Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/E63D6AB086EC11F19E006003A7EE528E.roa
File:                     E63D6AB086EC11F19E006003A7EE528E.roa (raw, json)
Hash identifier:          HA6O4500TdNqLPszScg0UgHEWNLVJDVH5xC0mHNZQLw=
Subject key identifier:   B4:F5:13:24:50:E5:E9:C3:6E:0C:C8:C3:DD:AA:35:58:81:E1:24:32
Certificate issuer:       /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial:       34ED
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/E63D6AB086EC11F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:19:06 +0000
ROA not before:           Thu 23 Jul 2026 23:19:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58779
IP address blocks:        43.243.224.0/22 maxlen: 24
                          103.244.52.0/23 maxlen: 23
                          103.244.52.0/24 maxlen: 24
                          103.244.53.0/24 maxlen: 24
                          2405:ef00::/32 maxlen: 48
                          2405:ef00:17::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13549 (0x34ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
        Validity
            Not Before: Jul 23 23:19:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a62a16a-f26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:fe:ea:de:ee:f6:b9:4f:aa:35:3e:a0:fe:
                    0c:d9:3f:cc:f1:a0:34:2d:3f:ec:56:d7:17:f3:32:
                    5c:06:82:43:db:d2:b3:d5:b3:c1:1f:5e:a5:32:aa:
                    37:94:dd:ba:73:c3:eb:71:ad:0f:3e:47:d4:25:b2:
                    dd:5f:b2:57:a2:b8:c6:1b:1f:e7:37:0e:d4:39:eb:
                    3f:8d:28:2a:5f:cc:65:be:32:44:b8:42:e2:51:4c:
                    f7:79:3d:0e:67:65:0b:9e:23:3b:87:78:ef:2e:6d:
                    38:3a:96:95:70:4e:df:df:3f:cf:eb:2a:24:e5:02:
                    59:a7:27:b8:b9:76:d0:21:b1:dd:41:77:70:83:33:
                    c7:e7:66:c8:2a:25:3f:45:67:28:4d:e6:fb:f6:e0:
                    96:72:6a:73:c5:7e:82:63:81:9a:bd:26:31:80:45:
                    4a:e2:3c:12:b5:13:a1:47:5a:fe:51:10:aa:c6:4b:
                    58:9b:14:b1:c7:b9:70:54:f2:be:0a:b2:fc:d6:27:
                    1e:ee:9a:91:1c:82:c9:3d:4d:f8:80:aa:0f:60:02:
                    b9:c4:b8:a8:1a:32:5f:0b:62:a3:64:45:96:5b:64:
                    c6:da:a0:26:fb:00:5f:97:76:5f:b8:03:d8:2b:29:
                    7b:dd:ce:ea:02:96:68:a0:8d:74:4c:59:34:ba:22:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F5:13:24:50:E5:E9:C3:6E:0C:C8:C3:DD:AA:35:58:81:E1:24:32
            X509v3 Authority Key Identifier:
                keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/E63D6AB086EC11F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.224.0/22
                  103.244.52.0/23
                IPv6:
                  2405:ef00::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:68:7f:16:a8:63:eb:3e:ad:d6:45:44:c4:0b:05:5d:45:90:
         70:f6:21:8b:80:d0:62:50:72:e8:fa:54:34:76:72:2b:dd:87:
         54:f3:4c:3f:7a:da:a3:d1:3c:dd:8f:a7:e4:5a:7a:e8:7c:ab:
         3e:00:74:dc:85:02:06:5b:ba:13:5e:6a:d4:e2:bc:5e:ce:d8:
         e4:59:51:df:66:c2:a1:8f:7c:8c:32:49:09:9f:3d:7f:7d:8b:
         70:29:4d:d6:86:10:26:45:04:3e:75:ce:f3:17:71:46:45:19:
         dd:ac:87:a6:4e:f5:22:07:64:7d:0b:f6:4d:60:a5:3e:32:9e:
         36:21:c0:17:07:e1:f3:c5:1f:ca:51:ea:89:ff:60:51:8e:1a:
         4c:17:e0:46:7e:49:d6:da:91:8e:b7:83:ad:36:e3:28:fa:1d:
         56:3a:09:90:5b:52:1d:e3:21:44:cf:88:23:b5:a4:ba:9f:bc:
         35:39:26:1a:64:a5:53:3a:ea:6b:06:93:db:9a:8c:f9:8b:7e:
         00:10:62:de:e4:e1:47:87:23:6c:9e:af:59:b6:75:77:de:c9:
         52:87:1c:39:5f:2e:73:11:dc:b7:e4:8b:8f:d7:34:3d:f8:96:
         ce:98:7c:91:f5:08:35:ac:92:a6:5c:87:e0:fb:7c:e7:e0:3f:
         2a:5f:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:54:43 2026 by rpki-client