Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/227DB30E2D9C11F1B8A5CB409F833773.roa
File:                     227DB30E2D9C11F1B8A5CB409F833773.roa (raw, json)
Hash identifier:          9lh5oEHID0p9hCjRSVVAPRXjGkXOVPGQ6VGE8JjLZL0=
Subject key identifier:   19:28:56:13:26:0E:A4:A2:12:D7:1C:DF:F6:8C:30:77:A3:FB:A6:A8
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0CFC
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/227DB30E2D9C11F1B8A5CB409F833773.roa
Signing time:             Wed 01 Apr 2026 07:26:44 +0000
ROA not before:           Wed 01 Apr 2026 07:26:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134106
IP address blocks:        103.115.82.0/23 maxlen: 23
                          103.115.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3324 (0xcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Apr  1 07:26:44 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ccc8b4-ca1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:8e:cb:fa:35:20:6a:10:e3:70:ee:60:7d:
                    f3:5e:8f:d6:d2:c1:d5:2e:a1:98:6a:a9:4c:43:36:
                    e0:a1:e9:35:eb:68:15:f3:1f:7a:e1:53:55:3e:27:
                    34:09:74:a3:99:e7:86:42:0f:fa:d3:a4:d3:9e:64:
                    b7:f1:ff:9b:24:8e:4c:c8:99:e2:fb:c5:5b:85:61:
                    b0:20:47:b2:b9:95:d0:02:44:0b:d9:59:06:51:39:
                    d2:a7:97:63:f9:2e:59:87:a7:12:78:da:7d:d6:84:
                    8b:85:7f:c0:1f:ae:31:9e:36:05:a2:fd:23:0f:e1:
                    f7:df:b3:2b:d5:e9:fa:9b:24:5d:e3:69:16:01:b0:
                    4a:cd:0e:a5:d9:be:04:79:9f:8f:e9:d9:83:f7:8f:
                    a3:6c:1e:35:56:9b:f9:df:93:81:c4:f0:90:e6:a9:
                    96:e1:6f:12:41:26:e6:55:0e:ca:2f:91:fa:83:10:
                    ad:55:4c:c3:30:90:bb:9d:7f:39:e9:8b:32:38:0e:
                    ba:93:0e:b7:28:6c:85:d7:2d:d8:e9:11:95:de:61:
                    06:bc:f1:0c:2b:0d:22:61:b0:b8:7d:6b:74:b9:45:
                    5e:95:23:1b:0f:17:75:7e:8a:5b:b4:58:a8:a6:cc:
                    15:7d:79:4f:3b:51:6d:96:69:f6:26:d9:d5:56:3c:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:56:13:26:0E:A4:A2:12:D7:1C:DF:F6:8C:30:77:A3:FB:A6:A8
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/227DB30E2D9C11F1B8A5CB409F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:0a:c8:87:75:72:46:6c:9a:16:ad:b6:13:45:28:92:1b:
         ff:8f:7a:dd:8b:47:e0:2f:be:93:7b:34:f3:b5:16:c2:07:25:
         e9:81:75:bb:97:ac:25:b3:16:8f:8b:e7:c1:04:a5:60:04:b4:
         f3:f6:01:11:90:00:3d:d1:24:53:ad:46:31:8c:3c:65:ac:c3:
         b4:09:87:c7:8f:42:eb:5c:50:78:74:02:c7:86:60:fa:af:e9:
         af:c2:03:6f:84:0a:e5:e8:6c:d5:d2:ba:89:e5:c5:13:84:85:
         36:90:90:e5:14:98:00:c1:d0:20:ed:c0:ec:10:d2:91:fd:68:
         f6:5b:98:04:8c:98:bc:b4:1c:7a:ad:e9:17:c3:b8:a9:b9:15:
         02:da:d1:91:cf:ba:6f:f9:6f:15:e2:cd:8b:15:0e:4d:13:5a:
         39:d2:a5:dc:2a:e0:ee:b9:22:c9:c3:2d:c0:ca:77:55:a4:dc:
         a8:e5:80:0d:93:81:57:72:7f:5c:e7:b9:ac:3f:43:8c:e6:c6:
         3a:31:e1:23:03:b8:19:0a:bc:f4:4c:cd:c7:13:4c:52:df:d9:
         ef:a4:e4:5a:e6:42:5a:21:cb:66:ac:ac:15:03:fe:ae:29:92:
         aa:f0:83:65:96:98:d8:d1:4b:86:ea:4c:06:4f:d5:b9:7c:c6:
         1b:40:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:04:55 2026 by rpki-client