Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
File:                     84F58DCA7DCB11EC99806E25C4F9AE02.roa (raw, json)
Hash identifier:          6aYxnZQGeBX5JB7pDsGuzBsa8wjIUwmj47GolPt8kbA=
Subject key identifier:   1E:42:03:A9:09:E7:D0:63:85:3B:5E:8C:B5:1E:47:B1:13:86:30:2A
Certificate issuer:       /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial:       04A0
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:30:26 +0000
ROA not before:           Fri 03 Apr 2026 00:30:26 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     131284
IP address blocks:        103.133.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
                          rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
        Validity
            Not Before: Apr  3 00:30:26 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0a22-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:7a:e7:e1:8e:27:1f:24:c0:e3:31:40:03:
                    df:99:ed:a9:19:ba:a1:4b:02:6a:55:6e:27:0c:ed:
                    cd:a0:a3:5d:fc:2c:f9:a3:5a:e7:48:5c:14:b8:ba:
                    fe:d0:57:b2:6b:31:b3:1e:c2:78:6d:b9:c2:b1:f0:
                    8e:fa:73:95:8f:b8:6f:c5:0f:3c:07:e7:42:0b:a1:
                    dd:c0:21:9f:a4:75:8f:88:9a:29:05:58:f0:1f:22:
                    cc:7d:21:d5:01:4e:b7:95:8b:ec:f6:bb:5a:f9:fc:
                    96:16:fd:8b:91:41:3d:39:f0:3a:ca:32:db:c2:f1:
                    2c:65:94:dc:e9:0f:0a:3f:73:2e:81:31:9c:56:dd:
                    0e:57:74:18:dd:cb:11:8c:52:dd:1d:34:fc:67:42:
                    b0:5e:6d:da:d1:bc:d7:51:39:d1:ac:3d:24:ed:10:
                    ee:67:21:ec:cc:c7:01:d2:99:5e:88:cc:3e:f7:9a:
                    82:e8:a7:88:8b:39:94:22:66:9e:c6:bf:12:2c:f7:
                    8f:35:46:a2:e8:0d:b0:22:c1:a0:0b:0d:5b:6f:56:
                    2a:1f:12:d8:4e:7b:f2:bd:a0:c0:cd:a2:65:95:1b:
                    9b:8d:ed:b9:d8:aa:69:f0:b8:45:d0:74:32:46:bc:
                    62:97:6a:09:97:f8:12:d6:b6:ab:4c:86:3e:31:4b:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:42:03:A9:09:E7:D0:63:85:3B:5E:8C:B5:1E:47:B1:13:86:30:2A
            X509v3 Authority Key Identifier:
                keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0a:9a:d8:62:ba:37:e9:db:75:08:5e:ea:e0:a7:c9:94:ef:
         66:b9:23:21:d7:c6:b5:66:2b:6f:61:93:b8:75:69:8b:91:d9:
         57:f4:4b:3f:c5:c2:dc:da:ef:c1:9f:cc:b2:37:1f:b4:d6:d7:
         da:43:99:e5:69:7d:90:2f:ea:22:b8:07:7c:7f:28:ae:12:4c:
         dc:c8:8c:d2:a5:43:b5:31:e2:b7:f9:24:56:49:ae:16:06:ad:
         cf:8f:2d:ac:a4:ff:fb:4b:2e:03:ca:3f:44:ed:55:9d:71:55:
         50:a6:69:cf:0f:ba:64:81:77:39:24:bc:d2:ba:20:6c:4f:e6:
         88:52:1f:e4:1d:69:7d:b2:7b:52:73:c1:e4:0c:ec:39:49:98:
         cb:38:db:4f:49:29:8e:2f:17:7f:ae:16:f2:81:eb:c4:ec:0e:
         73:10:5e:7d:8e:19:56:e0:d5:82:15:5b:0d:47:09:cf:f7:bc:
         25:c9:db:80:74:99:e5:5a:2f:4f:f3:81:e5:d0:24:a5:02:6f:
         b8:28:28:94:eb:67:58:8a:45:57:f5:0e:34:21:3d:3e:6e:7d:
         c2:31:6e:2f:a8:c1:1d:43:b1:7e:1a:ea:5e:01:4c:e0:13:de:
         cb:4b:fd:86:31:e6:86:f5:09:d3:7a:6e:7a:8a:f3:21:59:03:
         b4:32:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:32:21 2026 by rpki-client