Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa
File:                     0328D1B21D3611F1B8D3A442193D8C67.roa (raw, json)
Hash identifier:          uwx5Uyp3HSjYikMkihiCICXAEqHIxuOwCFMRAQyMQ4Q=
Subject key identifier:   FC:34:6D:D5:D2:FD:7B:2C:1B:65:30:8C:66:19:69:C3:93:94:C0:B6
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0CEF
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa
Signing time:             Wed 11 Mar 2026 10:35:24 +0000
ROA not before:           Wed 11 Mar 2026 10:35:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151476
IP address blocks:        103.115.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Mar 11 10:35:24 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69b1456c-105d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:5c:4c:df:c5:e5:5c:5f:2a:44:4e:81:e4:
                    a7:7b:ad:51:75:25:c2:a9:07:37:83:14:b1:2a:24:
                    0c:a4:f6:62:68:e9:cc:4b:ce:54:4b:f2:4e:85:ff:
                    69:dc:84:47:ae:b4:77:8b:6f:a5:31:8f:57:89:2f:
                    b9:18:da:56:0c:d9:19:ed:c3:c0:4d:cd:59:92:9c:
                    a0:d7:ea:59:99:76:0f:1d:55:18:b9:ff:d2:82:db:
                    cf:d0:55:ff:a4:b6:41:e8:a5:22:38:48:b1:d6:b5:
                    ea:c4:b3:72:18:88:1e:0b:50:f8:e8:6a:a1:bb:8f:
                    24:71:a5:f8:6b:a8:52:af:ee:48:af:65:f7:91:a6:
                    cb:83:2e:73:c2:29:a7:7e:d5:19:1b:79:44:ff:3f:
                    b2:a4:cc:7a:b4:d2:24:16:6c:9b:05:3e:12:64:c3:
                    6a:82:e5:bf:da:92:f4:6f:08:4d:f8:bd:fb:ba:12:
                    20:e2:a4:de:82:76:00:64:fe:ec:b7:29:aa:ee:ee:
                    66:70:87:d6:02:43:9a:6e:81:95:45:34:36:01:f5:
                    9d:f1:80:f9:22:c6:8d:e4:20:e7:f4:8c:fe:e9:62:
                    d9:ae:7e:50:a8:0f:cf:91:9b:3b:3e:cd:7d:f7:16:
                    b2:1b:8b:2f:ac:f3:a4:f3:61:cb:cd:d9:71:b1:d8:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:6D:D5:D2:FD:7B:2C:1B:65:30:8C:66:19:69:C3:93:94:C0:B6
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/0328D1B21D3611F1B8D3A442193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:36:1c:44:12:6c:0c:bf:bf:30:62:34:fe:f0:da:2f:ac:
         34:26:e3:e9:10:aa:fd:0a:58:71:2e:5f:66:00:29:2a:53:f5:
         ef:88:dd:30:e4:f3:72:76:c0:c9:d7:a8:3d:bd:e9:b9:c8:f2:
         d8:50:c2:db:f1:3e:7c:75:d7:46:32:69:78:98:fc:36:fd:03:
         df:f4:f9:de:f2:ee:96:5d:36:5f:3e:07:4e:65:b2:ba:68:2f:
         7b:ed:25:44:7f:8d:38:4f:fa:42:7b:e5:ca:54:63:0e:13:a9:
         74:12:6e:e2:20:24:58:0d:d3:e4:33:9c:4c:da:42:45:52:fe:
         51:30:a9:79:57:67:11:c6:f1:98:a5:d9:2c:be:c5:ca:44:f8:
         dd:9e:6a:8f:b3:83:a6:5f:e6:01:02:7c:1c:d0:8b:65:6b:fd:
         02:d7:5b:31:10:48:b8:d6:33:fb:fd:61:a6:f4:73:71:5c:0b:
         77:99:f3:43:77:46:b0:ba:d6:d4:26:17:b0:32:17:e9:f9:b8:
         08:bb:a8:97:bc:3c:dc:ad:1c:6c:76:3f:a6:0c:2c:d2:2e:ee:
         a8:a8:4b:3b:7b:de:c3:19:03:b2:26:05:7d:8a:cd:d7:82:5c:
         3d:dc:f1:bf:3f:5f:4f:5e:96:1a:bf:53:a4:ac:e6:ac:81:90:
         bd:d1:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:44 2026 by rpki-client