Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa
File:                     830C9F90EBCA11ECA2A1747EC4F9AE02.roa (raw, json)
Hash identifier:          3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=
Subject key identifier:   E8:30:19:0C:DF:A1:37:B2:8F:1C:AA:1A:BF:6F:B3:9D:0F:93:22:E3
Certificate issuer:       /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial:       0360
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:00:55 +0000
ROA not before:           Tue 01 Jul 2025 02:08:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149865
IP address blocks:        103.189.162.0/23 maxlen: 23
                          103.189.162.0/24 maxlen: 24
                          103.189.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
        Validity
            Not Before: Jul  1 02:08:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40047-034d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:6a:27:42:c2:ed:23:73:61:1f:0f:87:ee:
                    5e:b7:a5:01:6b:f7:ba:c6:f9:e6:13:a3:6d:b5:49:
                    74:5f:89:be:ec:c2:7c:3d:d4:a9:6e:9b:fb:93:f0:
                    12:53:70:2a:4a:e5:70:2f:a8:08:ee:cb:b4:ac:c2:
                    4f:f8:dd:71:4f:eb:56:95:4c:30:15:d7:40:86:b0:
                    32:71:42:fb:6c:8c:c7:5e:60:bf:1c:9f:e2:1e:61:
                    ae:ee:eb:1d:ec:53:c3:06:aa:7c:f6:14:ad:8e:90:
                    67:db:ac:17:2d:db:b4:c3:ce:ad:5e:41:fb:21:00:
                    34:d5:91:a7:80:4c:cc:3c:ee:ed:86:1d:f8:7e:88:
                    09:71:3f:53:bf:ef:14:e9:7d:c5:e6:45:dc:e0:2c:
                    c6:06:27:0b:e5:a5:cf:ce:0d:81:0c:46:a2:76:00:
                    59:3b:1f:b2:4d:54:98:5c:25:a1:ba:54:7c:39:6c:
                    5e:e9:77:b0:49:f3:9f:f5:ee:5b:7e:96:0d:4e:c9:
                    f2:e9:e6:4a:b3:15:77:4c:fb:96:6c:66:4c:90:29:
                    eb:59:ed:ee:d8:57:99:e4:e4:c8:2c:7b:e3:80:37:
                    7b:7e:84:98:ea:f1:f0:40:0b:c1:b0:b0:07:48:aa:
                    5c:9e:eb:38:e4:ec:f6:99:ca:f7:b5:58:cb:87:ac:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:19:0C:DF:A1:37:B2:8F:1C:AA:1A:BF:6F:B3:9D:0F:93:22:E3
            X509v3 Authority Key Identifier:
                keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:52:9e:86:0c:8b:58:c4:7e:3d:7d:ec:95:c4:f0:d6:84:
         b0:c3:44:c5:3f:85:1f:3e:46:da:c4:c1:43:00:a7:89:37:53:
         d9:46:fd:4a:cb:98:8d:de:d4:8b:89:6f:ca:54:c5:00:68:03:
         6f:3b:7b:16:9c:c0:96:b0:6d:bd:28:17:68:f6:69:3d:88:71:
         9f:33:08:c0:bb:23:bf:89:90:67:57:01:92:d9:40:14:34:f6:
         a4:34:92:b4:8d:03:9a:b5:a0:b0:19:77:45:17:4c:d9:4a:b7:
         90:44:bb:17:97:3a:4f:36:db:d9:f4:dd:1b:55:94:3d:4c:f8:
         a9:f3:24:f0:db:3a:68:cf:f4:11:6a:b1:98:5b:15:e8:d3:18:
         d6:12:d2:42:7b:6b:d2:3f:ff:a3:c3:53:04:3b:f6:1b:1b:a5:
         cc:eb:92:b7:ac:b9:6f:da:5e:f9:f3:81:9b:ed:35:14:13:d6:
         aa:84:d4:5b:72:51:3d:d7:7f:45:5e:36:e6:79:1d:f5:9d:ee:
         b0:87:c4:86:9c:c0:61:44:07:3a:1d:3f:0b:1a:9f:94:2c:36:
         f3:15:cd:d6:d8:5c:e8:54:b7:0f:38:33:ae:6a:ed:a7:1b:da:
         0e:2f:4a:c1:e9:94:ec:77:20:91:4f:69:45:a6:1d:8d:8f:80:
         b4:2d:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:26:13 2026 by rpki-client