Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
File:                     F15AD62031FA11EE96640F3EC4F9AE02.roa (raw, json)
Hash identifier:          hOTfDBRJ9QfUK/rKfDPevW6q1jqnJPqcLBV4za1Ryww=
Subject key identifier:   62:52:6A:70:85:53:36:75:FB:EF:BD:FF:11:B6:5C:A7:4A:ED:3C:AE
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B3D
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 20:38:41 +0000
ROA not before:           Thu 30 Jul 2026 20:38:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149456
IP address blocks:        103.203.45.0/24 maxlen: 24
                          103.203.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jul 30 20:38:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6bb651-8de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:8f:49:19:44:17:be:a4:77:40:33:b7:e7:
                    d6:ee:50:aa:d1:fd:9c:18:c5:22:d2:63:aa:04:4f:
                    18:d4:06:c4:23:19:3c:86:f8:82:88:66:55:95:8a:
                    e4:f5:61:69:54:e2:ab:42:25:c1:f9:9d:85:98:01:
                    20:ba:7e:04:03:84:0a:21:58:e7:70:72:49:5d:49:
                    73:7b:b7:5a:9d:84:86:88:7c:48:2f:8a:e7:ef:20:
                    db:ce:a7:6d:1b:73:b7:cf:0d:ac:aa:b5:22:9b:a5:
                    81:27:14:bc:44:82:6e:e3:19:68:6d:11:34:31:b7:
                    08:a2:7f:a0:e0:ad:a9:65:3c:43:ae:64:ca:c5:5f:
                    cc:93:26:3c:8b:3f:ad:c0:68:1a:73:c5:15:e5:4b:
                    35:d2:85:e2:5f:e7:c5:0f:98:b4:f9:bc:a8:f8:81:
                    46:12:ad:af:d3:f4:2b:87:2a:30:74:9a:88:0e:7f:
                    ac:0d:20:3b:61:47:f7:f9:73:e3:81:68:d6:64:54:
                    92:46:b3:ac:60:65:e1:57:ed:66:b5:4a:c4:bc:99:
                    d9:62:d0:c7:92:7b:ac:c7:cc:ad:5f:11:8a:22:00:
                    66:d8:59:1f:1d:6b:65:61:e9:9f:8d:bc:1e:e5:00:
                    5d:ec:81:af:6f:8e:d6:41:98:aa:13:39:77:cb:0c:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:6A:70:85:53:36:75:FB:EF:BD:FF:11:B6:5C:A7:4A:ED:3C:AE
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.45.0/24
                  103.203.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:67:29:88:70:d5:c6:85:66:80:dc:1b:a9:54:44:ef:35:56:
         1e:03:2b:49:80:af:e1:f1:ba:c1:94:02:c3:58:d2:82:af:b1:
         15:32:23:a8:d6:ca:04:d5:b4:63:b5:bd:f1:fa:ff:32:4d:af:
         08:bf:6b:fd:93:2c:27:2f:93:1f:42:59:23:34:f1:87:0b:05:
         8e:7a:f5:e1:08:e6:59:eb:5f:4f:7c:10:53:f4:37:e4:2d:89:
         39:8a:f6:0c:1a:0b:5a:bf:b5:06:0b:f8:05:87:70:66:ca:db:
         da:37:ef:17:26:08:c0:7e:db:8c:e8:06:37:11:ad:69:01:9e:
         a8:ea:13:b0:c2:c8:29:8c:2c:90:01:6a:a6:1c:17:e9:7e:41:
         11:4f:49:74:c9:e9:73:45:b6:d3:cf:c9:de:a5:3f:44:f2:35:
         0a:d4:7e:31:56:f3:90:24:77:2a:c4:94:8c:32:0c:24:50:6b:
         ea:f5:74:1e:49:9d:5b:b6:21:d9:06:cf:0a:8c:7c:94:3f:55:
         7c:a7:b0:dd:68:4b:9f:71:a7:0a:14:69:ee:55:b8:ec:36:41:
         a3:fa:34:45:0f:a4:2d:5b:1f:f0:a7:bf:02:90:16:2d:3f:d3:
         bc:0f:18:4c:34:3a:eb:b6:1d:5f:37:93:1d:1e:20:e8:db:a0:
         74:b3:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:02 2026 by rpki-client