Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
File:                     DFCE0CFC387311EBA0AC593EC4F9AE02.roa (raw, json)
Hash identifier:          TnSaLf+xgZHXFIsS72cUr6qVZqPyupzxKL+9myIDylQ=
Subject key identifier:   76:13:BB:E4:BE:97:E6:C0:40:6E:65:9D:A3:CD:FD:C3:6B:2D:AA:53
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       07D8
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
Signing time:             Sat 02 May 2026 22:26:52 +0000
ROA not before:           Sat 02 May 2026 22:26:52 +0000
ROA not after:            Wed 02 Sep 2026 00:00:00 +0000
asID:                     141447
IP address blocks:        103.159.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: May  2 22:26:52 2026 GMT
            Not After : Sep  2 00:00:00 2026 GMT
        Subject: CN=69f67a2c-4b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:80:dc:3a:43:4e:e3:cd:bf:85:b2:1e:52:
                    92:44:ac:67:a6:26:18:20:27:50:41:6c:bd:87:b6:
                    34:90:28:da:9b:8c:f4:d7:fc:e2:13:3c:90:a2:4c:
                    83:e6:c8:6f:0f:9a:2e:fb:2d:3b:d3:b6:aa:77:5c:
                    ad:2e:11:aa:04:1a:54:8d:ff:57:f1:a0:51:7a:b6:
                    bc:60:6d:83:10:c0:f4:ae:2b:f9:f4:cd:1f:f6:c5:
                    e2:0d:7f:f6:10:71:83:c5:bc:d6:f0:bc:43:d6:17:
                    43:f8:98:5a:60:83:ca:c3:c9:42:e3:7f:aa:3a:02:
                    92:3a:43:e5:d4:02:43:1e:d8:8d:80:8d:c0:be:1e:
                    c8:51:a4:4f:7d:30:83:b4:64:c9:7c:a2:a4:f9:74:
                    85:12:5b:94:ab:d0:6c:a7:17:78:d6:1c:0e:5e:e7:
                    e8:f5:c2:d9:77:5c:95:d6:c7:5e:93:f0:75:41:0f:
                    1d:bc:7d:91:e9:76:b9:d2:ef:15:14:37:a6:c9:af:
                    76:01:40:a0:cf:5c:87:7b:34:da:64:6c:90:ed:4f:
                    33:2b:c4:6d:75:ee:f5:a9:18:3c:ee:1d:90:8e:bc:
                    3f:6a:4d:3b:27:8a:ac:d4:64:80:01:46:70:29:44:
                    63:58:f2:d9:9f:ab:8d:0c:68:3a:e2:a7:e1:43:e2:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:BB:E4:BE:97:E6:C0:40:6E:65:9D:A3:CD:FD:C3:6B:2D:AA:53
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:89:18:11:38:63:92:f3:0b:77:f1:91:99:33:b2:ea:0a:10:
         4f:0c:cc:33:f8:30:92:d1:4c:11:8f:5b:2c:6f:2e:5e:5c:c0:
         63:03:46:4d:bb:87:04:41:40:65:33:99:62:74:c2:b7:a9:fd:
         d9:8f:73:c7:c9:21:9a:6a:e5:fa:77:3c:40:9c:44:32:f0:97:
         d8:6f:dd:ce:8b:76:dc:71:aa:36:78:ba:36:a2:af:59:48:98:
         15:36:6b:56:5e:7a:70:ad:27:d7:64:31:5d:1d:ca:4c:37:73:
         75:c6:a3:67:7b:61:8e:15:d5:c8:98:09:49:b9:6b:92:34:e7:
         d4:29:24:cb:6b:a6:d4:23:76:6b:de:60:71:6b:39:f5:ba:89:
         e4:f4:7a:ac:91:c8:3b:4f:d7:ec:b9:9e:0a:2d:95:4e:a6:7e:
         63:4a:24:c9:4b:6a:6d:ed:b8:1c:48:c0:c5:a4:a1:62:29:c9:
         5a:eb:ed:e1:f1:a0:e3:93:7d:93:e7:7b:7c:be:48:56:24:28:
         90:b3:df:97:e4:a9:9d:d7:bc:8d:cb:61:92:9a:c4:86:0b:4a:
         d8:4e:12:1c:e8:31:c1:90:d8:c2:63:8a:aa:bf:2d:eb:d9:71:
         76:4e:88:fd:37:0d:c6:32:25:a5:b6:f3:bb:08:38:4c:0c:4d:
         5e:c9:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:06 2026 by rpki-client