Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
File:                     A3FCB4646AF811F084208830C4F9AE02.roa (raw, json)
Hash identifier:          v4UzkwS3GinuS6mpBfzfJIYJX2eecqIClPiiq+tkgx4=
Subject key identifier:   BF:45:E1:0D:29:4A:A9:50:D2:0A:3F:CC:AE:4D:75:66:3C:F8:48:89
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       071C
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 22:26:57 +0000
ROA not before:           Thu 18 Jun 2026 22:26:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49304
IP address blocks:        202.8.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Jun 18 22:26:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3470b1-7474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:8c:6b:ba:0e:ff:6f:b9:d3:d8:3c:57:3d:
                    e2:3e:35:a2:73:14:ac:32:01:4f:6d:3f:cd:39:12:
                    1f:61:43:35:6d:c1:7f:8f:db:9c:e4:17:ac:57:33:
                    64:89:57:b5:03:27:6e:fb:70:08:79:9c:89:b4:d0:
                    62:ea:75:80:0e:40:53:18:9c:9d:8f:42:61:4a:d8:
                    82:91:76:dc:19:3f:01:17:da:f9:cd:86:fb:48:08:
                    d2:01:f2:61:8e:fe:86:a5:03:cc:26:54:c6:71:71:
                    56:4b:36:f1:3f:c8:90:43:d7:d6:9c:e5:a3:a4:08:
                    f6:c7:45:7d:e2:af:a9:af:db:45:5b:73:22:f5:08:
                    f1:ef:fe:2c:e3:e6:bd:54:3f:46:9c:7f:eb:1a:db:
                    a5:07:f1:cb:97:7f:0b:94:68:b8:fa:11:c4:aa:99:
                    a4:e7:3a:9e:b2:0b:1b:c4:f2:96:4a:b6:cd:12:19:
                    11:e2:48:32:3f:58:a7:fe:ca:a0:9e:3c:d4:45:b6:
                    d2:f4:db:20:c6:f9:2a:bc:fd:03:e6:8c:c5:5c:43:
                    28:f8:c2:dc:47:d7:9d:4e:80:e0:eb:7e:c3:43:b4:
                    fd:a0:1c:44:1e:ed:f7:6a:1d:43:17:8c:2f:f2:4c:
                    ff:ec:4f:bd:b9:9a:ee:e1:c5:49:93:92:58:3f:e2:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:45:E1:0D:29:4A:A9:50:D2:0A:3F:CC:AE:4D:75:66:3C:F8:48:89
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:7c:03:eb:3f:1f:18:34:02:05:6f:10:11:37:5e:c5:d6:b6:
         d2:b9:41:10:46:15:72:11:15:eb:bc:dc:86:f5:26:cc:00:6c:
         d2:52:33:09:c3:21:61:ca:90:74:1f:16:f9:40:61:3e:19:78:
         88:3b:20:59:a8:05:69:71:e6:82:2a:14:80:4d:8a:dd:15:23:
         a1:aa:ad:46:ca:68:c2:11:ab:42:05:0d:a9:b6:67:5a:aa:19:
         9a:e9:ab:6b:cb:fc:92:62:e2:49:31:e8:d4:2e:d3:47:44:dd:
         f7:4e:1c:01:64:40:bd:b3:73:8e:e8:31:87:c5:21:73:e4:c3:
         dd:10:37:50:2d:8a:91:01:0a:8c:72:84:5a:38:b7:22:99:64:
         11:87:a1:c7:80:13:4e:74:ab:fb:be:1f:bf:c0:50:da:8c:ec:
         70:b4:5b:d9:62:28:45:fb:dc:6c:2d:97:6f:e0:2a:61:59:c3:
         40:c2:ed:ac:80:48:6c:ce:dd:ce:f0:f6:59:ea:a9:e9:92:10:
         00:42:26:c7:d2:9e:f4:8f:cc:58:c9:7a:92:85:05:67:52:a9:
         81:ed:9c:51:ce:ff:cb:c2:4f:06:7c:57:1d:df:00:15:d0:02:
         5e:01:71:49:33:ff:60:80:54:c4:47:e6:6d:81:ad:36:67:cd:
         28:7b:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:17 2026 by rpki-client