Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa
File:                     C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (raw, json)
Hash identifier:          XhHaHdOlqWYP1wfuj95iHXOiSFz6V8DkPjaDxpfW1i8=
Subject key identifier:   39:11:98:48:59:A5:FD:81:80:D9:4B:81:7E:D3:A2:B9:26:88:0E:80
Certificate issuer:       /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial:       0282
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa
Signing time:             Sun 19 Jul 2026 03:28:42 +0000
ROA not before:           Sun 19 Jul 2026 03:28:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151614
IP address blocks:        103.238.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
                          rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
        Validity
            Not Before: Jul 19 03:28:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5c446a-07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:95:8b:40:b1:78:1e:fc:c6:ee:98:97:ff:
                    d6:16:3d:97:47:aa:df:1f:03:0b:80:e7:cf:b2:6e:
                    26:68:47:e1:f7:d8:00:c2:74:4f:90:90:f7:93:02:
                    61:29:8f:af:e5:52:ed:ae:dc:3f:51:dc:99:b4:52:
                    68:16:90:c1:f7:46:c7:a7:fb:c4:9d:03:65:ee:d4:
                    76:e5:be:b4:e3:e2:2a:23:06:91:11:43:ee:fb:68:
                    2c:fe:e2:a2:12:96:ae:68:70:bb:5e:07:4d:05:70:
                    65:44:c9:08:6d:d5:4f:26:9b:32:af:69:96:4f:46:
                    2b:78:d6:dc:14:52:62:b3:c6:51:d1:0a:2e:86:14:
                    c8:82:d5:bf:5d:28:95:40:94:49:91:5d:94:b9:63:
                    d8:c5:d9:bc:e8:d6:1f:ef:ca:eb:fc:15:1d:c1:5e:
                    f4:a8:e1:c6:88:28:65:61:07:78:10:cc:3b:0e:65:
                    71:f3:b8:7d:af:21:a7:85:e7:d5:d7:f7:f4:7e:c1:
                    6f:b1:2b:c6:08:90:ea:fe:ee:57:17:15:7f:4c:a7:
                    33:8e:72:b7:80:12:41:21:70:1e:d5:d7:1c:65:a9:
                    96:8a:6e:b5:67:ab:6a:35:8f:e9:7a:44:00:c5:9a:
                    1e:21:df:85:94:19:ed:44:c3:ce:de:95:3b:14:3b:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:98:48:59:A5:FD:81:80:D9:4B:81:7E:D3:A2:B9:26:88:0E:80
            X509v3 Authority Key Identifier:
                keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:b4:40:08:96:c2:d1:85:8c:e4:f1:af:5b:6f:91:58:a6:
         59:fc:4c:cd:54:b3:7c:00:19:5b:2a:5c:79:1a:6d:e1:7c:e8:
         b2:a7:a5:38:a7:50:b9:5a:2a:66:43:cb:eb:0f:9d:54:44:b4:
         3b:01:48:2d:37:40:22:fb:90:d1:9e:72:9e:15:8b:07:ee:d4:
         07:a3:d8:db:bc:07:21:d4:6d:29:6e:9a:78:0f:97:7f:67:16:
         fd:7d:51:db:65:76:87:0c:a3:3f:90:2b:4e:81:46:64:ac:b7:
         3e:d3:6a:84:4f:93:52:7c:b5:d4:dd:7d:28:64:b5:94:33:96:
         c2:70:5d:e3:49:b9:02:2b:bd:fd:61:fa:bf:25:a0:19:f0:96:
         90:6b:f2:1c:71:1b:d4:08:80:ae:d9:b5:31:15:41:85:a8:30:
         65:a0:d6:4e:7a:0a:62:ac:ab:ec:33:2d:41:86:fd:5e:7e:36:
         82:4f:0a:00:e1:5c:2d:cc:72:db:16:75:5b:35:d7:c3:79:90:
         69:1f:d7:3e:b3:1b:23:66:07:d6:3e:f9:bd:13:92:0f:f0:2c:
         a2:ce:df:59:39:88:bb:dc:b0:5a:76:dd:ab:54:0d:48:be:d5:
         2b:41:1b:64:6e:82:be:77:c8:c0:b8:74:b4:06:18:5e:bd:ef:
         fb:0b:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:41 2026 by rpki-client