Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa
File:                     147D51CA85B111ECB675B552C4F9AE02.roa (raw, json)
Hash identifier:          1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=
Subject key identifier:   80:82:40:E4:55:86:C7:C8:5B:33:B5:A8:97:EC:A5:DA:A3:85:63:B2
Certificate issuer:       /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial:       0485
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:50 +0000
ROA not before:           Fri 03 Apr 2026 00:31:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138992
IP address blocks:        103.181.42.0/23 maxlen: 23
                          103.181.43.0/24 maxlen: 24
                          2001:df5:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
        Validity
            Not Before: Apr  3 00:31:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0a76-3877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:8b:ee:51:54:73:18:a2:93:d9:86:3f:11:
                    1b:b6:5e:98:0d:95:a0:15:e5:dd:30:a2:7a:ec:84:
                    cb:eb:b2:65:ee:d5:4d:c9:14:af:18:53:18:4b:00:
                    c9:89:0c:a4:c1:37:d4:55:af:01:6b:03:d8:41:57:
                    01:93:d7:87:64:f3:d5:a4:82:2c:ce:16:56:f3:53:
                    f6:7b:41:3c:f7:e7:ee:27:c5:42:08:80:c8:4b:55:
                    a3:64:f9:a9:73:a8:e2:95:c7:57:db:27:5d:65:d8:
                    fd:0a:e1:31:9f:f0:24:c8:78:ea:e8:63:4d:c0:cc:
                    9e:d4:22:21:8b:72:e0:cd:26:06:28:43:0c:24:75:
                    34:bf:ef:28:33:49:5c:4a:4a:8e:81:c1:39:ba:77:
                    b0:35:3b:dd:18:dc:5d:38:7a:50:fc:90:77:73:da:
                    db:03:1e:b1:c7:ac:a3:d5:5c:7c:21:0d:a9:36:e5:
                    02:27:82:a1:a5:83:2c:57:54:ab:68:bd:64:fa:26:
                    44:12:72:f4:9a:37:b5:9f:07:58:23:f5:da:f7:57:
                    d3:8f:1c:b2:25:df:b5:a4:95:75:38:6e:4d:2d:11:
                    bd:20:aa:66:77:97:f0:6c:39:f1:d0:d6:6b:af:7d:
                    a4:4c:a7:74:d3:73:c2:23:f6:c9:f8:e2:29:51:e5:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:40:E4:55:86:C7:C8:5B:33:B5:A8:97:EC:A5:DA:A3:85:63:B2
            X509v3 Authority Key Identifier:
                keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.42.0/23
                IPv6:
                  2001:df5:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:57:c0:a4:87:4d:9c:2c:0a:cd:b0:61:2b:2d:db:61:c1:d2:
         9a:2f:48:16:24:d8:31:7c:c9:34:6c:da:bc:e0:6e:3a:2a:5b:
         9f:fb:0a:16:83:f1:72:79:15:df:68:e5:47:0c:07:4f:b9:18:
         cf:f3:e0:2c:74:11:e1:ff:15:aa:d9:43:cc:39:35:1d:80:a8:
         88:32:d1:bf:0e:0e:0c:ed:09:a3:aa:d1:be:51:72:d6:ef:92:
         24:39:00:86:b4:95:fd:13:d7:c9:e9:6a:6e:fd:5c:38:bf:a2:
         f6:f4:de:88:4a:31:4b:f7:87:d3:ee:a7:6a:d0:74:dc:7c:b3:
         0f:7a:bb:47:55:37:38:f0:b7:aa:fc:a5:d1:17:bb:e4:15:37:
         47:c7:b7:16:fb:e0:62:d7:00:51:a8:ed:51:1e:8f:d9:c5:31:
         56:0c:c4:0d:48:2e:d2:9b:83:44:71:7f:06:87:e8:82:3a:f9:
         e3:34:f3:90:3d:89:1c:51:de:3f:62:fb:6d:8e:85:40:64:7f:
         25:7d:37:e9:f9:4c:36:10:25:22:49:e5:5e:26:ba:ca:b3:05:
         c3:cc:d7:9b:a4:58:23:6b:82:93:19:ca:6f:21:e2:c8:e3:b0:
         73:6e:6e:d7:ed:37:43:7f:62:29:83:78:bc:53:06:11:24:02:
         9d:8c:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:14 2026 by rpki-client