1d:f8:53:
                    70:3c:08:05:05:85:7d:de:00:42:1b:1e:93:a7:1d:
                    42:5e:26:18:b0:6c:23:13:e2:68:8a:76:08:9e:42:
                    9a:20:b0:8e:2b:ef:12:76:14:f7:9e:ea:f7:33:b4:
                    6f:cc:74:be:61:c7:f7:65:ad:52:93:79:d2:83:59:
                    39:44:46:43:e1:98:66:0b:d0:49:41:64:9b:01:e1:
                    1e:e1:7f:25:7d:2c:b2:02:c8:a8:d9:8f:86:3c:4c:
                    ad:3e:eb:e3:39:e6:c0:05:c4:56:51:d7:ea:e4:ad:
                    09:bc:b2:ce:d5:87:bc:c6:b3:5c:9e:49:d3:1b:5b:
                    67:51:8b:74:9a:a3:85:e1:f4:0c:2e:d3:75:26:8b:
                    55:70:19:b0:23:f4:7f:58:a8:f2:81:c9:5c:9b:08:
                    68:c4:c6:70:d1:da:20:96:5d:45:a3:59:dc:41:44:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:F4:B9:A4:12:30:86:3B:18:AD:4E:13:BB:7C:BC:B8:B5:5A:E3
            X509v3 Authority Key Identifier:
                keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.64.0/22
                IPv6:
                  2406:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:1a:ed:05:4c:28:59:3a:c8:8f:b3:63:ee:8f:4a:7e:90:
         80:2f:d2:fa:35:7b:8a:7c:98:64:e9:d4:6f:4c:34:56:e8:ea:
         68:3b:d5:c4:ca:68:1f:ec:c8:cd:6f:c1:59:f2:b5:2b:3d:b5:
         45:df:d3:3a:bf:16:9e:9d:69:51:00:15:6a:f8:d9:86:6d:72:
         97:5e:6d:92:26:8e:b1:df:3b:1a:82:d7:81:de:d0:df:a0:8f:
         eb:3c:41:b7:1b:c4:66:60:78:88:12:d4:1c:f3:70:22:65:f7:
         e2:24:08:46:30:68:4e:12:ba:7c:93:5e:9b:15:bc:62:b5:74:
         75:c8:68:81:aa:86:b4:46:29:ab:f6:19:74:3d:48:5f:84:a6:
         6a:5f:69:d9:81:73:dc:17:bc:d6:66:f3:01:0e:33:bd:6b:9e:
         39:9b:12:04:07:22:df:71:95:34:65:13:5b:8d:dd:72:b9:5b:
         60:57:c7:4f:51:0a:43:50:e9:75:bd:43:4e:2b:5e:4d:5e:92:
         dc:22:24:40:63:69:d3:d6:86:4e:53:62:17:1d:01:dc:4b:9f:
         35:08:88:85:aa:72:7e:3f:56:4f:6e:bb:52:9c:31:13:9e:21:
         a3:50:83:de:af:0b:05:03:b1:ae:9e:8b:8b:60:0c:36:8c:37:
         5c:06:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:21:36 2026 by rpki-client