Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/2C986C7E574711F1B4D92A609E833773.roa
File:                     2C986C7E574711F1B4D92A609E833773.roa (raw, json)
Hash identifier:          RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=
Subject key identifier:   3F:D1:3D:1E:2E:81:D4:4A:80:47:EA:3F:E4:A0:6D:FC:85:88:71:B5
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0CF2
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/2C986C7E574711F1B4D92A609E833773.roa
Signing time:             Sun 24 May 2026 08:04:23 +0000
ROA not before:           Sun 24 May 2026 08:04:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149765
IP address blocks:        103.137.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: May 24 08:04:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a12b107-02fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:9c:d1:d6:b0:ac:9e:bc:5b:74:40:d0:3c:
                    44:4a:5a:b7:dc:f5:98:42:aa:97:ae:d3:9a:ff:b8:
                    75:17:52:fc:c5:9f:f1:5e:d6:22:29:f7:ae:98:2b:
                    53:89:9d:f1:af:2f:91:49:02:41:46:64:58:d1:c3:
                    e6:eb:2d:6a:e2:fc:4c:35:b4:9d:4e:65:3f:4d:13:
                    03:01:57:14:cd:16:db:06:58:5e:ef:b5:1b:1c:65:
                    11:59:67:a9:ac:c2:63:22:84:7d:95:59:a0:e3:1d:
                    64:0e:9c:7d:df:3d:0c:4f:20:79:f9:9b:fd:c7:cb:
                    4f:63:dc:79:20:58:a2:07:84:ec:4e:fb:a8:cf:59:
                    77:77:3f:af:42:f9:33:5c:46:8c:13:0a:50:7e:5f:
                    37:ee:ea:32:f9:a7:04:f6:c3:2a:6d:1c:72:c6:f4:
                    6b:d5:da:5f:23:c7:67:fc:cb:5c:35:ff:f1:d4:3f:
                    6a:d3:99:12:09:92:ec:14:13:d2:da:f4:69:f9:3d:
                    79:e3:1c:d2:a5:c6:42:76:83:45:72:96:01:41:3f:
                    9f:82:d6:e2:bc:3b:f4:b8:c3:90:01:27:76:7a:c6:
                    9b:1e:fc:6a:72:8a:35:9c:4d:39:e3:da:02:2a:cb:
                    a0:6b:6f:d1:c2:42:5c:49:12:87:62:9e:a0:f3:ff:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:3D:1E:2E:81:D4:4A:80:47:EA:3F:E4:A0:6D:FC:85:88:71:B5
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/2C986C7E574711F1B4D92A609E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:8b:fa:6d:3a:7d:57:c3:e3:c7:03:0e:3a:85:8b:e4:b3:
         c3:1f:83:53:16:86:4b:c7:8d:ee:06:21:88:5a:b1:92:aa:98:
         8e:b5:44:76:83:9c:42:6e:19:fe:9f:a8:24:89:9f:d8:62:cb:
         32:85:e1:18:10:e5:d2:6c:e7:a6:d0:8d:2b:3e:d6:ae:9e:7e:
         d6:02:02:4c:fe:7d:d7:5d:09:ee:71:82:f7:4d:85:35:dd:50:
         1b:ce:07:25:fa:4e:67:0b:e7:e7:91:67:74:3f:51:ed:a5:fc:
         7b:26:b4:78:06:89:a3:c1:55:37:34:89:76:96:ae:c0:25:75:
         3c:65:a9:59:17:a6:91:b2:d9:ea:48:89:2d:f4:9c:61:5c:87:
         ce:86:0f:7e:05:73:80:d3:a6:5f:68:db:62:b8:0b:2f:24:b6:
         3a:45:bb:13:6c:2b:ff:e7:a1:95:cb:1e:7e:95:33:79:99:3a:
         a7:dd:db:bb:64:2e:d7:0e:68:f1:54:5b:21:aa:51:01:3e:ed:
         50:de:cf:a5:61:9f:ee:f6:fa:6c:35:6e:eb:8c:7c:30:15:6a:
         6d:1a:4f:52:14:bd:ff:ef:c9:3d:f2:d2:f5:24:45:e8:90:30:
         e9:63:dd:e0:b7:6d:33:ab:76:f8:ab:91:1c:76:ab:39:f9:30:
         e0:03:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:53:23 2026 by rpki-client