Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa
File:                     BEB276EECCE311EAA397205EC4F9AE02.roa (raw, json)
Hash identifier:          eazjY0QI0IkousembgiUMF6ex//mtspG+XkKlVCT+t4=
Subject key identifier:   F4:9B:CC:6C:D6:9E:D1:F2:5B:4A:41:66:01:CD:F1:7A:57:4D:AB:C4
Certificate issuer:       /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial:       0925
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 21:21:40 +0000
ROA not before:           Fri 10 Jul 2026 21:21:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45437
IP address blocks:        103.57.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
                          rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
        Validity
            Not Before: Jul 10 21:21:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a516264-f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:05:5f:50:d2:3f:60:00:4e:b5:57:50:aa:
                    01:b0:fd:3e:65:2b:53:59:e5:a9:11:04:41:b4:e1:
                    4f:33:f8:f1:8c:7c:ef:21:7f:fb:31:5b:8f:f2:70:
                    8a:48:fe:53:88:12:9e:91:92:28:e6:60:e8:6b:c7:
                    a5:96:a1:15:59:80:5e:97:67:49:b5:f8:b0:6e:2e:
                    61:f7:5c:4f:b8:8c:55:62:21:7b:96:84:05:2a:b1:
                    98:c8:e5:b1:0c:df:e6:fc:9c:d5:e4:22:a7:24:51:
                    c1:a5:67:7d:89:c8:8a:bd:cb:e7:1f:10:c5:3f:32:
                    38:15:6f:d4:20:b8:c7:b9:d6:31:f8:9c:68:d4:3a:
                    f8:fc:82:a6:c5:60:81:f0:ca:98:5c:c9:27:c5:0e:
                    49:e2:82:da:93:04:0d:d7:31:52:5f:ab:26:a4:a4:
                    ad:bb:97:b3:aa:e4:6b:13:2e:fe:5d:ff:1f:09:1e:
                    91:e5:63:3a:b1:c7:52:08:03:8a:49:99:af:ea:6f:
                    07:21:90:ad:db:19:ae:d2:e7:58:1e:14:f2:20:75:
                    38:b6:38:36:8f:be:35:43:99:6a:ed:82:09:36:4c:
                    3f:41:60:ee:a9:28:1b:1e:4c:97:30:5f:9a:c3:f5:
                    73:1d:e9:06:81:fd:6d:d5:b5:98:c7:22:d1:95:b9:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9B:CC:6C:D6:9E:D1:F2:5B:4A:41:66:01:CD:F1:7A:57:4D:AB:C4
            X509v3 Authority Key Identifier:
                keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:d6:db:ad:a2:f2:e3:0a:21:4e:e0:d0:ed:34:7a:9d:dc:
         89:75:cf:9a:3a:d2:02:12:97:3b:23:3b:62:84:e9:aa:45:a2:
         90:34:7a:f4:6c:19:ce:b7:32:83:b8:90:fb:13:17:a6:fc:89:
         0a:b2:5d:3d:5f:b1:1e:3f:7f:4f:00:4f:c1:25:38:bf:78:78:
         d3:36:0e:41:04:0c:aa:7a:d5:20:1b:95:1f:6f:da:6c:ab:18:
         b8:7e:e0:01:09:22:6d:c4:87:a8:aa:61:f1:db:61:2c:cf:e0:
         b6:aa:12:64:da:9a:f8:ee:62:5a:ff:b2:42:cb:86:37:2d:09:
         b8:d3:19:9b:89:32:fe:9b:68:6b:71:bb:9b:b5:49:60:b8:81:
         50:90:34:65:57:2c:2e:2a:2d:d9:44:6f:be:e4:ee:9b:29:08:
         75:e6:b7:b9:5f:9e:70:10:cb:0a:0b:39:30:47:95:4d:4e:6f:
         fe:7b:ea:56:3e:ba:35:2b:07:fb:0f:f2:15:0c:cc:90:b3:5e:
         63:e5:58:2e:eb:70:ad:3a:32:03:ba:18:cf:9d:a3:30:9f:b9:
         91:5a:bb:c0:51:b1:ee:26:f0:9f:fb:ee:0f:64:5f:fb:15:a9:
         9f:f8:51:fd:5e:fe:a0:35:90:ae:50:c0:67:fd:40:06:61:15:
         a7:f6:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:21 2026 by rpki-client