Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa
File:                     D13F8D3A3C9811F1A7092461A3833773.roa (raw, json)
Hash identifier:          Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=
Subject key identifier:   37:A6:D2:86:78:A0:EC:65:2E:4F:64:D7:24:F5:46:45:1E:71:28:9E
Certificate issuer:       /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
Certificate serial:       03
Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa
Signing time:             Mon 20 Apr 2026 09:10:47 +0000
ROA not before:           Mon 20 Apr 2026 09:10:47 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137448
IP address blocks:        103.146.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl
                          rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
        Validity
            Not Before: Apr 20 09:10:47 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e5ed97-fa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:d4:12:f0:ae:b5:95:29:73:0f:3d:d7:de:
                    d5:6f:43:ef:98:e8:38:8b:04:cb:14:dc:0a:c7:4e:
                    b7:3d:4d:fd:f0:aa:e1:c2:b1:86:f0:88:cd:24:16:
                    f4:34:bc:c9:f9:b0:d8:04:15:ac:31:db:64:c8:87:
                    24:6a:9e:da:f4:e4:a0:3f:ca:93:90:75:18:ac:de:
                    f7:46:90:eb:28:c3:45:47:6c:35:70:2c:d6:64:e7:
                    0e:82:ea:60:cd:c5:a4:24:25:7c:56:3a:14:f0:51:
                    9f:ad:4a:26:4b:22:85:aa:5c:24:5d:8c:a0:27:44:
                    30:c8:9f:f4:3d:33:ec:f9:d1:d8:b8:49:b3:07:e1:
                    1e:0c:7b:33:e4:bb:35:d0:1c:3c:12:aa:43:9e:5d:
                    d4:95:ec:0d:96:79:ce:c1:be:93:22:ac:6f:04:a7:
                    c6:71:03:8c:cc:34:43:e5:be:31:e8:4c:5b:f4:b4:
                    af:48:b1:ce:4b:95:e0:ae:3f:f0:2a:52:39:5e:36:
                    ae:99:9d:d6:d3:45:b7:bf:e9:c0:7e:1c:8f:86:a9:
                    2b:b2:25:66:4d:87:f9:1d:d9:6d:9f:01:f7:d7:3b:
                    57:c9:02:05:f5:da:32:39:ba:a5:f8:13:3e:00:bc:
                    e3:5a:2a:1f:e4:58:5c:17:51:8b:51:54:2a:5b:41:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:D2:86:78:A0:EC:65:2E:4F:64:D7:24:F5:46:45:1E:71:28:9E
            X509v3 Authority Key Identifier:
                keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:03:60:46:da:0f:65:c0:af:18:d4:9f:21:e2:00:04:c7:93:
         80:4e:71:f9:00:8c:65:b9:6e:4b:1e:e1:ed:cc:93:e0:48:1c:
         6f:1b:e7:88:ea:89:68:20:46:66:8a:d0:52:16:bb:20:d5:91:
         a6:d2:44:6f:fd:9d:a3:42:ff:93:b1:64:98:3d:f6:51:ed:da:
         8f:85:40:d0:b2:cf:32:e5:a0:e2:91:e3:d4:d1:99:49:20:d2:
         60:f3:e5:d1:6e:4d:41:fe:cd:23:6c:bb:da:23:50:44:27:94:
         e1:11:b9:f8:8b:69:13:fb:23:78:9c:30:03:7b:ff:41:6a:84:
         0f:2b:13:02:cc:c3:54:7e:a0:0c:53:b5:ed:c6:7d:41:21:93:
         2e:12:7b:02:71:0f:ae:7a:39:a7:3b:10:69:67:67:a9:66:65:
         b1:79:b2:c0:d5:6a:3d:34:c7:13:24:5b:f3:4d:ab:f9:8b:6a:
         25:61:2f:04:3e:fa:15:04:23:eb:e8:d9:f8:b0:af:91:b1:b2:
         68:59:be:b7:21:46:1d:59:46:d7:78:2c:02:45:6f:e4:f9:a5:
         f4:e2:be:76:1f:75:8c:76:1f:b5:d1:b1:6e:af:24:f5:9e:5c:
         bc:80:67:16:0b:0e:b0:c6:f1:c7:87:bb:07:10:57:ad:92:dc:
         cb:4e:00:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:58 2026 by rpki-client