Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/383B44025D9611F1B9265F2C96833773.roa
File:                     383B44025D9611F1B9265F2C96833773.roa (raw, json)
Hash identifier:          EO2xxLUvNm7FBpTOWiIAm3NKdCmim8bp+YI/OdPLP8c=
Subject key identifier:   50:FE:04:12:F0:4B:AB:12:73:A6:AD:EF:A8:B5:39:5E:12:01:23:4B
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       051D
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/383B44025D9611F1B9265F2C96833773.roa
Signing time:             Mon 01 Jun 2026 08:45:20 +0000
ROA not before:           Mon 01 Jun 2026 08:45:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154383
IP address blocks:        103.47.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Jun  1 08:45:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a1d469f-ba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:00:54:77:0f:66:79:05:83:ce:d6:7a:36:
                    76:dd:c4:3a:bd:33:60:70:94:04:52:ff:da:dd:51:
                    68:0e:c6:f7:ce:bd:84:4a:69:01:a3:e0:be:5a:33:
                    6a:49:44:3a:60:80:0f:6b:10:49:06:b9:10:67:ea:
                    f9:db:f6:cc:ff:8c:fc:e8:c6:df:32:0c:92:6f:8c:
                    4a:ea:82:8e:8a:7f:fa:e3:f3:a2:5b:2d:5b:f3:cb:
                    97:5a:d6:85:96:5c:c5:58:6a:64:d3:2a:4c:ae:b3:
                    25:36:a6:c5:76:62:20:8a:3a:0c:23:02:5b:6f:90:
                    cd:7f:96:e1:45:34:0c:12:47:85:55:ce:52:82:f3:
                    bb:b2:a0:a3:62:2c:42:a1:02:62:cf:f3:02:fa:6d:
                    7b:12:64:4c:95:25:26:c1:4e:02:cc:3b:9e:c1:5b:
                    6f:25:70:e2:6a:05:25:66:db:06:5c:a4:6d:f6:d3:
                    c0:3e:c8:34:01:8e:38:72:a5:85:41:d6:e6:4c:0a:
                    bd:65:d4:4b:19:24:2e:7c:9c:1e:62:09:4b:e9:ad:
                    56:d0:34:cd:bc:70:42:25:9a:db:2c:cb:f7:ed:31:
                    7a:d3:52:ea:b5:50:37:d5:ad:02:7e:a3:bb:f0:5f:
                    12:09:7b:e4:31:43:1d:61:e3:3d:b8:ae:34:39:51:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:04:12:F0:4B:AB:12:73:A6:AD:EF:A8:B5:39:5E:12:01:23:4B
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/383B44025D9611F1B9265F2C96833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:65:23:6a:a6:c3:af:11:4a:f7:19:36:be:e0:71:27:1d:
         75:96:75:6e:a3:d6:10:29:48:64:1b:94:db:bf:d8:18:2a:de:
         de:e8:b3:aa:ee:e8:1b:f3:06:ff:54:ab:e0:c6:f0:a7:47:73:
         c7:78:40:56:1c:33:2e:be:9c:64:85:8e:0e:f3:bb:b7:90:b8:
         00:06:49:37:7a:52:55:a5:0d:5a:d5:ee:b2:f0:61:e6:e5:d0:
         b0:c0:33:b0:e5:ff:fe:37:61:0e:af:d4:f2:1b:9f:ff:67:07:
         af:cd:cb:ba:2f:da:45:11:49:f5:74:14:84:38:8f:1a:fb:5d:
         50:bd:24:8c:38:6f:4e:2c:74:d6:d2:82:84:3c:06:50:80:3d:
         a6:5d:08:12:ac:09:f7:4a:53:02:c5:20:2b:79:03:95:c3:49:
         0e:dd:82:84:03:d3:4e:61:d1:db:12:19:8a:5d:02:34:dc:99:
         ca:88:4a:33:40:1e:4d:b7:2e:eb:75:66:c0:61:00:b1:c0:2c:
         9e:fb:57:7b:ea:e0:12:10:b7:93:21:d6:2f:6d:20:60:6c:0b:
         73:10:1b:f4:f6:ef:c2:8b:1a:73:e6:d8:82:3b:e3:86:c2:43:
         2c:71:6b:94:1f:38:30:ad:17:b9:36:93:1a:30:09:d0:3c:52:
         ba:b6:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:47 2026 by rpki-client