Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
File:                     C47523F0509D11EFA81FC32AC4F9AE02.roa (raw, json)
Hash identifier:          BX1/cO9zvX79RzHkPoO/Bv1wfcEjsD1PNAuyBci9gOg=
Subject key identifier:   79:7F:49:C6:6C:30:7D:CF:6B:58:73:82:5B:02:EB:68:D1:60:A2:BC
Certificate issuer:       /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial:       0149
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 02:35:02 +0000
ROA not before:           Fri 03 Apr 2026 02:35:02 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     150734
IP address blocks:        103.151.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
        Validity
            Not Before: Apr  3 02:35:02 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf2756-985e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:a9:42:22:1a:27:c2:b3:ab:0f:a7:0f:f2:
                    e1:27:19:eb:05:33:42:65:f5:e2:e7:bb:95:74:f8:
                    5a:6e:7c:a4:01:7f:cd:6c:fd:59:e1:d4:81:f0:99:
                    18:50:4a:09:7a:90:5e:8a:55:38:9e:98:22:e6:b9:
                    ad:7b:e4:f6:af:ea:85:b9:80:1e:88:d6:30:85:7a:
                    f0:4e:12:40:78:4b:cc:79:b6:d8:91:a8:4c:ab:66:
                    be:40:cc:d5:6b:eb:25:07:6f:fb:a5:cc:5a:8c:be:
                    84:c3:74:3a:9f:40:44:60:e2:e5:38:09:28:01:d8:
                    2f:89:fa:c0:bd:3e:eb:3d:a8:d5:82:31:dd:3d:30:
                    f0:5d:19:6d:db:aa:72:7f:64:d5:ca:9a:94:df:e7:
                    f2:3e:5a:78:c1:0c:94:90:21:24:d3:83:49:b5:31:
                    95:d6:0d:8e:76:76:b3:d0:ca:67:f2:6d:fb:9d:05:
                    c5:89:82:5b:f5:b4:99:aa:e9:cf:36:e5:ff:7b:71:
                    de:da:e2:eb:3b:33:b1:01:b3:55:57:09:1e:b8:f4:
                    07:e9:12:55:71:60:6c:00:e8:50:fc:00:00:21:37:
                    79:a6:ed:1e:8b:45:77:25:4a:3b:03:10:2f:6e:fd:
                    8e:e4:01:2b:54:cd:03:a6:d0:b9:ea:61:58:81:dc:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:49:C6:6C:30:7D:CF:6B:58:73:82:5B:02:EB:68:D1:60:A2:BC
            X509v3 Authority Key Identifier:
                keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:fe:62:4e:51:71:a2:73:c3:af:db:c5:81:a0:b7:aa:a5:
         14:7b:a0:4e:a8:b1:03:b4:5e:5a:28:d7:a4:1b:61:af:26:94:
         99:af:4f:77:6c:39:01:f9:32:ba:53:f9:cb:d7:5e:8c:5c:8c:
         af:cd:ba:9b:44:9e:57:55:85:f2:bb:a4:0d:f5:26:68:35:1a:
         7c:05:f1:99:f8:83:65:d7:ef:4e:53:54:5e:8e:aa:60:78:45:
         78:5d:b2:4b:65:d2:91:9e:38:b9:ff:c6:43:7d:0e:f2:0a:ab:
         79:f1:3e:5a:76:d1:e4:93:b1:21:f9:1e:b5:16:8a:8d:b4:f0:
         67:07:50:84:96:71:3c:bf:45:86:0d:a7:89:6c:fb:62:7f:cd:
         84:ab:8a:5e:0d:49:a5:60:ab:0b:50:ad:78:c1:11:49:c8:e6:
         48:49:83:5d:16:74:5d:f5:87:0f:6f:bb:ab:e1:55:25:00:2c:
         fb:22:ea:a2:e4:b8:e3:2e:f2:28:72:20:10:ca:dd:26:af:4e:
         34:39:7a:e2:3b:52:b2:93:12:68:77:4c:a3:dc:c6:8d:0b:22:
         9f:97:a9:22:12:96:a5:32:27:05:61:11:43:1c:1d:35:94:84:
         90:90:ca:0b:80:a2:ae:cb:68:b4:54:a2:21:e0:21:2a:0f:4c:
         d1:45:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:30:55 2026 by rpki-client