Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa
File:                     977BACDA818811F0AE59F81AC4F9AE02.roa (raw, json)
Hash identifier:          dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=
Subject key identifier:   13:48:73:D2:71:23:B7:18:03:08:46:20:5D:8D:E5:CE:E1:6D:2E:B1
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       047F
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:35:01 +0000
ROA not before:           Wed 07 Jan 2026 00:19:58 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     208525
IP address blocks:        103.151.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 23:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  7 00:19:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a486d5-2331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:4c:29:98:1a:32:af:0e:f6:14:08:64:7a:
                    78:7b:06:7d:dd:a2:8e:8b:b5:03:24:bb:83:98:1f:
                    d2:a3:8e:f7:97:d3:ca:54:fd:d7:27:82:be:1e:65:
                    40:9c:7e:81:23:1d:94:72:29:43:1d:04:31:05:6f:
                    2b:9c:df:62:2b:c1:20:cf:c7:9e:1f:91:1d:78:ed:
                    fa:f9:38:c4:bc:ed:2b:a4:40:0a:fc:b0:98:0d:fc:
                    c1:32:b1:76:d6:b9:ba:7d:20:b4:30:b1:85:05:09:
                    89:b0:07:b7:69:7b:8f:84:45:07:99:ba:02:eb:a4:
                    fe:12:29:2b:c3:59:d1:8a:03:e0:ef:c9:ff:d1:8d:
                    5f:e8:30:da:55:95:dc:5c:be:54:02:7e:51:5e:c1:
                    57:4a:a4:19:7f:84:9e:28:4e:dc:92:24:2c:a7:16:
                    33:12:6e:2c:f1:72:5b:8f:f1:72:3d:66:f2:9d:09:
                    46:92:1b:aa:b7:4b:78:5b:ec:bc:38:6a:5d:fd:de:
                    97:4a:84:76:71:bf:af:dc:de:74:28:7a:f2:72:49:
                    db:f7:4a:31:52:5e:3a:63:fe:9d:ed:28:e0:8d:c0:
                    0d:a1:65:1f:9e:66:33:b1:48:b8:27:4c:81:b2:ea:
                    a1:1b:c1:1d:c6:e8:4a:10:f7:49:9d:b8:77:40:01:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:73:D2:71:23:B7:18:03:08:46:20:5D:8D:E5:CE:E1:6D:2E:B1
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:63:9d:84:a4:e3:cf:99:85:ae:11:00:55:59:d0:63:58:
         f1:60:4b:87:40:9b:19:67:80:9b:21:2f:87:93:a8:12:fd:ff:
         22:aa:2e:78:27:39:1c:f5:cc:d2:ad:61:5f:f4:f1:25:fe:18:
         1a:d5:e8:0c:8e:ea:dc:d8:b8:d1:bd:67:46:10:a9:eb:6d:97:
         a3:ef:5e:8e:dc:58:2a:9f:74:56:f4:e7:0d:e2:b2:82:3f:b5:
         67:d2:3a:82:13:96:ff:ec:d9:dd:c0:53:d6:9a:bf:39:86:95:
         8b:f0:51:8c:69:59:3d:67:71:75:4f:1c:9b:49:78:2d:a7:f8:
         48:30:a7:5d:58:97:a4:2e:73:a2:70:53:37:91:e3:20:3d:42:
         47:e0:9d:cb:cb:46:b3:b9:d9:7e:94:7d:46:a2:5e:59:71:24:
         90:d1:76:57:e0:1d:6b:6f:8d:9f:94:3b:0a:e7:68:82:15:db:
         b9:6d:62:10:b4:5f:48:f9:6c:03:86:68:6c:a8:e4:b3:f4:6b:
         4b:ea:34:9e:82:ec:9e:52:1d:4d:e6:2a:ed:e8:de:67:68:37:
         d9:95:6b:95:99:ff:9c:18:56:71:f5:9c:9e:5d:c5:46:dd:c2:
         8f:ff:0d:61:f1:e0:d8:87:8c:69:7a:14:e0:ff:eb:a9:31:68:
         eb:a3:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:37:48 2026 by rpki-client