Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa
File:                     1C7AB64E21BE11F191732FC01B3D8C67.roa (raw, json)
Hash identifier:          VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=
Subject key identifier:   E3:2E:5A:EF:AB:57:00:0A:46:AB:6A:03:5D:EB:B1:9B:6E:17:47:3E
Certificate issuer:       /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial:       02
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa
Signing time:             Tue 17 Mar 2026 04:59:43 +0000
ROA not before:           Tue 17 Mar 2026 04:59:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133198
IP address blocks:        103.38.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
                          rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
        Validity
            Not Before: Mar 17 04:59:43 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69b8dfbf-9ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2b:2a:fa:70:3a:b3:ee:53:5a:5c:60:1e:b9:
                    e4:ef:b9:2d:13:8c:96:77:45:bb:f9:a4:ee:18:b3:
                    63:a8:4e:62:69:0d:87:a0:fe:77:db:77:28:c7:65:
                    ef:08:64:d1:88:6f:08:67:1d:1e:a8:49:9d:10:07:
                    fe:fa:dd:1e:38:1d:43:b1:6c:23:c1:93:a6:94:8d:
                    2e:b7:d0:50:2f:a0:a9:78:7b:ae:81:ca:42:23:9d:
                    74:03:8f:16:bb:cb:b8:d3:5a:cd:d4:f0:01:30:99:
                    99:b5:15:51:06:00:24:dc:f4:14:39:b5:7a:df:f6:
                    f9:63:04:ea:d4:d8:da:2d:aa:1d:75:d4:af:b0:49:
                    c1:cc:9d:ad:14:d2:50:e3:58:5a:b7:59:3a:9b:6c:
                    af:83:68:ad:e9:8f:99:99:b7:ed:01:7b:6c:9b:7b:
                    91:ab:e1:08:c3:4d:52:30:c8:c1:35:25:fa:20:7b:
                    0e:fa:08:f6:41:15:ba:d4:59:81:33:cd:44:c9:14:
                    d4:f6:19:0e:8b:b1:c3:8a:fc:94:f0:6b:1c:f2:7d:
                    98:1a:a3:e0:3f:30:4c:68:73:0b:75:9e:7e:d0:d4:
                    45:45:2a:f6:bc:48:04:90:22:df:b3:f3:f6:7a:8a:
                    aa:99:d0:30:7b:57:56:58:25:fc:63:7e:5c:5f:f5:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:5A:EF:AB:57:00:0A:46:AB:6A:03:5D:EB:B1:9B:6E:17:47:3E
            X509v3 Authority Key Identifier:
                keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:52:57:19:59:04:b8:40:22:9b:a9:81:c8:1b:56:ff:18:
         e6:d7:0f:0a:3e:ce:c0:d3:4f:56:85:d1:d2:b8:5e:2a:60:26:
         40:1b:f4:8c:ac:6f:1c:2d:5f:6f:75:3d:45:9b:5d:a2:ab:28:
         4c:2d:5c:fc:a8:eb:d1:20:47:47:ef:c1:28:38:ae:b1:d2:68:
         32:ce:ef:ab:85:e6:01:0b:11:84:66:95:1a:c5:04:b9:64:21:
         d3:5f:98:ae:e5:1b:67:dc:7e:f3:8c:96:32:ef:b2:ab:21:05:
         81:d6:36:83:a6:dd:c7:c3:36:e4:0c:29:5f:4b:6c:67:ca:19:
         bd:87:37:f6:c9:b2:95:82:78:41:5f:e1:b5:77:a6:7b:bb:03:
         02:1d:50:7d:ab:8a:02:22:8a:96:6b:19:3d:d1:e5:97:37:b6:
         9a:76:41:1a:16:70:b8:e9:b1:88:80:7a:8d:26:e3:3a:78:3a:
         62:2d:38:9d:f8:7b:5c:c0:1a:cd:12:e8:04:94:7d:1d:51:6b:
         54:55:7f:6c:6d:27:67:fd:e4:df:22:17:b0:96:3d:9d:fb:c2:
         97:d9:be:9a:8b:cb:b3:3e:65:a7:ba:ea:11:d9:d0:d3:28:0f:
         8d:24:ff:fe:c0:d1:ec:6e:41:77:bf:64:92:f8:59:07:14:15:
         41:a3:ce:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:04 2026 by rpki-client