Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa
File:                     4D56512423F411F0A37D240FC4F9AE02.roa (raw, json)
Hash identifier:          /rlRMEuuU8IVFhcFzcIT8poklHBZtYEMlJLMPNMBKdo=
Subject key identifier:   7D:F0:0B:67:CD:10:40:26:D8:46:91:41:E3:E0:E2:2F:37:AD:D6:C2
Certificate issuer:       /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial:       0B93
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa
Signing time:             Tue 28 Apr 2026 20:25:08 +0000
ROA not before:           Tue 28 Apr 2026 20:25:08 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     135310
IP address blocks:        103.148.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
                          rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
        Validity
            Not Before: Apr 28 20:25:08 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f117a4-9bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:48:5c:58:d9:c7:ee:f3:8b:3f:87:75:40:
                    26:bd:9e:85:f2:ed:f3:aa:45:59:c1:3e:1f:6f:2b:
                    25:8d:82:95:38:8c:86:f7:1f:34:d3:29:08:39:a7:
                    ba:93:f7:b4:16:da:e5:b8:bc:69:ab:47:d6:64:bc:
                    f3:75:ad:36:dc:52:44:cf:f7:f3:90:59:4e:a2:52:
                    d1:65:ea:4a:fe:96:6d:1d:bd:09:67:12:fa:9a:b6:
                    e5:f5:94:da:bb:78:c9:75:bd:cc:3b:31:d3:f1:4f:
                    59:01:33:79:df:45:fb:d0:ab:48:35:1c:41:89:d7:
                    b3:e5:e2:43:ca:5b:85:b4:44:70:2f:fa:f0:77:4b:
                    51:1d:7a:a6:2b:57:51:3e:d6:9b:b1:28:77:7f:23:
                    ba:36:78:96:d9:29:b1:d5:95:66:6f:82:f4:29:cc:
                    ae:ac:aa:aa:eb:f9:8c:01:5a:66:8d:b6:7f:85:69:
                    f1:f3:04:f5:1a:73:48:b2:33:43:f3:09:6a:70:c5:
                    16:95:0e:e9:ea:50:6f:3c:4f:27:6f:0d:f5:14:bf:
                    2e:a6:be:61:e8:4e:8b:0d:59:56:9d:b7:75:e7:ee:
                    df:b6:eb:80:0d:d2:af:19:7f:06:98:1f:6e:c8:c6:
                    b1:93:6b:ca:50:37:5b:61:0c:a7:a7:43:0e:dd:2b:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:0B:67:CD:10:40:26:D8:46:91:41:E3:E0:E2:2F:37:AD:D6:C2
            X509v3 Authority Key Identifier:
                keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:68:fc:67:7d:28:76:02:e8:43:b8:4b:3b:c9:3b:aa:92:12:
         be:9b:04:7b:20:ba:5d:50:e4:b8:e5:4e:12:7e:b4:ba:23:c0:
         2f:21:13:e1:f0:d7:1a:6a:79:a5:c6:1e:9d:6a:49:84:92:ba:
         7b:a8:68:87:95:8a:a7:5b:f2:97:4b:6c:0a:61:16:13:a8:3a:
         bd:fc:25:e8:bb:02:42:97:71:66:66:f5:63:23:10:ff:5f:46:
         0d:51:27:b8:3b:7d:1b:2b:86:1f:bb:3d:ad:51:39:dc:be:cc:
         1b:7f:42:4f:5f:28:5b:d2:d4:a5:2a:ee:ad:3d:cc:92:99:36:
         5e:05:c7:84:dc:62:b7:3a:ec:47:52:83:c9:aa:de:4e:37:70:
         34:36:ac:f3:a7:c7:b6:13:5c:31:03:bb:0b:f6:d8:b7:88:21:
         b0:ff:8c:10:fe:0b:ef:f7:8a:71:e7:73:11:29:1f:f0:c1:1a:
         2a:50:f8:8d:3d:cb:3d:97:a9:fa:7f:0e:84:27:43:60:54:a4:
         19:80:d5:dd:79:d9:f1:11:1f:93:df:37:d2:23:a3:6b:74:39:
         ea:d5:3d:8c:24:9b:f7:c8:2e:82:96:66:8a:c4:f0:7f:1b:0d:
         b5:2b:44:20:79:33:db:6d:4b:c7:e9:7e:81:fe:56:7e:b5:d8:
         b9:4e:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:23:23 2026 by rpki-client