Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
File:                     7AFB859484C711EF9740BE81C4F9AE02.roa (raw, json)
Hash identifier:          x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=
Subject key identifier:   4C:8E:BA:AD:A2:FC:E8:BE:10:C3:E0:7B:48:57:92:AB:7C:AC:34:93
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       067B
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
Signing time:             Sun 14 Jun 2026 23:26:30 +0000
ROA not before:           Sun 14 Jun 2026 23:26:30 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.214.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 14 23:26:30 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2f38a6-8802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:67:5e:5b:61:9e:ad:bd:99:59:4d:59:fb:
                    1a:80:93:12:10:a6:da:a3:f4:2a:90:ed:71:51:8a:
                    f6:a8:77:95:1c:f6:af:d1:79:02:e0:6b:5d:51:67:
                    1b:a7:72:18:7f:ba:84:56:36:40:08:80:b1:1b:81:
                    69:be:69:5e:16:f2:db:4c:95:7d:57:39:f2:35:a3:
                    da:87:a1:a8:98:e2:4c:3d:d6:7b:18:0b:2e:d5:51:
                    96:47:d6:fc:70:2f:8f:87:89:1c:b7:91:d6:83:21:
                    2c:ed:f6:fb:69:58:0f:0b:3a:ee:52:5f:72:85:59:
                    f5:99:5b:f7:d5:84:c1:0b:e9:ee:47:3e:e9:89:61:
                    4f:e0:c1:ae:a2:0e:0f:93:65:c6:34:e2:28:d7:f0:
                    d8:30:c0:5d:1d:31:8f:2e:75:7c:af:fd:ac:1e:d9:
                    9f:7d:5f:a2:1a:79:69:d3:45:0b:7e:ee:f2:54:c3:
                    fd:e2:60:79:7f:0a:63:b7:7f:d9:1c:c5:4b:f0:bd:
                    0e:65:9e:e1:a5:3e:a4:4b:56:6a:35:9a:00:79:79:
                    9f:0a:89:47:1a:2c:a9:c0:f9:c0:ab:43:30:bf:7d:
                    ce:0c:bf:05:f3:98:3f:a4:07:03:62:23:23:c8:5b:
                    2d:87:19:c6:8f:4d:49:2e:34:a5:b3:2f:29:be:32:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:BA:AD:A2:FC:E8:BE:10:C3:E0:7B:48:57:92:AB:7C:AC:34:93
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:1e:a4:d3:72:f6:3b:51:3f:5f:95:03:69:d9:f5:fc:3e:
         12:40:65:19:c1:4f:2a:68:73:7d:8a:a0:96:6c:eb:2b:09:10:
         5c:50:e5:f3:9f:3d:d0:60:53:a4:51:6c:39:a7:ec:b7:98:a6:
         bf:b2:8c:c8:c8:37:42:89:c8:6d:f6:a6:68:d2:d2:1e:4f:d9:
         8c:ba:72:70:da:f3:9c:0c:00:61:1a:11:5a:82:ba:15:3d:62:
         76:00:92:06:71:e0:c8:f0:38:31:18:13:81:dd:4a:e5:c8:5c:
         28:f2:8b:fd:36:bf:d1:48:c8:ba:f5:16:e7:30:47:be:20:0f:
         9c:17:25:89:91:0f:f6:e4:8e:7c:41:b9:db:fa:4e:25:da:55:
         12:7a:12:ea:1e:28:fb:be:83:4d:87:da:d9:e5:dc:6e:51:08:
         c8:d5:02:8f:9b:cf:98:22:41:59:8d:ef:13:e5:23:2b:ac:5d:
         1b:b1:8c:bc:5a:b1:ce:3e:4b:22:3e:bc:b5:69:72:8f:f1:0f:
         fb:86:11:5c:dc:44:a6:27:fa:b4:f4:96:b9:fa:89:c2:69:35:
         e5:19:27:c9:7d:52:b7:d3:59:f5:12:52:a8:47:b8:27:a7:ec:
         44:d6:e7:c2:ba:9c:62:24:f3:05:b6:4e:90:38:af:28:37:93:
         9f:a8:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:08 2026 by rpki-client