Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa
File:                     E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (raw, json)
Hash identifier:          1zV+/1R8NXTU00HPSWjbCXmTRWs8S22JUS1CXgvAzR4=
Subject key identifier:   8D:6C:DE:99:69:D7:05:04:1F:8A:C0:36:C8:C3:92:14:1C:49:B1:97
Certificate issuer:       /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial:       0184
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa
Signing time:             Sun 05 Apr 2026 04:38:21 +0000
ROA not before:           Sun 05 Apr 2026 04:38:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147023
IP address blocks:        103.164.182.0/23 maxlen: 23
                          103.164.182.0/24 maxlen: 24
                          103.164.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
        Validity
            Not Before: Apr  5 04:38:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d1e73d-5625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:46:aa:f9:30:ad:ab:98:58:b7:b9:f3:2e:
                    32:59:9d:49:37:e6:32:6a:8e:d2:ec:2c:1b:0d:a5:
                    2b:8f:dd:b8:29:a2:78:f7:77:66:1d:e0:70:e3:ca:
                    e3:8f:1b:d9:50:80:3c:0a:5a:5b:1f:63:98:34:4a:
                    f0:ef:0f:26:d9:e3:9c:b5:d9:23:bd:fe:4a:00:6d:
                    6f:1e:1c:34:c1:23:31:26:ee:a4:a3:96:4f:cb:98:
                    a7:f9:7d:dc:b9:06:11:ef:17:9b:b8:ed:84:7e:2e:
                    f6:22:65:7c:8d:3b:24:5e:e8:7f:5d:f7:e6:71:11:
                    66:be:c4:26:dc:62:5c:1b:17:95:12:25:69:75:27:
                    b2:ae:69:cc:6e:72:8d:c7:98:55:67:d3:4e:36:a8:
                    61:3a:b6:68:f1:b7:48:6f:a0:62:90:bd:64:56:72:
                    2d:75:80:a9:95:64:c7:ab:e4:9e:fb:97:80:54:6a:
                    02:ec:5b:97:de:3f:ff:73:bb:4f:f9:79:2c:c3:a8:
                    c8:55:2d:ac:23:86:09:c4:a9:9d:9d:6e:c8:4b:86:
                    d9:7a:a1:a4:58:da:b6:7e:df:7b:be:0a:18:62:40:
                    c5:b5:0c:f9:24:77:aa:00:ed:46:b0:d2:35:b6:20:
                    dc:fe:0d:cd:c2:73:61:3a:1c:91:8d:33:85:3b:63:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:DE:99:69:D7:05:04:1F:8A:C0:36:C8:C3:92:14:1C:49:B1:97
            X509v3 Authority Key Identifier:
                keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:6d:74:f0:9b:db:9a:35:fd:96:84:51:c3:6c:10:a7:7a:8a:
         b2:ed:b6:9b:cf:08:29:e2:74:6e:9f:81:03:9a:bd:c3:47:da:
         34:f5:b0:09:74:f3:3b:e3:e0:d6:57:44:86:f0:51:d6:52:4c:
         45:93:dc:f6:22:ef:6a:6d:fc:80:ef:2d:2c:41:56:83:c5:2e:
         26:24:08:8a:8d:86:2f:34:39:c7:e1:ec:0a:6e:57:85:d8:50:
         d3:83:44:93:80:18:13:53:38:62:96:d6:d1:f4:5a:eb:bd:c1:
         ca:54:a5:86:1b:b1:49:6b:e8:b6:cc:b9:52:77:a7:d2:57:13:
         4a:98:71:d3:71:0d:08:56:81:f4:6e:e0:3c:34:d7:1a:33:f1:
         9b:7d:b3:d9:75:32:dd:db:98:35:4e:16:0e:39:f4:e0:6e:f3:
         c6:83:6f:63:95:60:0b:47:a7:5a:1e:ec:dd:62:a9:ea:a2:88:
         ab:39:a3:52:d0:d6:8b:3c:e9:04:f8:2c:25:14:47:dd:ad:b6:
         aa:30:ca:0c:65:5a:9d:22:30:50:0b:bd:41:73:1f:05:66:84:
         6a:2e:af:22:a1:ff:ef:aa:ce:de:6b:25:56:15:12:d7:99:e7:
         82:00:42:6a:14:25:64:5a:63:ab:03:89:fe:d2:bc:2b:fe:11:
         83:43:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:15 2026 by rpki-client