Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/632B0D382CE911F189BCFB9BA3833773.roa
File:                     632B0D382CE911F189BCFB9BA3833773.roa (raw, json)
Hash identifier:          u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=
Subject key identifier:   F7:89:4B:BF:B4:73:0B:D6:31:58:DD:1F:85:93:36:8D:9F:78:4D:20
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       0601
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/632B0D382CE911F189BCFB9BA3833773.roa
Signing time:             Tue 31 Mar 2026 10:07:13 +0000
ROA not before:           Tue 31 Mar 2026 10:07:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     7361
IP address blocks:        103.115.170.0/24 maxlen: 24
                          103.115.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Mar 31 10:07:13 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69cb9cd1-c9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:c1:02:87:69:aa:bf:16:19:b3:a5:cc:29:
                    0e:41:85:40:fb:fd:b5:97:bf:d8:ab:11:a0:f0:23:
                    d3:79:6e:b3:7d:65:ed:c0:39:11:91:84:13:ef:be:
                    f0:a1:19:3d:6f:c6:09:5c:9e:a8:a2:41:14:d7:fc:
                    e2:18:1b:44:a6:7c:13:1b:3f:d0:23:7c:7e:15:4f:
                    14:a8:34:85:fc:07:ea:18:87:21:28:89:1f:b3:97:
                    db:85:a8:ef:f0:5d:eb:3d:89:d3:13:db:85:17:d5:
                    47:9a:3b:af:ff:0a:e4:c1:92:3b:fe:f3:28:79:43:
                    e5:ac:61:68:1a:4b:d7:87:64:92:99:62:b2:b0:0b:
                    1b:4d:2a:30:86:29:31:8d:3c:02:90:be:a0:28:b3:
                    17:4d:38:e3:f7:56:83:04:01:c9:13:ca:8b:eb:0d:
                    84:e1:3b:1c:13:ef:c5:70:44:b1:48:67:c3:87:05:
                    f6:00:ad:b1:31:59:cc:d7:98:08:52:cd:d9:0a:6a:
                    eb:6b:c7:d0:e4:12:2e:15:ec:67:2c:b1:d5:bf:db:
                    e8:4a:b8:7f:b8:a6:7b:b4:12:24:52:ff:31:31:51:
                    a4:1f:1c:a2:2e:76:10:8b:2a:45:ce:9e:2d:12:47:
                    f1:5e:c5:3d:03:55:9e:8e:17:b2:37:35:6f:5d:97:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:89:4B:BF:B4:73:0B:D6:31:58:DD:1F:85:93:36:8D:9F:78:4D:20
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/632B0D382CE911F189BCFB9BA3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:eb:74:c4:43:fb:99:ec:9f:2a:f8:ff:6e:d8:d2:ad:eb:
         78:0e:db:1f:a9:4b:2a:f9:34:2a:f1:44:58:a6:f9:14:2f:2f:
         ab:65:81:8d:69:d9:1b:da:7d:71:38:24:78:ae:5a:c0:29:c1:
         d7:f3:79:4c:e9:f7:4d:6f:2a:03:22:99:39:af:4a:fc:bc:49:
         5c:69:cc:24:5c:22:fa:fb:be:ac:0f:10:47:7b:aa:57:82:ab:
         6a:95:53:ed:6b:e6:28:33:f0:e4:14:5c:1c:91:3f:eb:2d:32:
         66:0e:1d:82:55:b8:1e:df:5e:c9:9a:aa:e5:8e:f2:6f:20:ee:
         b1:e9:c0:84:0a:e5:35:5e:15:66:ec:f3:99:64:25:88:58:b9:
         8f:56:a4:e0:58:b9:12:b3:64:0b:93:12:aa:98:88:30:d5:cd:
         cc:cb:90:7e:91:54:e9:34:54:d1:bb:ae:88:43:31:45:90:1e:
         e5:48:a0:ea:21:eb:9d:b3:6a:b4:71:f5:0b:e3:31:e2:49:74:
         d0:d4:52:4a:8d:d9:10:18:e2:a6:fa:6f:4a:52:ed:46:76:27:
         84:84:bb:c6:ff:a8:ae:27:b4:65:33:ca:6e:68:27:ad:35:1f:
         f8:71:30:7b:c2:17:a2:f4:cd:65:b2:1d:44:ca:71:88:92:ef:
         eb:59:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:49 2026 by rpki-client