Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/D2FE3A16501411F084311D4CC4F9AE02.roa
File:                     D2FE3A16501411F084311D4CC4F9AE02.roa (raw, json)
Hash identifier:          MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=
Subject key identifier:   35:2C:22:D9:7E:34:A0:82:7F:D3:20:50:92:06:21:34:90:BA:79:9F
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       044C
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/D2FE3A16501411F084311D4CC4F9AE02.roa
Signing time:             Sat 07 Mar 2026 00:34:04 +0000
ROA not before:           Sat 07 Mar 2026 00:34:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     395886
IP address blocks:        103.127.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 09:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Mar  7 00:34:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ab727c-ac30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:1c:4f:23:51:39:88:3d:5b:e8:c7:0d:8f:
                    94:69:2b:99:2d:8c:d6:fb:34:b3:07:c3:41:c9:95:
                    d4:19:7d:53:00:7d:4f:cb:d6:fd:d7:8b:d4:c0:c0:
                    e1:db:0b:d0:8b:b0:05:c7:3c:c9:57:f7:95:2c:9e:
                    83:63:b3:f2:1c:a9:7b:89:2d:83:93:ce:ee:7d:a0:
                    84:75:5a:3c:3e:a7:bd:b8:ee:dd:56:84:98:06:d7:
                    b5:f7:64:60:e7:2d:6b:31:61:09:2b:41:c6:6e:30:
                    62:2d:0e:9e:9d:a4:0b:70:2c:dc:8c:1b:3e:03:ca:
                    50:c3:7b:8f:1f:ab:21:37:a5:9c:46:75:a2:20:f3:
                    8b:63:3e:06:29:8a:3b:06:78:b4:8c:cf:48:de:66:
                    33:01:07:7c:39:d5:58:52:11:40:7e:fb:97:d8:a1:
                    2d:ab:74:e7:63:d6:54:8c:7e:94:3e:9b:4e:34:bc:
                    bf:3f:2c:c9:6c:8b:63:91:a7:93:2f:31:72:f2:66:
                    af:21:27:b5:ab:ee:e1:16:76:ed:9e:d4:71:3e:d6:
                    ec:3c:de:cf:7c:b8:ff:be:b4:e9:04:69:4c:2c:55:
                    6b:19:07:d8:6a:bf:36:d3:a7:1c:5d:04:1d:9c:d4:
                    ef:59:44:df:25:e1:52:80:9d:3b:30:41:1c:c5:e4:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2C:22:D9:7E:34:A0:82:7F:D3:20:50:92:06:21:34:90:BA:79:9F
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/D2FE3A16501411F084311D4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:fc:fa:da:ad:a3:2b:e4:5c:a6:13:2f:04:5f:c0:a7:60:
         c4:92:e0:c3:85:91:57:7e:67:f8:84:55:a0:1b:08:8e:6c:a9:
         65:81:e5:c9:cd:07:8c:06:39:79:5f:3e:42:60:79:26:81:74:
         ca:72:f3:2a:bb:11:46:a3:55:e1:2d:2c:42:36:10:ee:00:33:
         aa:e3:40:7e:bd:81:8d:f8:83:19:5e:a2:49:08:5d:3a:9c:f0:
         84:c4:e1:ca:68:82:46:e4:69:b0:af:05:aa:35:ed:c3:9e:e1:
         03:b1:51:d7:ce:5b:d1:ba:50:86:db:1c:1c:9e:76:e1:1e:1c:
         bc:e5:80:c2:2e:dc:27:15:4a:b0:d5:6e:ff:be:63:d2:a3:10:
         61:62:06:1b:b1:d4:31:2f:ab:f3:1d:42:d2:c4:aa:1f:f1:aa:
         b0:be:a7:7d:18:4d:5f:94:ea:82:29:88:41:bc:ee:19:ca:aa:
         8e:fa:f8:e7:4a:7f:8f:da:27:13:98:f6:40:70:8a:3a:f9:18:
         11:a4:4e:7a:c5:d5:5d:56:82:7d:c5:44:af:36:f3:5f:e7:02:
         5e:08:47:9f:2f:2d:78:0c:e3:a9:c5:fd:c6:a6:c2:a9:e4:ea:
         16:f2:87:e7:94:d5:e3:f7:fd:e6:94:46:8a:9f:e9:96:d0:86:
         de:c8:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:45 2026 by rpki-client