Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/B7B28B24B29611F091864D65C4F9AE02.roa
File:                     B7B28B24B29611F091864D65C4F9AE02.roa (raw, json)
Hash identifier:          1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=
Subject key identifier:   EF:7A:DB:1D:7C:99:E1:BF:3E:B2:02:D5:22:B0:3B:75:D8:C7:BC:C5
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       01BB
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/B7B28B24B29611F091864D65C4F9AE02.roa
Signing time:             Fri 29 May 2026 04:36:19 +0000
ROA not before:           Fri 29 May 2026 04:36:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154024
IP address blocks:        103.15.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: May 29 04:36:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1917c3-ce93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:32:a8:41:9c:86:f7:8c:d4:00:17:d5:4f:
                    cb:f2:57:93:ac:ad:1c:30:47:b1:e8:d4:ea:74:de:
                    f7:57:00:41:f3:ea:8a:6b:02:0f:65:d4:4c:c7:1a:
                    8f:59:b9:67:22:df:5f:d1:4c:5b:65:45:9b:04:95:
                    40:ef:dc:30:65:aa:71:11:20:10:90:1d:14:d1:22:
                    e4:51:50:5e:0f:62:95:70:c6:33:40:ac:ce:63:0e:
                    e6:a5:74:48:ff:22:76:ff:0c:39:55:63:ec:3c:83:
                    6d:d3:80:57:57:5f:6b:a3:fc:d5:e4:e7:31:44:45:
                    a9:0b:14:22:94:b0:ea:66:be:50:ab:5d:2d:f9:79:
                    07:4b:ec:c9:7f:8a:4b:2d:18:8d:f9:fa:70:18:91:
                    b7:4d:5c:61:12:7a:62:e7:ca:db:e7:7f:01:07:c9:
                    ae:fe:00:01:f5:6e:34:35:2b:84:92:2c:8c:74:0b:
                    53:d1:49:31:b4:8a:26:55:8f:51:ae:60:d0:31:94:
                    5f:b5:14:66:dc:4e:c6:7b:3f:8a:8d:7f:b2:74:7a:
                    de:bc:9a:cd:ca:ec:1d:23:1e:5b:cc:6d:de:1c:1a:
                    a7:fc:e5:8b:7a:64:60:9a:c3:f0:ee:f8:e3:89:b8:
                    53:ba:70:ca:cc:2d:ad:0d:e7:95:e5:a5:05:81:23:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:DB:1D:7C:99:E1:BF:3E:B2:02:D5:22:B0:3B:75:D8:C7:BC:C5
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/B7B28B24B29611F091864D65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:fd:69:7b:ca:8b:81:04:6e:4c:6b:0b:f2:87:8d:84:82:
         7d:53:cd:59:00:01:aa:f5:82:4b:a9:a4:98:13:06:8d:8b:82:
         71:f9:12:bb:65:a5:d6:14:83:78:29:67:6e:a1:19:4b:cb:54:
         16:76:07:c3:21:73:50:c8:2e:74:59:d4:d5:ca:e9:76:78:f4:
         23:a9:73:5c:5d:b2:bf:1d:4d:66:df:0c:93:32:d6:8f:2e:0b:
         95:f6:62:c5:8a:b9:88:3a:0a:0f:43:ca:ba:b1:25:33:d3:74:
         b6:d0:49:7b:6a:c0:1f:e3:25:9e:25:ee:ca:a9:89:e5:43:96:
         fa:76:c3:d1:c2:cc:ee:ba:12:f9:b6:de:8f:de:a7:f6:89:bc:
         54:86:bc:c4:12:d3:19:b7:fa:31:1e:f8:00:31:cf:ac:e3:c2:
         38:a5:41:a9:ea:0d:de:52:9b:0e:4e:6e:93:9e:77:73:ab:64:
         1d:ee:2a:d7:63:3e:36:fa:50:e3:4b:aa:12:44:b9:ac:e0:db:
         33:38:48:aa:d0:1b:37:c7:79:0b:e8:2f:23:8c:42:b4:71:5d:
         b8:08:ee:61:02:25:8e:cb:d7:9f:7a:83:de:44:e6:43:58:9a:
         95:fe:9c:f4:70:b2:28:42:bb:2f:5a:c4:7a:14:c1:bf:f0:4e:
         2c:8b:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:28 2026 by rpki-client