Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2D6E98583F0511F1B91814A8C9833773.roa
File:                     2D6E98583F0511F1B91814A8C9833773.roa (raw, json)
Hash identifier:          cvsxFrKYwzXfmPTCt/kaQm7QbHYPT/Bov3jLYon6Aw4=
Subject key identifier:   3E:E7:D9:6F:3A:DF:85:26:C7:C4:EA:C6:06:B2:85:7C:4E:38:10:BA
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       0154
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2D6E98583F0511F1B91814A8C9833773.roa
Signing time:             Thu 23 Apr 2026 11:11:29 +0000
ROA not before:           Thu 23 Apr 2026 11:11:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153517
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Apr 23 11:11:29 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69e9fe61-6c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:e1:a4:1e:b3:aa:25:5d:4f:d2:7d:16:e5:
                    e8:6b:34:3e:29:fb:60:c0:e6:25:80:f3:11:cb:35:
                    c3:65:e0:86:3e:05:ee:fa:4c:c6:ee:59:d6:1e:68:
                    00:61:da:1d:72:9f:d6:57:1f:21:bb:40:19:15:b8:
                    cf:41:8d:9b:2e:c4:99:dd:fd:72:28:63:56:ad:6f:
                    75:85:27:8d:a2:8c:5e:e6:a8:a4:3e:72:4f:20:80:
                    73:b7:b2:3a:ba:f5:1c:ce:82:30:35:02:ed:35:2c:
                    45:1b:8c:7a:e5:55:b2:5e:c9:e0:e5:77:f1:f4:b3:
                    9c:ff:d5:ed:04:fd:dd:cc:89:2e:77:f9:44:3e:06:
                    64:3b:38:87:52:73:53:f8:38:af:8a:43:34:fa:90:
                    2b:26:20:26:5c:5a:7a:73:71:1a:b0:06:21:17:86:
                    45:f1:1d:3a:28:2a:02:23:3c:0d:f0:99:a3:f6:d6:
                    fa:eb:78:bd:bc:0d:73:42:46:f2:6b:51:1f:42:4e:
                    86:77:6f:f4:3d:d7:25:67:a7:a6:8b:d5:b8:60:d3:
                    83:77:9b:1b:93:23:ac:f2:ce:d6:99:5b:e1:c7:23:
                    9c:bb:6f:96:57:ef:24:a9:1f:bd:d7:ed:99:ae:e1:
                    1f:1c:9e:8d:77:b5:d9:42:59:c3:a1:cf:7f:90:b6:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:D9:6F:3A:DF:85:26:C7:C4:EA:C6:06:B2:85:7C:4E:38:10:BA
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2D6E98583F0511F1B91814A8C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:96:21:e7:5e:f6:2d:8c:5f:c6:fa:04:c6:de:3a:76:31:
         9e:f0:1e:e3:09:ea:b8:1c:a1:0d:0f:cd:88:d4:0d:6a:3d:f0:
         7c:36:dc:f9:d3:b8:00:3f:87:e9:da:33:83:9e:1b:51:c7:bb:
         03:5f:91:5e:cd:06:bc:0d:28:b7:c7:ba:2c:6a:98:0c:30:6a:
         a1:36:bb:71:8f:fd:a2:94:db:8e:4b:e0:d5:93:e6:4e:7a:6b:
         3f:ab:ac:3e:76:77:1b:90:e5:df:87:ce:22:b4:7f:49:55:55:
         67:c2:5d:6b:80:85:ef:b2:81:04:c2:54:99:be:3b:62:38:d0:
         44:e5:c2:91:0c:13:d1:9b:5a:dd:18:83:f4:2e:e1:c3:d9:68:
         24:bd:c4:30:59:11:df:c6:8c:30:23:b6:66:17:73:dc:c7:72:
         65:44:61:dd:22:f7:a9:89:16:bf:d4:3a:20:73:eb:b5:22:e7:
         fd:01:d6:39:bd:a1:e6:b6:41:05:6e:e3:60:27:2c:f8:d3:b9:
         9c:55:78:25:97:6d:11:e1:d3:f1:09:fb:5b:37:2f:01:a4:25:
         6d:f8:3d:e5:66:2e:97:cf:49:f8:80:56:a8:26:ad:f7:74:fe:
         0d:a7:41:10:bc:00:0e:2b:00:99:b6:bb:59:55:5b:01:c5:c0:
         29:de:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:28 2026 by rpki-client