Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa
File:                     45D37CC28F8111EFB699FB63C4F9AE02.roa (raw, json)
Hash identifier:          OMf3bH3yxhVkJLXPWPpo+JeDue+AzlqHbjI50Pp8r90=
Subject key identifier:   1D:D6:39:CB:99:58:97:A3:87:1F:F6:A1:B4:71:3F:30:15:0D:C7:48
Certificate issuer:       /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Certificate serial:       0108
Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:53:16 +0000
ROA not before:           Wed 27 Aug 2025 06:42:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151495
IP address blocks:        103.234.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
                          rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
        Validity
            Not Before: Aug 27 06:42:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5964c-a961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:b0:60:0a:e6:41:1a:67:f5:77:b8:1f:2d:
                    23:1f:89:c5:f7:ac:c7:67:43:a4:23:f0:b7:0a:b8:
                    84:2a:ae:8d:45:5e:a4:88:87:8c:f4:6e:58:82:e0:
                    01:93:c5:af:17:d0:a4:4f:64:9d:c4:6c:a5:05:f3:
                    9b:68:28:1b:c5:a1:19:c4:66:af:9d:bf:fa:8b:72:
                    92:45:cd:5b:39:25:39:c9:5d:e3:a6:0a:3e:41:0f:
                    b9:c4:d7:de:42:00:41:37:21:28:82:a8:6b:cb:c1:
                    7a:db:2f:fe:59:50:7d:19:9e:e9:da:51:db:ea:e5:
                    0a:26:8f:f8:e0:66:e8:a4:8a:48:f0:3b:2b:42:b0:
                    d8:c9:19:65:96:b8:3d:fb:bf:94:dd:9d:09:a8:e2:
                    3c:98:eb:98:de:19:97:80:94:76:aa:33:98:6c:b0:
                    b9:fc:56:07:fa:94:5e:e8:1d:83:f5:16:d5:c8:9f:
                    9f:e2:f0:97:0d:76:6b:e7:bc:ea:ab:35:40:ce:75:
                    91:7d:9c:2b:98:c5:d0:79:12:de:ef:b6:75:76:46:
                    5b:e7:b0:65:93:d9:d2:54:6e:fc:a9:d4:8a:c1:a4:
                    ea:54:13:51:0e:d1:a5:53:98:e1:19:2c:7a:1d:61:
                    4f:30:db:e9:ae:ba:d0:1c:4b:df:1d:f3:e3:ca:8f:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:39:CB:99:58:97:A3:87:1F:F6:A1:B4:71:3F:30:15:0D:C7:48
            X509v3 Authority Key Identifier:
                keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:05:4e:2d:96:ca:15:62:3a:c0:8f:fb:33:22:5c:4f:91:d3:
         c4:e4:e5:78:39:d2:c3:a0:bf:b2:7e:69:47:27:ea:fe:1e:ab:
         c0:c8:f8:d1:3b:52:43:2d:4d:16:96:a7:eb:82:b7:bd:ed:82:
         d7:f6:b7:f5:e4:f4:03:2d:e2:b5:dc:ae:05:de:9a:fd:ff:f4:
         9d:9e:eb:38:a0:4b:05:a0:9a:b4:23:df:8f:69:ca:46:94:d8:
         cb:84:46:b4:54:da:28:e5:1b:a0:1f:e6:35:65:01:2d:e3:0e:
         8a:4d:a5:e2:b9:87:f5:08:55:57:74:07:5e:4e:29:0b:c6:f8:
         be:fa:17:00:38:98:a4:63:9a:58:98:86:ee:6e:1f:f7:ba:91:
         c6:8f:52:78:ae:1a:24:01:df:99:de:ac:5a:25:41:66:b1:dd:
         b3:81:59:92:91:36:fa:5b:88:16:3a:cf:2d:c8:4a:89:04:ef:
         ea:87:72:75:cb:35:b6:0c:09:28:6d:cf:a3:7b:29:06:60:68:
         dd:3b:7a:bb:85:4a:86:97:68:73:e7:c8:ea:f4:49:0d:95:74:
         22:47:44:50:42:c5:02:9f:e5:bc:59:d0:45:eb:0f:0d:f4:df:
         84:c2:de:fc:3a:50:c6:6f:a3:5a:d7:8f:28:d4:7f:55:c4:42:
         d2:42:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:18 2026 by rpki-client