Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/915C708A5D0311F1A1E4D1FD9E833773.roa
File:                     915C708A5D0311F1A1E4D1FD9E833773.roa (raw, json)
Hash identifier:          VrPJNq/Oy8dbAV0z+8RuKsoNHOduGhKMp1HhVbIhyuQ=
Subject key identifier:   5C:77:CE:98:B3:18:EE:08:E0:C1:50:4D:94:89:42:06:1F:FE:61:EF
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0932
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/915C708A5D0311F1A1E4D1FD9E833773.roa
Signing time:             Sun 31 May 2026 15:15:57 +0000
ROA not before:           Sun 31 May 2026 15:15:57 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.70.224.0/23 maxlen: 24
                          182.255.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2354 (0x932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: May 31 15:15:57 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a1c50ac-0925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:e3:bb:2b:9a:b3:b4:94:e3:45:88:60:a5:
                    01:67:c6:36:58:07:b3:17:a2:ef:76:da:38:35:75:
                    1d:2d:be:25:30:dd:cc:ac:58:81:b1:07:2d:b7:da:
                    6c:48:5b:ce:6e:70:47:9b:b7:73:04:a6:bd:7d:2e:
                    1b:aa:b4:34:02:75:65:ba:57:88:b7:89:c4:c9:c8:
                    2a:a9:70:3a:15:b6:9d:a7:60:11:81:0d:a6:98:b8:
                    ac:ed:a2:cd:21:42:84:1b:74:cd:8d:8d:7a:46:f8:
                    29:9b:5b:34:ad:52:83:b5:8a:60:1e:40:57:01:42:
                    21:09:52:23:ec:0f:5c:5b:20:60:e4:4e:7e:8b:b3:
                    3a:ac:9e:f7:ee:61:b2:e5:e0:33:38:4c:fd:b1:9b:
                    28:c0:4a:40:74:9a:e0:01:81:b1:a9:92:74:c2:95:
                    74:53:50:a5:52:8f:34:ca:5d:04:d8:c7:20:80:07:
                    0b:23:9c:59:74:5f:ba:41:86:7f:d8:87:43:3f:23:
                    7f:f8:6e:6a:c8:0f:ed:d5:81:63:d5:e9:5c:ad:55:
                    f0:c6:94:ba:2f:85:13:6b:6c:bc:bd:16:c4:ad:72:
                    ae:16:6b:a1:05:18:09:09:09:35:14:ee:6d:a7:0b:
                    53:41:6e:70:73:00:22:63:03:7d:6b:ff:d2:7e:c9:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:CE:98:B3:18:EE:08:E0:C1:50:4D:94:89:42:06:1F:FE:61:EF
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/915C708A5D0311F1A1E4D1FD9E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.224.0/23
                  182.255.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:59:bf:36:43:87:b5:fb:5f:f9:9d:54:5f:26:fc:2f:92:
         b3:fc:de:f2:fb:62:f5:55:46:fe:68:c4:f4:b7:57:f8:bd:31:
         66:94:3d:21:f0:45:2c:e0:eb:88:58:87:ff:06:c9:ab:51:16:
         54:0f:88:4d:be:65:f5:5e:2a:01:b9:bc:81:b9:21:74:b1:ec:
         d6:b8:64:0c:77:de:67:58:c8:0b:bd:c7:b0:d7:6c:21:04:09:
         f2:a7:1b:5c:5b:ba:6a:30:4b:99:21:80:d2:5b:01:84:1d:3d:
         9f:5a:b0:65:4a:56:bf:5c:11:c7:80:52:e9:6f:0f:1f:52:64:
         30:3a:20:cb:2f:93:c9:29:cb:c8:b5:49:d8:0c:e0:6b:5c:0f:
         b1:11:4a:86:49:84:9f:0b:34:13:d7:8d:31:71:78:26:6c:b5:
         9f:96:e6:de:fe:be:f8:13:43:2a:65:4f:f5:1b:dd:df:61:77:
         17:9e:b4:0a:76:f5:9a:b2:02:d8:f2:f4:e5:b1:0e:09:7d:3a:
         eb:45:7d:16:05:7e:64:bb:3c:af:f7:fe:14:80:dd:2d:5d:a2:
         83:f0:c8:18:c9:1b:b5:8a:8e:9f:37:fc:16:ad:48:1a:f3:eb:
         57:e3:4a:f5:4f:2d:9a:67:23:b6:0d:a5:cb:77:5d:ba:42:40:
         63:e7:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:36 2026 by rpki-client