Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/AA9CB26C7B0311F196D86D0881A30FBC.roa
File:                     AA9CB26C7B0311F196D86D0881A30FBC.roa (raw, json)
Hash identifier:          E+xfxpYUFRv9DLfEjsGHT+2HbSf4Vmje0065OHSbe0c=
Subject key identifier:   46:66:25:DE:68:0F:04:0C:59:45:E2:A4:DB:18:FC:28:5A:41:FE:9C
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0763
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/AA9CB26C7B0311F196D86D0881A30FBC.roa
Signing time:             Wed 08 Jul 2026 19:31:50 +0000
ROA not before:           Wed 08 Jul 2026 19:31:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        103.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Jul  8 19:31:50 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a4ea5a6-44dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:88:f1:49:21:b4:cf:ad:cc:67:dd:6d:11:
                    a9:6d:72:c5:ed:b7:16:03:e5:99:81:37:dc:f4:c2:
                    dd:8c:1f:f0:c4:25:cd:80:0b:8e:84:a9:00:86:f9:
                    ac:7d:f4:ae:93:83:b6:46:14:bd:66:63:ed:26:fe:
                    df:de:34:53:6f:57:db:50:ab:9b:d4:ae:d8:b6:6a:
                    a6:5b:ce:1b:d2:14:46:c5:59:63:b6:de:33:74:72:
                    c6:28:33:cf:a4:93:4e:fc:07:98:e2:77:aa:f6:fd:
                    15:8d:b1:4d:a7:97:6b:12:8a:ef:48:69:47:03:24:
                    47:25:cf:88:0e:bd:dc:18:92:30:ef:d2:1c:89:76:
                    1d:28:8d:46:06:61:ee:b5:52:ac:8d:58:23:98:58:
                    a2:7c:c5:86:4e:0c:54:66:c7:9f:9f:73:6b:59:c7:
                    45:00:64:be:bd:d0:15:b0:22:e9:eb:9e:6e:b6:b5:
                    67:9f:7f:e6:5f:17:19:d1:bf:1a:f7:ad:7f:3c:c7:
                    f5:f6:ca:61:b9:ce:6f:fa:14:cb:c2:69:fa:22:89:
                    1d:c6:34:c5:15:ef:6f:47:1a:84:33:7e:65:39:f6:
                    72:95:5c:48:c6:9f:cd:e3:49:e3:8e:20:cf:b5:1a:
                    ce:78:c0:8b:9a:b4:cb:f2:8c:81:49:53:e7:13:46:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:66:25:DE:68:0F:04:0C:59:45:E2:A4:DB:18:FC:28:5A:41:FE:9C
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/AA9CB26C7B0311F196D86D0881A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:73:2e:0c:ef:d6:db:9b:48:1e:22:34:bb:55:dc:8b:16:
         08:3c:2f:dc:99:13:67:d6:4d:e7:67:18:3a:a8:83:31:60:3e:
         d3:5a:41:11:b8:65:1a:bc:f4:d4:16:8a:67:6a:e7:09:23:81:
         a8:06:a6:52:da:ad:f2:1e:45:f3:17:37:b6:3e:33:11:e1:78:
         db:ce:dc:7d:f0:df:1b:09:6a:f6:88:d2:d2:7a:bd:0e:91:63:
         7b:cf:1e:1d:74:a9:66:69:46:e9:8e:a0:28:27:dd:d2:22:70:
         92:2b:d6:47:50:13:a7:2f:bf:7f:10:88:f7:11:b6:b7:59:bb:
         c0:57:44:23:1b:cd:c3:37:8c:12:4b:3c:68:b4:b1:71:3c:6d:
         27:35:eb:c0:96:9b:19:2f:b2:91:fd:0a:39:39:89:1c:33:04:
         81:1e:a1:63:95:cb:06:0d:6f:c9:66:87:5b:35:ae:5f:38:7b:
         68:4b:94:32:80:db:de:46:f7:cf:c3:a1:29:33:58:e5:c1:f1:
         81:c0:43:2b:74:0f:51:26:7e:cd:b9:b8:9e:ea:fb:4d:2a:4e:
         27:35:3a:8e:20:4f:70:de:26:40:48:bd:d9:96:17:af:db:a7:
         4b:ad:0c:90:9b:4e:4f:8c:59:ae:2d:83:7e:e7:0f:a2:3f:4e:
         2a:67:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:43 2026 by rpki-client