Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
File:                     BC56EB8EA21811ED94424B59C4F9AE02.roa (raw, json)
Hash identifier:          gO+hBMH3/s/oXTICu0ZTmfv/sTcPVxE7XLPk8Q7xNVY=
Subject key identifier:   F8:AF:A7:47:13:3A:A0:1B:B9:37:9D:9B:87:69:E0:9F:CC:29:08:CA
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       06F6
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
Signing time:             Wed 22 Apr 2026 22:28:07 +0000
ROA not before:           Wed 22 Apr 2026 22:28:07 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150744
IP address blocks:        103.162.228.0/24 maxlen: 24
                          103.162.229.0/24 maxlen: 24
                          2001:df6:180:ca::/64 maxlen: 64
                          2001:df6:180:cb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Apr 22 22:28:07 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e94b77-fd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:c8:bd:39:0e:58:2d:73:5a:4b:6b:8f:f6:
                    5a:16:bd:dd:2c:9d:75:59:7d:66:1e:5e:5c:86:85:
                    80:57:7e:73:4e:ed:a1:56:21:c3:24:0f:68:7f:d0:
                    32:14:ad:9c:14:b8:2b:54:55:78:ec:6f:57:a6:b9:
                    0d:4b:b1:75:d4:7f:7e:51:1c:07:a4:78:a9:9d:60:
                    e7:f9:e6:e2:57:72:22:59:e7:88:aa:9b:52:bd:1f:
                    2c:df:da:67:e6:48:2f:30:0e:1e:4b:dd:ff:58:ca:
                    31:73:6d:44:dc:5e:32:c0:8e:19:31:f0:5c:b7:39:
                    82:64:52:5c:98:f2:09:fe:10:3a:d2:df:c9:e7:95:
                    55:82:2c:61:1e:c0:ef:d1:cc:77:90:5b:4e:f9:bc:
                    e6:c6:00:cc:db:97:37:30:45:47:4a:47:0c:58:f1:
                    b7:2f:9b:97:cd:1f:66:2c:95:ee:72:30:91:73:df:
                    75:f9:b2:81:a5:aa:37:47:b3:2c:0d:1f:8a:50:40:
                    fa:53:f4:e4:46:bf:2d:c8:9c:e8:99:ea:61:f7:8c:
                    86:54:2e:bb:bd:df:9d:a2:72:b8:1b:27:c4:39:5c:
                    55:9b:d9:6a:80:a2:ea:7f:3f:f6:cf:e9:ee:31:ed:
                    4c:f6:39:42:e9:84:70:90:ad:a0:78:db:73:23:87:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AF:A7:47:13:3A:A0:1B:B9:37:9D:9B:87:69:E0:9F:CC:29:08:CA
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.228.0/23
                IPv6:
                  2001:df6:180:ca::/63

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:30:28:43:31:d3:20:45:4e:94:39:66:62:d8:c8:e0:b9:
         a2:89:30:da:ea:21:d9:42:f9:08:f2:e9:39:43:7a:05:fe:12:
         93:48:2c:01:bd:e0:96:61:06:c7:ed:31:2b:3d:0b:0b:b4:f2:
         94:41:fa:34:35:d9:3d:04:9f:23:d3:40:a6:d8:7c:59:99:e7:
         85:0e:a2:6e:4a:44:94:6f:dc:bd:f2:4d:87:75:cc:0b:b9:48:
         03:f9:a9:18:fb:01:ef:41:fa:b8:b3:7c:71:8c:63:27:f9:f6:
         c9:bb:16:58:66:09:67:92:27:f3:8c:10:f5:e1:c6:ca:29:7a:
         12:7e:de:49:5e:c6:28:22:fb:70:e3:3c:e1:56:6a:43:ce:60:
         f8:7e:e2:dc:32:2b:7b:49:75:0c:a4:22:80:23:bb:22:fb:b6:
         17:af:3b:68:aa:fb:50:af:ee:a0:92:2c:34:c3:e3:5d:cf:9f:
         10:0e:91:01:a3:b1:0f:fb:11:39:9b:25:da:35:8c:c3:43:6c:
         43:76:67:0a:7c:4f:ea:52:17:6d:76:73:f0:6e:c2:69:26:c8:
         ab:fa:ce:fe:28:4b:5f:68:dc:a8:8f:b6:59:dc:e3:bc:84:bd:
         02:11:99:90:48:14:18:34:c6:75:20:f6:88:f4:a5:41:2a:aa:
         4f:96:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:21 2026 by rpki-client