Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
File:                     45865ED62B7411EF9E28ED19C4F9AE02.roa (raw, json)
Hash identifier:          xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=
Subject key identifier:   F9:EF:E2:C0:67:14:1D:EC:3F:5F:49:41:1C:AA:E3:0A:69:A5:87:DF
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1F34
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
Signing time:             Sun 26 Apr 2026 16:19:04 +0000
ROA not before:           Sun 26 Apr 2026 16:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149515
IP address blocks:        103.74.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
                          rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7988 (0x1f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: Apr 26 16:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ee3af8-eccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:07:e8:6d:52:04:92:b8:46:38:4f:e4:a4:
                    4a:d7:c8:60:7b:e5:4d:bc:d0:7d:48:4f:5d:d2:60:
                    26:0c:6f:fc:ce:cb:17:17:df:30:19:70:7b:90:53:
                    58:2e:2d:b4:eb:79:24:a1:ca:a3:e4:04:aa:89:fa:
                    94:00:0a:7e:3f:7b:38:4b:12:e3:60:d4:1c:2a:39:
                    12:54:f0:b0:3e:fc:6a:65:85:8c:b5:75:0f:c3:a6:
                    d7:ac:e0:1c:66:e0:44:5c:68:47:88:6f:32:09:9e:
                    18:ea:56:83:55:75:42:10:b0:f0:f2:1b:ec:38:00:
                    75:55:ec:37:fb:5e:48:b9:66:87:37:ab:22:4a:81:
                    e8:fc:90:06:3a:58:8b:43:17:1d:c1:11:10:a3:52:
                    99:8c:dd:ad:55:f1:9d:c8:9d:6a:87:53:1d:1a:fe:
                    b1:40:05:27:c6:9c:69:78:cd:5f:2b:5a:57:b0:41:
                    91:13:26:be:56:e1:7a:76:a0:9e:57:a1:3b:cf:c2:
                    02:1d:9e:1c:41:a1:2f:c5:f7:47:e6:0d:14:f7:fd:
                    92:0b:b9:67:46:8e:5e:50:cd:16:91:e1:32:c8:26:
                    37:d2:11:1d:aa:37:b1:ef:79:fb:8f:a4:95:3a:26:
                    aa:c6:c3:68:02:43:3b:e8:cd:54:5d:b1:0b:78:17:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:E2:C0:67:14:1D:EC:3F:5F:49:41:1C:AA:E3:0A:69:A5:87:DF
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:60:91:c0:5f:01:4d:0b:97:05:a9:cd:dc:e1:4f:bd:3e:bc:
         d8:c9:ca:66:64:df:ed:41:e3:67:df:50:53:d7:ba:37:e9:67:
         45:f9:fe:84:af:80:6d:91:6d:9d:16:80:47:62:34:66:f1:0b:
         40:9d:ac:c3:59:88:5e:4a:35:bb:43:09:43:0c:bc:56:82:fd:
         5b:40:7f:b4:e0:ee:fe:fa:72:a8:d6:03:69:0a:93:88:e1:e4:
         a5:52:9f:25:92:bf:d4:58:a3:b7:a7:46:29:bd:d1:63:fe:0d:
         f0:05:02:62:be:b0:a9:fc:4b:3a:4c:0d:23:d8:76:de:85:e3:
         1d:7e:24:58:a5:92:96:0a:12:bb:53:2a:02:c5:d6:35:b7:ab:
         e6:5c:8f:76:21:7d:0f:25:33:31:38:39:85:e3:d9:53:8d:6f:
         99:f5:0d:ff:f9:a3:10:6e:89:13:9f:ae:08:cc:68:44:a4:c2:
         ba:ae:8b:08:c8:ae:74:4a:e2:21:12:f3:56:6a:f2:15:6b:31:
         b0:df:15:b6:6b:b9:fe:f5:05:73:dd:06:1b:e2:fc:5d:9a:01:
         08:14:5d:8c:4c:23:2b:42:f7:ce:c8:8f:c0:f6:e0:98:63:9a:
         0d:a3:85:f6:fa:5d:eb:04:ff:61:8b:38:c1:92:fe:b5:2a:03:
         85:0c:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:23 2026 by rpki-client