Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
File:                     57BB8E50AF1D11EF9CB35387C4F9AE02.roa (raw, json)
Hash identifier:          I6wxSjZBEhN4rIi485+hSWkmeif6CIhPyITN2oXOPT4=
Subject key identifier:   55:79:03:18:0C:3E:4F:D6:36:80:59:54:3B:16:24:EE:9D:9D:C2:ED
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       03A6
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
Signing time:             Wed 15 Jul 2026 01:27:03 +0000
ROA not before:           Wed 15 Jul 2026 01:27:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149995
IP address blocks:        103.190.84.0/24 maxlen: 24
                          103.190.85.0/24 maxlen: 24
                          2001:df0:e7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Jul 15 01:27:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56e1e7-dd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:93:b0:2d:0d:67:07:83:a7:52:ee:19:92:
                    cc:17:16:5b:6d:22:2b:23:02:63:7c:b2:64:b1:33:
                    b0:e2:40:15:e6:98:9c:32:43:7c:95:27:d7:e5:e3:
                    4b:dc:56:71:4e:b8:7b:b2:24:b1:5e:e0:91:3c:15:
                    63:25:9c:2d:1f:3d:05:46:04:78:b9:b8:a2:45:17:
                    d4:47:4e:3c:18:ab:cd:7d:a0:bb:24:8d:29:69:88:
                    50:53:30:7f:a2:98:11:86:b3:df:bb:85:98:c5:94:
                    30:dd:53:25:a8:15:7e:53:5d:8e:65:f6:26:c3:a4:
                    34:c4:64:b5:1a:fc:6d:44:e1:a3:ca:37:14:27:b7:
                    f3:09:83:2f:15:44:88:50:c3:76:92:a4:44:68:ae:
                    45:88:0b:d7:fd:82:e1:1e:b3:0b:56:49:b4:de:69:
                    2c:bd:88:4b:e2:ae:9c:3c:e3:3f:78:db:1d:1c:b7:
                    af:80:15:45:73:21:1e:94:7a:ed:5f:d0:06:6f:67:
                    08:10:43:58:54:7e:01:6b:a7:01:18:5d:fa:d1:9c:
                    09:95:b1:40:69:0f:3f:0c:21:c3:79:d5:3d:d5:76:
                    55:97:47:fa:00:a4:3f:ae:ed:3c:6a:f7:1b:8a:1c:
                    01:69:80:60:65:5a:68:69:8f:45:31:25:a4:f5:4a:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:79:03:18:0C:3E:4F:D6:36:80:59:54:3B:16:24:EE:9D:9D:C2:ED
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.84.0/23
                IPv6:
                  2001:df0:e7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:80:2c:01:df:ab:df:d7:a1:b2:fa:6e:50:63:cd:a6:fd:12:
         7c:68:d6:81:59:69:95:de:28:37:6e:53:7a:b2:6f:50:e5:84:
         50:5c:5e:d6:41:18:89:c2:cd:57:33:38:fe:b0:28:c7:81:99:
         7f:76:d5:0f:5b:44:30:94:54:52:98:16:4b:0a:5d:0f:09:9f:
         f6:6a:e8:df:bd:b0:c1:81:b2:cf:0b:2e:5b:5d:6d:ba:b3:85:
         c7:cd:cf:3b:26:d4:fb:3b:60:33:b8:8f:78:af:3d:8d:b7:e6:
         f5:79:28:1a:2a:f5:de:89:80:64:3f:9a:2f:83:7e:00:6e:07:
         6b:14:b2:78:10:2a:b1:ed:c8:d5:ed:61:61:6a:78:d3:79:6e:
         7f:cc:c1:36:31:a6:76:ae:82:40:c8:87:aa:5e:d8:94:7a:cb:
         ad:3e:e0:a7:38:f0:1d:72:b9:75:aa:9d:cd:69:4c:8a:4a:77:
         0b:a5:0c:65:c4:2b:d9:ab:9f:88:1c:13:b1:92:40:a1:c0:6a:
         2b:02:0a:df:65:65:3d:83:41:53:2b:d2:7f:41:ae:b9:88:70:
         56:42:88:ca:84:ec:1a:33:fe:e5:3a:7c:0a:a4:13:71:4c:7b:
         86:a4:cd:6a:41:61:bb:9f:ea:78:fe:da:a7:47:fb:de:dc:9d:
         c0:42:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:42 2026 by rpki-client