Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa
File:                     305EB30EA98D11EF8C023466C4F9AE02.roa (raw, json)
Hash identifier:          k13/oiDM+4Sed6PAxjKJdfsAARWmsAIGq3EH0KkUFBM=
Subject key identifier:   33:D3:2D:AC:B0:80:1E:EB:CB:25:B6:78:67:28:27:EF:2F:3A:02:96
Certificate issuer:       /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial:       0143
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 07:33:04 +0000
ROA not before:           Thu 23 Jul 2026 07:33:04 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151661
IP address blocks:        103.253.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
                          rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Validity
            Not Before: Jul 23 07:33:04 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a61c3b0-59df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:61:fa:d2:e8:e1:e5:0e:b8:15:f4:23:ef:
                    ca:90:f4:4e:7b:72:b3:93:ab:2d:65:71:13:ab:ef:
                    29:cc:96:1c:26:a7:43:df:dd:4a:be:01:a6:be:b4:
                    d4:8d:ee:f6:6a:32:2e:9f:eb:1c:30:ff:be:e3:44:
                    20:5c:b2:5e:74:14:4c:4a:33:44:8e:23:a0:9f:84:
                    e7:f2:ef:62:34:b9:16:7f:50:a4:e9:a3:b2:7e:39:
                    7d:02:98:4c:e6:f4:e2:46:13:37:f3:f5:3c:bb:d4:
                    e7:07:c3:e0:91:87:c3:59:9d:74:13:e3:2c:12:66:
                    a9:5e:9e:43:c9:48:fd:8b:1c:88:c1:87:c4:1c:65:
                    48:92:ee:96:9b:df:b5:05:90:b1:b7:f5:23:b2:34:
                    03:ac:7e:03:02:3c:f0:d1:39:0e:0d:7b:cb:68:60:
                    6b:a9:85:08:de:6b:b2:f4:de:c3:6f:a0:fe:94:08:
                    80:bb:36:61:ca:6e:01:ce:fc:a9:4b:d6:e6:1d:a1:
                    b3:95:69:0e:92:08:14:77:77:f5:07:fc:69:68:00:
                    bd:47:89:5f:12:6b:2c:b3:24:c9:97:69:1f:a2:21:
                    6a:cb:83:f9:09:22:9c:3b:74:63:e1:90:e2:57:39:
                    80:76:83:6a:7a:12:81:de:74:7c:90:65:73:05:14:
                    ca:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D3:2D:AC:B0:80:1E:EB:CB:25:B6:78:67:28:27:EF:2F:3A:02:96
            X509v3 Authority Key Identifier:
                keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:ce:87:e5:88:53:9d:17:39:ff:97:fd:2d:38:30:22:7d:
         2d:a5:8a:c4:50:94:d0:90:f1:30:3e:12:86:ff:e7:5e:f2:0a:
         01:bc:fe:cb:c6:3d:b2:e6:8d:09:da:97:c6:ba:b0:f3:ba:d3:
         64:70:6f:cf:36:8c:d1:34:d0:4e:8f:be:3e:a1:bc:8b:bf:89:
         d8:a0:b0:7b:2a:bd:73:69:9e:82:a4:de:81:0d:e3:46:ef:58:
         ec:a1:2d:55:a8:98:5d:7d:9f:5b:ee:e2:61:ee:1f:26:31:72:
         48:cf:52:46:87:e4:1c:8b:16:ca:d9:27:c0:f7:7c:50:b1:1b:
         5f:e4:98:8e:01:53:58:97:0c:a3:12:19:7e:37:05:d3:98:b1:
         8d:e2:96:d0:47:8a:ec:22:29:91:41:db:6d:36:39:7a:99:4e:
         72:5f:be:d1:a2:95:82:8e:9f:c4:50:6e:02:59:5d:1b:d8:6f:
         aa:8b:a8:e7:70:5a:a5:a5:7d:43:ed:10:a4:e7:a9:9c:5a:38:
         80:f9:44:ca:09:37:95:a3:eb:26:c5:2c:c3:e9:0c:0f:16:ff:
         e1:a7:fd:dd:96:f8:ba:e4:29:90:40:54:b7:25:9a:5d:be:d2:
         22:15:20:4d:a9:2d:9c:6a:d0:d0:0f:c7:23:ce:8b:a2:53:69:
         61:42:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:59 2026 by rpki-client