Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa
File:                     D3EAA0323F5A11F1AA7533B3A4833773.roa (raw, json)
Hash identifier:          EWIgC3Wx3EH+woWoBUJtb6p5aUIWmHrjOLQsDMOov48=
Subject key identifier:   20:EC:42:58:19:9B:77:7B:7D:7A:8A:F7:63:16:1B:F6:36:69:CD:D0
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       09FC
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa
Signing time:             Thu 23 Apr 2026 21:24:36 +0000
ROA not before:           Thu 23 Apr 2026 21:24:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     22160
IP address blocks:        103.151.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Apr 23 21:24:36 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ea8e14-290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:90:28:27:99:55:b9:be:23:8e:d8:8c:e2:
                    41:5f:eb:d7:42:a3:74:98:2f:bb:f3:97:07:b0:de:
                    5b:d4:df:49:be:15:58:10:97:8b:ea:15:88:c6:b1:
                    7c:c6:e3:16:a7:19:df:71:76:f4:4d:d6:53:8d:c1:
                    29:34:71:ab:2f:3c:e9:e5:10:65:bc:ae:ff:62:25:
                    ad:7b:c0:73:54:33:70:88:b3:3a:64:64:79:89:7c:
                    8c:bd:fa:39:82:37:f7:c9:d9:c1:7a:b5:6d:93:d7:
                    ee:d4:1d:78:ed:11:3e:ef:63:de:12:73:e1:7d:45:
                    78:45:60:f6:7f:3b:06:41:f6:23:1f:19:ee:98:e0:
                    9f:d5:3c:ba:f1:56:54:00:56:c1:6d:54:e8:c2:74:
                    6b:5e:c5:9a:e8:76:1b:ad:8e:a3:bd:c7:cf:f8:14:
                    74:d9:56:59:9e:ac:6e:63:fe:b6:cf:16:8b:d4:c8:
                    93:ce:13:e8:0a:78:98:7b:9a:29:6b:d9:1f:ca:bc:
                    0b:58:8f:0a:10:ee:9d:f1:b8:eb:94:b1:07:43:9d:
                    0a:67:40:f1:6c:84:c3:a4:31:02:fc:f5:f9:18:17:
                    ae:3b:e5:53:17:d4:fb:3e:e6:1e:c2:dd:41:ad:61:
                    5a:66:a1:b4:b7:92:63:d4:70:30:56:f5:79:97:b4:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:42:58:19:9B:77:7B:7D:7A:8A:F7:63:16:1B:F6:36:69:CD:D0
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/D3EAA0323F5A11F1AA7533B3A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:4e:c8:12:5e:d9:3c:77:a5:5b:df:3c:b6:3a:53:a9:6b:
         f5:d8:f4:87:f2:6b:c2:33:cd:2f:ff:13:00:49:50:53:5c:fc:
         d2:0a:b0:22:6d:23:30:c4:ee:70:a2:2b:32:3d:78:b5:80:82:
         e2:be:fb:52:bf:43:38:a9:0f:80:96:dd:c5:1a:72:44:8b:72:
         da:fb:9f:08:b8:7e:29:3e:7b:d2:79:bc:53:44:28:b1:14:b9:
         88:03:e3:27:14:ed:12:b7:05:22:17:1c:67:0c:55:76:c4:65:
         fc:99:2c:77:b5:20:e5:21:14:ae:98:e1:d9:a3:66:e7:60:c2:
         eb:69:65:50:e6:7e:80:50:58:e6:d3:e0:16:a7:b8:5a:0e:c2:
         9e:aa:81:e6:2a:9e:da:40:b5:06:e0:0f:1d:6e:0c:7e:90:40:
         e2:bb:98:24:f1:29:69:3a:9b:ef:22:c1:34:1c:45:1e:6c:e7:
         01:79:dc:8e:59:28:c8:1e:30:a4:4c:3b:09:be:43:4d:36:74:
         80:3a:fe:66:27:e4:74:d6:31:b3:2a:94:df:3d:80:56:4c:4c:
         18:aa:ad:80:f0:ea:84:c4:8e:98:79:f6:bb:23:33:ec:0c:f1:
         eb:d3:cf:a4:4c:a0:94:30:a6:58:13:f8:ee:e9:5a:be:9c:0c:
         8f:ae:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:22 2026 by rpki-client