Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
File:                     BD84664CB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier:          BMqNg3S+vVRbcjj4gtej8V0T5DqfpOPrq+PFV3hoy/s=
Subject key identifier:   55:CE:6A:64:E4:3B:B6:5F:D8:A3:52:22:29:FE:66:F9:3B:26:15:28
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       2877
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:15:30 +0000
ROA not before:           Mon 20 Jul 2026 16:15:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58430
IP address blocks:        103.11.12.0/24 maxlen: 24
                          2405:6d00:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10359 (0x2877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Jul 20 16:15:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e49a2-0aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:c1:ea:4a:be:6c:ff:65:6a:6e:84:62:f0:
                    2e:52:de:28:c8:c0:e1:db:8e:8e:c3:c6:61:f4:a2:
                    34:c3:03:47:b6:75:6a:97:b4:d6:33:14:50:fc:90:
                    ca:92:f2:46:35:fd:07:17:ef:f9:a3:46:9b:c1:14:
                    4b:4a:5b:01:db:8e:a5:f0:d0:88:de:30:a1:16:04:
                    78:79:62:85:72:0e:7f:09:62:00:44:97:1f:04:02:
                    c2:73:3e:fc:4a:04:6a:4e:32:85:9c:b8:96:50:7f:
                    36:3b:80:62:1c:ba:90:fc:37:5d:eb:ad:6b:73:e0:
                    5b:57:ae:f2:d9:87:50:92:c8:37:ee:3a:b5:44:4d:
                    4c:ef:81:d0:33:85:8d:eb:6e:61:33:bf:b8:14:e3:
                    d7:61:80:61:43:4a:27:c6:89:6b:70:92:f3:76:63:
                    b3:1a:ca:ca:11:2a:2b:60:e2:09:33:b3:17:f5:69:
                    bc:8c:29:f1:af:ab:d5:a2:06:51:83:40:25:2c:0d:
                    33:df:b0:a7:09:73:46:82:9b:fe:32:b5:8b:bc:87:
                    40:9b:08:02:45:0d:8e:56:56:6e:43:80:81:c5:f4:
                    f0:c4:5e:11:7d:5d:c0:2d:99:b5:2a:1c:2a:dd:09:
                    ad:78:2d:1d:7e:68:16:e1:b7:54:a3:e7:d6:b3:58:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:6A:64:E4:3B:B6:5F:D8:A3:52:22:29:FE:66:F9:3B:26:15:28
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.12.0/24
                IPv6:
                  2405:6d00:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:1d:08:99:fe:f6:af:af:80:4b:65:46:5e:63:ea:a6:d3:
         a3:28:52:1f:bc:f8:0c:7a:21:36:08:e9:dc:b3:f8:d1:78:79:
         5b:b9:d6:02:a2:61:0f:2e:33:35:87:d5:2e:58:6a:af:63:b9:
         74:a4:34:37:ab:a8:a6:d6:dd:65:24:5d:5a:a2:f8:23:c9:e0:
         b7:fb:e2:49:22:98:c2:c3:43:2a:ac:f5:bc:c4:ce:63:5e:bc:
         75:c3:c4:b0:d0:77:40:b0:ec:ee:71:6c:dc:81:5a:9e:74:5a:
         14:75:97:da:ae:38:a9:73:ab:08:ca:58:55:a0:c3:84:ea:12:
         84:97:5a:a3:0b:d2:00:38:60:78:0a:51:8f:58:0f:0a:01:4e:
         54:ab:d9:8e:a7:94:23:c2:b5:ff:dd:c1:9e:9f:ec:cc:d9:eb:
         8d:5d:c0:41:61:16:37:7f:56:2c:2a:79:62:02:c4:ab:c3:a0:
         e5:96:61:b6:cc:c0:87:e1:8f:81:16:3a:c4:fb:10:7e:e8:31:
         34:73:03:d9:ad:fb:a5:c8:70:47:de:ab:f5:d0:84:97:a9:9b:
         ce:f0:80:78:4b:e1:81:37:c7:1e:79:8a:5c:3d:4d:4a:13:a6:
         cb:60:8b:47:2f:e1:c7:60:d2:35:96:59:9c:9e:58:80:f8:d0:
         e7:4b:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:50 2026 by rpki-client