Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa
File:                     D3EAA0323F5A11F1AA7533B3A4833773.roa (raw, json)
Hash identifier:          OAnsfIL7LYJfkjA3H2budmiw9oleIIiWJ+Q1lysZcqQ=
Subject key identifier:   6B:E9:FF:EC:A2:30:6E:EF:D0:CA:23:F1:4D:AD:44:EB:58:D3:C2:8B
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       0A3A
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa
Signing time:             Tue 04 Aug 2026 20:39:40 +0000
ROA not before:           Tue 04 Aug 2026 20:39:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     22160
IP address blocks:        103.151.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618 (0xa3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Aug  4 20:39:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a724e0c-0d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:d2:7d:95:86:48:ea:1d:5b:16:cd:be:8d:
                    e4:14:b0:eb:7d:ed:68:29:96:5f:e1:eb:59:90:cd:
                    f3:07:9e:6b:36:9a:0d:f5:03:54:4d:b1:30:15:1b:
                    05:4f:bd:a9:06:99:15:ab:72:ac:af:c6:77:0f:64:
                    8b:00:32:98:8a:fe:d5:b6:7e:d2:ad:d4:0b:4a:44:
                    0c:2a:40:3e:9e:eb:0f:e2:dc:e7:e1:0d:fb:b8:45:
                    28:62:80:04:75:dd:3f:4a:69:7f:78:14:a9:3e:4d:
                    be:66:b0:1b:a5:0f:dd:08:91:8f:cf:9a:6b:a5:c5:
                    69:4b:11:07:cb:ee:57:bf:42:cd:79:10:ec:95:43:
                    a6:3e:66:f1:47:65:19:ae:ed:8a:36:e3:b7:63:b3:
                    94:7c:fd:e1:c9:20:28:45:30:38:2e:8c:b4:d5:75:
                    ec:c7:32:48:de:7d:81:89:16:32:e6:fa:9c:cf:f9:
                    3e:e4:5e:88:d2:50:71:06:59:05:0d:6e:cc:8c:24:
                    ec:c6:7d:55:cb:a4:50:10:46:ae:75:ff:24:6c:19:
                    a7:5c:ae:b6:7a:78:fd:a3:ec:ea:b0:52:14:51:b1:
                    8f:f6:e0:2a:c3:c5:23:53:c5:be:37:ac:a6:80:a0:
                    f0:63:47:92:20:6e:53:b8:d7:4b:17:99:be:21:e6:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E9:FF:EC:A2:30:6E:EF:D0:CA:23:F1:4D:AD:44:EB:58:D3:C2:8B
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:98:94:ab:98:a4:e1:99:58:9c:fe:82:1c:40:d1:b9:4f:03:
         e8:da:a0:65:33:6c:b5:cd:32:92:f1:2c:67:2c:24:a1:37:f2:
         fa:34:ff:6a:4a:1a:b8:a0:5b:9c:1e:9b:57:78:6a:80:a0:b0:
         01:f3:a9:5e:c0:8b:26:ce:24:e6:e4:ec:b3:ca:f8:41:71:e1:
         e2:0b:b1:43:0f:25:ce:88:5b:3e:a3:86:e7:44:43:3c:a8:af:
         fe:96:ef:99:10:71:ae:fd:55:54:86:f1:06:18:62:de:01:96:
         2e:0c:42:9b:b9:6d:71:6e:09:72:36:d3:79:08:4a:86:b3:a7:
         53:9a:3b:b2:f1:33:42:51:c6:97:8c:36:f5:18:4a:21:67:ac:
         ef:29:c9:b1:42:0c:ac:42:8d:14:9e:48:2f:56:7c:19:a2:b2:
         9d:2e:63:a2:37:90:98:f0:99:63:2e:02:30:d2:76:5a:79:f0:
         a6:42:40:9b:1e:cb:ba:45:1e:52:03:94:99:cd:75:23:c3:0f:
         90:8d:bd:5b:23:57:4b:05:8d:b9:58:15:75:89:ed:67:66:1a:
         3d:82:a6:c8:64:f6:69:f2:28:a2:22:42:73:1e:46:38:89:9b:
         75:b0:f4:39:fb:de:0f:45:da:b2:c0:44:41:4e:33:3d:f8:35:
         83:f3:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:09:47 2026 by rpki-client