Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
File:                     E2256F74D97011F0A26925FA9AD3641D.roa (raw, json)
Hash identifier:          c0vbYLg0UntBGJI9A2FhToTcMXbZmIvcvE2u9KfX6Sc=
Subject key identifier:   49:BC:98:0F:80:87:D4:A1:E3:CE:4F:89:17:7A:35:00:15:C3:F0:66
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05C6
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
Signing time:             Sun 01 Mar 2026 18:41:06 +0000
ROA not before:           Wed 31 Dec 2025 23:19:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     31715
IP address blocks:        103.204.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Dec 31 23:19:07 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48842-5395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:b8:66:4f:f1:54:dd:59:da:d8:7c:69:f2:
                    d1:25:72:cd:4f:d5:c5:fd:90:95:4d:e9:70:fc:2f:
                    f2:27:e0:fe:29:b5:70:c0:68:58:2c:56:53:c0:e9:
                    84:82:1a:fa:99:f5:30:d8:1c:43:20:eb:08:ff:6c:
                    c1:a9:79:ab:11:99:09:29:55:18:23:6b:31:56:71:
                    1e:e2:b8:c0:71:52:b4:7e:1f:18:42:7b:4c:5e:49:
                    fa:5e:56:04:31:b7:3b:0b:7b:53:91:55:ab:ef:21:
                    ad:23:fe:9f:60:89:8c:14:b4:28:9a:41:8a:be:3f:
                    a0:40:27:51:fe:2d:c9:00:4b:3b:f4:a6:3e:48:1e:
                    b1:08:4c:93:ca:97:fa:a6:b5:11:5a:05:d6:5c:ee:
                    78:8b:f7:e2:1c:90:b6:94:78:26:38:5a:17:36:af:
                    19:2d:b4:a8:e8:9d:ec:84:98:2e:82:c6:77:ed:74:
                    2c:a2:0f:f2:f0:c0:64:69:79:6d:d1:d5:4e:0d:dc:
                    0d:14:a4:83:3c:af:35:02:a5:ae:dd:b6:d2:75:cc:
                    43:2d:eb:c9:e7:85:ee:f7:89:dd:f0:ba:09:29:66:
                    7a:dd:38:49:c8:c5:b9:e1:fc:8c:eb:ca:ee:2e:10:
                    09:f7:ed:ba:12:ef:d4:d6:c9:59:09:09:c6:e1:9f:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BC:98:0F:80:87:D4:A1:E3:CE:4F:89:17:7A:35:00:15:C3:F0:66
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:56:39:00:4e:9f:61:a7:f1:1e:4d:d7:07:5e:41:33:4f:
         d3:7a:ab:3e:12:1f:41:76:0b:3e:5c:89:69:66:c8:b0:44:f9:
         ec:2a:f6:21:fb:6d:1e:c7:98:47:b7:b6:b5:39:91:38:31:5b:
         58:42:14:6c:16:ba:fb:17:bd:20:d2:ec:0c:7b:1b:2e:fa:23:
         a3:bf:b1:46:eb:af:41:ad:ab:41:4f:dd:87:3f:26:c2:71:41:
         48:de:b2:0a:c3:11:4b:07:c0:9e:6b:6d:b6:1d:2a:30:78:6e:
         1c:0b:7b:ba:87:23:16:78:1b:06:80:4a:90:12:f6:6f:90:93:
         1c:05:33:95:25:ee:af:64:18:64:ae:97:d4:ac:20:7d:64:0e:
         13:0f:e9:d4:85:ea:da:c3:21:d8:75:16:f0:86:7d:94:d4:0c:
         4c:8b:b0:0f:e8:16:53:5c:bd:7e:21:aa:8d:56:d2:7d:7d:a4:
         88:bf:4b:5a:22:38:a9:83:4a:27:3f:5a:46:33:9b:0c:3e:2d:
         89:5a:23:8a:ed:37:c2:79:80:14:4f:a9:7d:62:2d:e3:93:36:
         33:b5:75:30:e3:23:33:93:9a:f3:3b:44:e2:40:9d:6f:b3:29:
         c6:70:ee:65:33:66:75:a1:57:89:43:47:fe:65:f5:5e:19:8e:
         a4:59:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:20 2026 by rpki-client