Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
File:                     A576C5087C3311F1890EBC415EA30FBC.roa (raw, json)
Hash identifier:          o1LaRtnUxR5FRr8B3BX8B3EB9L3DEMtxsK/GkL6V8bI=
Subject key identifier:   2E:E3:B5:D9:E2:08:C8:46:7C:A8:77:31:17:20:13:35:0D:CC:91:D0
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08BF
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
Signing time:             Fri 10 Jul 2026 07:49:56 +0000
ROA not before:           Fri 10 Jul 2026 07:49:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17408
IP address blocks:        103.3.28.0/24 maxlen: 24
                          103.3.29.0/24 maxlen: 24
                          103.3.30.0/24 maxlen: 24
                          103.3.31.0/24 maxlen: 24
                          103.37.236.0/24 maxlen: 24
                          103.37.237.0/24 maxlen: 24
                          103.37.238.0/24 maxlen: 24
                          103.37.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Jul 10 07:49:56 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a50a424-54f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:da:82:42:fe:69:54:7e:1a:05:86:05:4a:
                    43:67:92:5b:01:d1:9e:02:d4:fc:de:8f:bb:00:a8:
                    b5:a3:b9:27:98:d3:8c:21:70:7d:b7:0a:8e:33:cc:
                    53:c6:d0:f2:77:b9:89:a8:bb:8b:59:65:54:c5:a1:
                    cc:1c:0d:d8:83:69:62:e1:e8:b6:b0:35:42:17:b6:
                    a7:0c:02:a7:b5:e3:72:41:65:86:cf:5c:ea:fa:0f:
                    42:11:ac:e0:92:53:8b:d3:13:c4:56:2d:9a:3d:63:
                    6f:1a:a4:8c:cf:ad:a4:37:f1:df:20:52:fd:51:ae:
                    0f:06:db:e0:c3:08:f6:9a:6b:84:75:65:e5:38:9e:
                    41:71:83:9b:dd:0d:96:fe:4c:31:51:e4:13:18:40:
                    e9:60:d5:9d:50:7e:b4:15:24:a4:0e:4e:a5:ec:7e:
                    1e:f7:40:eb:7d:31:ea:64:68:59:7c:76:38:23:8e:
                    fd:f3:83:93:09:a0:c7:76:5d:a9:50:b8:77:2d:c6:
                    59:c4:01:da:c8:e3:b6:93:c7:78:8d:93:4f:d2:6b:
                    9e:b8:ff:d7:49:25:c4:b6:87:01:c8:30:ea:6d:b8:
                    4d:9b:bd:8e:59:a1:58:32:49:eb:8d:74:63:a5:15:
                    27:30:87:70:01:19:be:cf:7a:cb:a2:81:d2:4e:02:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:B5:D9:E2:08:C8:46:7C:A8:77:31:17:20:13:35:0D:CC:91:D0
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.28.0/22
                  103.37.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:37:34:c3:d2:53:b9:f8:40:ea:c0:75:9a:dc:ac:21:b4:
         0b:a1:dd:51:86:bd:c3:fd:42:8b:1b:67:ac:51:2f:01:5f:a3:
         e1:5f:ca:3d:8b:11:fa:ff:3c:47:b9:64:c7:b1:2d:e9:57:46:
         88:b7:07:a5:ee:22:f9:ae:ee:ae:54:1a:94:87:12:a0:88:25:
         13:8d:37:68:c2:9c:77:c4:78:cf:69:74:5c:82:88:06:c8:02:
         9e:7a:d3:04:6e:0e:83:09:de:74:82:16:3f:ff:85:a6:d9:fb:
         90:ac:9c:a7:ad:1a:94:83:b9:61:94:af:5f:57:e5:fd:a8:8f:
         59:46:34:15:5e:c5:3d:08:3e:70:5e:f9:cd:61:54:41:5e:8c:
         82:a0:cb:25:53:25:e8:a5:5e:46:bc:90:c2:14:8a:f7:a7:41:
         54:2c:e6:33:48:5f:6e:d4:9f:52:8c:3f:af:22:fd:7d:58:36:
         3d:f1:37:c2:d9:91:10:41:5b:68:d2:6f:35:1a:4a:9b:94:c3:
         72:5f:ff:d1:0f:60:46:37:80:e2:1d:8e:98:e7:46:ed:8b:be:
         41:ee:35:c3:c8:cc:39:3d:50:d9:ad:bf:27:89:e9:9b:2a:17:
         9c:11:4e:c5:5b:50:7f:bf:51:dc:36:31:f4:b3:db:bf:5e:d5:
         f4:c3:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:31 2026 by rpki-client