Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
File:                     234D0D6C500611F08771CE55C4F9AE02.roa (raw, json)
Hash identifier:          tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=
Subject key identifier:   56:73:2A:5D:C2:86:8F:9A:37:5D:3E:EA:90:9F:E4:63:40:ED:06:37
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D34
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 19:23:54 +0000
ROA not before:           Mon 02 Mar 2026 19:23:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9311
IP address blocks:        103.15.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380 (0xd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Mar  2 19:23:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5e3ca-a15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:56:14:31:90:1c:f1:63:1e:d7:6e:d8:e9:
                    f3:ed:4f:a1:8c:8f:74:3c:2d:3f:8e:43:05:b0:9d:
                    4b:78:4b:3d:de:21:cc:c6:73:27:37:af:3c:4a:44:
                    e8:28:e0:30:17:7a:d9:d2:8d:4c:69:e8:d7:79:dd:
                    d6:2f:7c:55:71:a6:d6:86:37:61:10:05:12:18:fe:
                    23:aa:f8:07:5b:27:b5:9f:af:92:de:da:21:71:2c:
                    01:f7:e5:d1:be:a2:84:04:21:71:e7:da:97:a9:3b:
                    6c:16:7b:0b:5d:fa:d6:e1:65:d9:7c:57:ec:90:68:
                    ec:29:06:a9:22:94:72:52:c2:a2:d2:5c:8e:35:91:
                    ca:f3:ac:08:61:ba:2a:86:26:81:02:5f:24:56:21:
                    a1:d5:3b:bd:3e:4f:d2:eb:5f:3b:d0:04:5e:a7:74:
                    79:45:00:87:60:e9:84:60:7a:6b:34:59:3b:44:c1:
                    45:c1:4f:9f:d0:7f:c7:b1:50:83:13:0c:9f:f0:80:
                    9a:3e:ff:39:60:5e:74:17:3e:15:33:74:41:8f:28:
                    07:3d:42:26:1c:c5:c7:10:c2:d5:b4:73:8e:60:d7:
                    db:b0:15:08:a3:73:ed:1f:1a:1f:8a:78:e2:81:1b:
                    da:8d:71:91:1e:e6:21:af:42:35:d3:d4:47:91:e6:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:2A:5D:C2:86:8F:9A:37:5D:3E:EA:90:9F:E4:63:40:ED:06:37
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:39:7e:44:5c:43:b5:c8:ad:b9:ca:3d:3b:71:4d:a5:88:
         64:1e:bb:9e:7c:7c:60:99:1e:94:da:69:04:37:ba:35:cd:a1:
         2c:e6:bf:a5:23:ec:6d:a8:29:f5:d0:1a:df:92:dd:a1:85:76:
         fb:56:50:87:82:bf:ea:50:2e:cf:91:05:78:41:13:e7:bc:c3:
         f8:61:7c:9c:95:60:25:b2:37:82:ec:41:ef:37:30:73:54:90:
         25:3d:95:46:03:15:4f:c0:e0:c3:5b:3c:c6:a5:36:85:d3:b3:
         c9:7b:11:13:d3:c2:6a:a8:4d:99:ff:45:7b:ae:57:81:dc:9c:
         e5:0b:a8:7a:56:32:30:cf:e8:b0:77:32:93:6f:cb:c4:4e:8d:
         b8:94:29:93:a9:f7:b5:17:89:1a:95:24:13:39:c6:95:77:60:
         c9:fc:ff:97:14:10:3f:3f:6b:53:ad:e2:14:42:17:6a:88:8a:
         e4:9e:d2:01:36:83:5b:c6:23:aa:fc:41:28:60:be:e8:b2:c5:
         97:48:e8:a3:db:09:4c:72:46:f4:34:14:71:5d:93:63:45:14:
         0f:49:74:07:62:f2:e2:49:0f:b8:17:31:31:ea:f6:43:54:cb:
         4e:04:1c:66:2f:84:9a:2d:7e:9c:0c:61:de:82:7d:45:00:3a:
         d1:9c:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:30:31 2026 by rpki-client