Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A7961C32535A11F19C6355759A833773.roa
File:                     A7961C32535A11F19C6355759A833773.roa (raw, json)
Hash identifier:          o9bBPBMErBG/UPZ9+ZbmS/n7ZI5NM2zmwIt1dBIpc8A=
Subject key identifier:   98:89:63:B0:48:04:32:9B:ED:D0:FB:30:50:37:6B:93:A9:A4:66:D5
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0A26
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A7961C32535A11F19C6355759A833773.roa
Signing time:             Tue 19 May 2026 08:13:45 +0000
ROA not before:           Tue 19 May 2026 08:13:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201891
IP address blocks:        103.112.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: May 19 08:13:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0c1bb9-7e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:a0:3c:49:e6:e9:d0:97:51:7f:02:1c:9d:
                    a6:d5:4e:a3:5a:df:1f:54:de:d2:07:b0:61:5f:2c:
                    8c:54:bb:1f:c3:29:c4:02:5b:c3:a2:bb:2a:a1:82:
                    d6:58:87:25:3c:19:d4:3a:72:4e:54:98:3c:2f:b7:
                    43:81:1b:4a:f8:a5:64:e8:16:a7:2b:13:be:3a:01:
                    f9:3b:f3:72:fb:77:40:6b:f2:fd:b5:95:75:8f:9d:
                    f9:f6:cd:83:a4:cf:10:2c:81:73:4a:dd:16:76:27:
                    28:70:ac:ca:48:4d:74:b4:33:78:ff:ee:aa:32:5c:
                    d0:7d:6f:a4:f0:16:c1:5d:73:3e:8e:17:c9:01:9f:
                    5e:3a:d0:46:66:bc:e9:9c:b6:6e:0f:73:51:eb:dd:
                    af:d4:88:37:23:05:5b:7e:30:cd:a2:30:c8:b1:77:
                    82:68:d5:4b:93:5e:50:9a:17:ce:4f:bd:83:79:a5:
                    05:c9:0a:3a:81:77:29:7a:40:fb:c1:42:c8:3c:92:
                    2f:8f:31:e6:b2:af:5e:75:bb:6b:aa:aa:63:39:52:
                    22:1a:16:73:c2:9f:52:c6:a4:af:18:57:dc:94:da:
                    c0:cb:61:9c:17:bf:bc:73:83:d5:07:f9:eb:8e:aa:
                    c2:4f:2e:87:c6:41:69:0c:a5:30:c0:61:15:2b:fd:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:89:63:B0:48:04:32:9B:ED:D0:FB:30:50:37:6B:93:A9:A4:66:D5
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A7961C32535A11F19C6355759A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:c4:aa:ea:26:90:4a:bd:e5:a2:2d:97:3f:69:db:cf:01:3c:
         26:39:44:5a:f5:ad:ef:91:1b:18:1b:4e:f6:bb:34:12:f1:13:
         90:bb:ad:1d:78:38:f8:bc:37:b6:79:13:6a:fd:13:6f:06:dd:
         21:7b:52:5a:15:91:59:23:aa:9a:88:6b:c6:78:b3:6c:72:05:
         df:88:76:e5:51:8e:6c:1e:11:76:13:03:c9:a7:73:b6:8c:11:
         f4:bf:15:97:c2:43:ce:dd:dd:c8:1f:f7:6b:b6:d5:5c:75:14:
         4e:a5:d9:1f:37:bd:81:bd:cc:d3:c9:71:02:13:63:36:56:fe:
         69:9b:79:09:f8:b6:36:2d:db:23:f7:fd:70:a3:77:8a:5a:1a:
         a4:04:43:18:02:64:91:a2:4c:4d:6b:c7:39:67:5f:f3:17:f9:
         a4:76:cf:f3:e0:97:2b:04:1d:a9:e4:c2:44:57:16:64:a1:69:
         42:c2:d3:b9:88:60:3a:7b:f7:da:b6:e8:2a:49:2a:49:05:6e:
         24:eb:66:1f:b6:65:f4:ee:96:98:92:4e:e1:96:13:93:43:5a:
         79:9c:f8:0e:67:71:3c:db:5e:d7:c6:25:20:fa:8b:a9:79:ba:
         2a:9a:c5:f6:4f:e6:f8:75:ca:eb:42:5a:4d:4e:34:b0:f3:a1:
         4f:65:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:42 2026 by rpki-client