Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa
File:                     D79607EEDCDD11EE85DBEB12C4F9AE02.roa (raw, json)
Hash identifier:          8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=
Subject key identifier:   4F:8C:95:18:83:D5:26:A8:29:86:CC:68:CA:9C:44:B5:9C:00:3C:0C
Certificate issuer:       /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial:       3603
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa
Signing time:             Tue 12 May 2026 15:13:00 +0000
ROA not before:           Tue 12 May 2026 15:13:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132509
IP address blocks:        103.244.180.0/24 maxlen: 24
                          103.244.181.0/24 maxlen: 24
                          103.244.182.0/24 maxlen: 24
                          103.244.183.0/24 maxlen: 24
                          2405:f900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13827 (0x3603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
        Validity
            Not Before: May 12 15:13:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a03437c-1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:38:73:a4:98:b4:ad:b3:f2:ae:50:73:4b:
                    04:60:31:96:b3:b5:16:79:44:60:d1:25:d7:46:68:
                    80:a6:b9:28:b7:3a:38:da:f2:b5:91:f0:1c:d4:1e:
                    86:89:45:82:ab:c9:fc:63:b6:c9:31:c6:9d:e8:89:
                    65:88:3d:86:23:76:eb:7e:92:4b:da:54:e6:9a:dd:
                    bc:40:ab:85:02:0a:c9:4f:50:33:d4:4a:18:2d:51:
                    e9:7f:03:7c:63:3d:77:81:2e:48:de:7f:05:d4:ff:
                    e9:1c:1c:e3:78:8e:d2:98:7a:e6:62:a8:46:15:d3:
                    e6:ce:9b:13:58:67:57:6b:db:48:a0:48:07:2e:a9:
                    02:92:18:cb:fd:84:ad:6b:ab:95:56:e6:6e:f3:15:
                    8a:a6:ab:c6:02:1f:6a:96:ac:e9:46:ae:39:09:3d:
                    c7:11:c1:2c:ba:72:c9:28:31:c8:9e:ed:d2:46:52:
                    00:43:30:b0:99:81:8c:b8:ee:45:d1:0f:fb:60:b8:
                    db:52:c9:05:33:09:cf:c5:b4:c0:d4:dd:53:12:b2:
                    ef:d8:26:9d:a0:d9:59:24:69:2e:d0:d2:05:bb:8b:
                    d6:4c:da:52:2c:92:ab:91:56:70:d4:f7:c5:44:a5:
                    de:ee:b3:ef:7b:a9:05:a4:81:8f:f7:fb:b1:8d:a3:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:95:18:83:D5:26:A8:29:86:CC:68:CA:9C:44:B5:9C:00:3C:0C
            X509v3 Authority Key Identifier:
                keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.180.0/22
                IPv6:
                  2405:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:3c:c9:3a:0e:a1:b5:67:dc:f6:86:b5:3b:5a:f3:be:39:
         2b:37:3e:d7:27:49:63:00:f8:72:9d:90:b1:d2:a8:f9:3f:57:
         1c:1e:8c:ee:6e:57:31:40:09:ad:9b:5d:16:e7:ec:f8:84:88:
         77:c2:37:70:38:ec:58:bf:c4:65:d6:c2:6f:09:44:89:61:aa:
         1b:1f:03:73:34:e1:2e:5d:b2:8c:29:2e:b8:0a:59:87:75:1b:
         ca:71:14:a8:9f:c0:0c:08:ec:9a:b7:5c:3d:69:cf:a3:bb:1b:
         59:e5:2c:3a:1f:59:96:67:27:19:8c:fd:cf:d5:64:22:84:e7:
         d9:b0:b1:6a:b6:ef:a9:de:65:69:81:aa:5c:ed:bd:ca:29:a6:
         39:96:dc:96:5b:8a:87:11:8e:2d:dd:29:f3:8e:55:53:7b:19:
         d8:9f:c1:d5:3d:97:8c:bc:df:46:a1:60:c5:c1:16:46:41:e6:
         95:a0:b6:c8:f8:3f:39:37:01:43:f6:d5:cb:19:74:c7:01:4d:
         99:68:7b:1d:86:08:4d:3f:43:7a:da:92:bf:ce:94:65:23:aa:
         20:eb:f7:52:1c:aa:63:43:0c:36:a1:38:2c:8d:72:03:fb:59:
         f2:93:da:f5:30:52:d2:da:90:37:01:11:78:4c:ad:84:5a:3e:
         9b:f9:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:31 2026 by rpki-client