Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa
File:                     57F3935045A011EEA9A5215EC4F9AE02.roa (raw, json)
Hash identifier:          XPkWkAY8hF0ZdRtMqLWpaSb6yUY+HHgjgaF8oDjcn2I=
Subject key identifier:   B9:22:F8:C4:90:6C:95:AA:A3:A6:4F:C7:6C:6B:80:E6:F5:B8:1E:63
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       01DF
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:16:36 +0000
ROA not before:           Sat 17 May 2025 04:23:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138589
IP address blocks:        103.247.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: May 17 04:23:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59bc4-1bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:a0:41:41:f0:3b:72:db:b5:ac:e1:8b:cd:
                    ec:35:13:2f:af:33:d4:88:d6:80:3a:c0:23:8b:70:
                    bb:23:26:be:84:55:a8:5f:de:a4:46:da:09:36:6c:
                    37:71:27:bc:6e:ee:4e:8d:0f:e9:f2:62:b7:7d:a5:
                    1c:82:d5:82:5a:e0:af:8f:ac:e7:40:9e:89:34:c7:
                    20:14:01:c2:1b:c0:ed:10:f3:dd:3a:be:c7:90:c2:
                    85:fc:ef:fb:41:30:81:02:f6:f4:da:d1:8c:d8:6a:
                    c3:89:cc:8a:a2:e1:da:06:3b:76:18:0b:f3:47:d2:
                    ee:45:c4:86:f7:c1:ae:21:66:aa:b8:9a:c3:2e:cf:
                    ec:7a:72:6b:3c:b0:49:50:c3:ec:2b:73:64:9a:64:
                    d1:09:e4:3a:b0:4e:a9:b1:4c:9f:63:c6:ad:a6:9e:
                    b9:84:f3:58:8f:60:f4:af:64:1d:99:7a:aa:31:4f:
                    0a:8a:75:43:4b:a4:b2:9a:58:f3:4d:71:3e:c3:d5:
                    6b:8b:43:55:46:f8:ed:b1:e3:3e:22:2c:27:6f:67:
                    ed:0d:38:85:9f:43:fc:e6:1c:ce:5b:75:8b:bb:b1:
                    a0:0f:a6:46:96:3f:52:ae:67:02:3e:a9:4a:ed:7a:
                    bc:27:d5:54:d1:bf:92:65:45:a0:8c:c1:c3:bf:fd:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:22:F8:C4:90:6C:95:AA:A3:A6:4F:C7:6C:6B:80:E6:F5:B8:1E:63
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e5:0b:2f:d7:9c:50:dc:e6:97:2c:28:dd:aa:41:f9:4e:46:
         f9:ee:9c:11:3c:88:21:12:95:23:d4:84:a1:03:bb:d5:48:1b:
         e1:a5:c7:e9:2f:53:af:15:62:b7:ac:c9:1a:ff:77:a1:ae:0b:
         d1:fb:19:d4:a5:9e:91:38:19:4c:c8:46:d8:90:7f:b6:a1:4e:
         88:a3:a3:13:f2:f4:7a:a2:2c:12:de:69:bb:54:26:ff:40:33:
         c3:d4:88:2f:18:e6:3e:a4:d8:8a:6d:c5:af:d2:f6:bf:8f:74:
         02:a8:4f:ca:9a:a5:57:b0:2c:b0:e9:59:53:e0:f6:0e:c6:f4:
         62:b2:4d:82:23:28:e6:99:73:5f:d5:0e:f6:83:f4:d8:ec:92:
         26:6c:98:7b:b0:eb:9f:73:5f:0c:11:92:98:f6:30:ee:08:46:
         09:2f:30:5d:88:b2:0a:6b:aa:77:59:5f:01:21:40:3e:03:0c:
         53:27:23:4d:74:70:89:81:74:0b:6d:da:a4:02:21:ea:f5:16:
         90:a9:6f:c2:05:9c:a6:48:cb:90:76:50:63:90:24:85:9b:5c:
         dd:38:6f:d2:b5:23:ad:2a:f4:f0:60:31:dc:7b:68:58:66:33:
         1d:a8:bf:0d:7c:77:d4:e1:9b:e6:0e:29:2c:07:f7:72:a0:0e:
         6b:a3:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:42 2026 by rpki-client