Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa
File:                     B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier:          768uBhCuBq3slVPURG8JxN+/BsuzFS5sZEwWCDdjApw=
Subject key identifier:   F6:9A:94:EE:84:57:5F:4A:90:8A:C4:E9:77:C3:82:DD:73:83:66:4F
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       2874
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:15:24 +0000
ROA not before:           Mon 20 Jul 2026 16:15:24 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132842
IP address blocks:        103.11.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10356 (0x2874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Jul 20 16:15:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e499c-fd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:87:62:70:74:2b:1b:bc:c0:84:92:fa:f4:
                    1e:72:2b:b2:3a:27:4c:fe:6b:c3:33:0e:81:1a:5e:
                    83:8b:78:5f:27:b0:c5:8f:d7:ed:1d:46:e6:7b:41:
                    99:c0:b1:d3:dc:9a:71:d1:98:de:77:a2:24:03:da:
                    59:97:fa:1f:d3:e2:39:6f:9f:80:80:33:6d:12:27:
                    08:58:83:b5:59:db:d0:a2:aa:bb:bd:9d:0d:de:7d:
                    fa:94:a1:bc:29:07:20:d6:b5:da:a5:01:1e:a2:8f:
                    97:5b:ad:76:56:70:8b:3e:8d:8f:fa:52:d9:0e:0a:
                    2b:8a:a0:62:e6:4b:10:81:95:67:62:f1:dc:63:39:
                    99:c8:b1:b5:d3:5f:28:b3:a5:54:70:a6:eb:8f:a5:
                    6f:42:96:23:74:e3:c8:dc:e6:a0:4b:b6:70:f8:c9:
                    0b:fc:4b:7d:04:9f:51:0e:84:95:0f:49:6e:e5:01:
                    bb:5c:8c:12:4e:af:d0:40:94:e2:f9:65:98:d1:aa:
                    97:04:6e:10:5f:6c:8b:c3:19:17:52:d1:eb:a8:cc:
                    86:e2:df:96:2c:b0:bb:2d:af:c6:2e:80:99:16:6a:
                    80:14:ef:88:84:93:60:e4:92:a0:2e:cc:d8:7e:fe:
                    db:bf:a0:02:c4:a2:2c:c7:7a:77:ca:14:ce:8f:81:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9A:94:EE:84:57:5F:4A:90:8A:C4:E9:77:C3:82:DD:73:83:66:4F
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a8:ff:d3:02:37:25:6a:a8:ac:62:36:bf:f8:d5:1b:02:2c:
         29:8a:15:bc:17:54:69:21:32:21:f6:37:b0:32:de:ce:f3:83:
         07:84:f9:0f:be:9b:bd:16:45:5b:78:88:54:34:50:e2:98:40:
         29:25:98:61:7c:bb:ea:f9:b6:9e:08:00:d7:34:4c:30:a1:43:
         82:05:82:e8:80:bd:3c:fc:60:5a:82:1d:aa:0d:3c:a5:68:0f:
         d5:18:cd:72:83:58:85:2f:32:10:fd:0d:9f:be:09:7a:7a:19:
         ad:ad:bd:8a:d4:0c:f3:b3:5b:7a:8b:81:3f:c3:93:35:f8:8a:
         f3:d2:99:8a:c4:56:2f:ce:62:6d:c0:d2:99:95:81:1e:1f:f7:
         58:e5:82:33:10:b8:b8:fe:55:2e:8b:d5:d5:7e:1e:e2:bd:3d:
         76:d0:36:a9:35:dc:3c:2c:2a:41:b5:1b:ad:89:3c:86:b8:1e:
         06:99:ac:9f:1b:0f:77:fd:fc:c6:37:3c:00:0f:40:a4:0d:19:
         9d:ff:1c:70:f6:70:f2:b1:d7:99:51:67:6d:aa:5a:42:d4:6f:
         01:85:88:66:45:40:12:f4:cd:d6:83:2b:cd:f3:b9:74:2f:67:
         05:e7:a3:c7:25:47:95:71:e7:bb:b5:c1:85:a5:42:6b:53:20:
         c0:78:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:18 2026 by rpki-client