Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
File:                     306CD346148D11F19BFA55B13D3D8C67.roa (raw, json)
Hash identifier:          QSEFrzyHThxfsuxeqGmvUKb+41WIgQBL8rivqG2479w=
Subject key identifier:   C3:1E:89:C6:23:0D:B2:77:1B:F3:E9:07:69:CF:81:0B:FA:4B:E1:92
Certificate issuer:       /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial:       0967
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
Signing time:             Tue 28 Apr 2026 19:25:28 +0000
ROA not before:           Tue 28 Apr 2026 19:25:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135310
IP address blocks:        103.111.166.0/24 maxlen: 24
                          103.111.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
                          rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
        Validity
            Not Before: Apr 28 19:25:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f109a8-ccce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:f0:78:84:a4:f0:00:1b:7c:13:93:9a:13:
                    1d:b0:1b:e3:df:b0:b8:d9:58:f3:3e:06:71:fe:60:
                    62:34:b4:87:61:d7:b8:19:3c:01:26:be:f3:6d:0b:
                    32:8e:84:4b:4e:d5:57:6f:e7:14:ec:cd:d3:85:98:
                    4d:1e:14:02:2a:13:69:ce:1e:5d:41:76:01:d0:2d:
                    34:4d:f0:90:84:60:de:cf:7f:f2:6d:22:d4:f3:e0:
                    86:71:d0:eb:a3:5f:83:18:fd:42:24:04:4c:3f:9f:
                    48:d5:40:74:cf:09:56:d4:4e:eb:52:30:1d:12:9e:
                    41:06:5b:90:a0:b8:97:25:86:a3:74:ab:7b:42:72:
                    57:08:ef:e8:6b:65:48:ca:72:c4:f9:85:f4:72:e6:
                    70:5e:ed:d3:bb:8d:c9:fd:0e:b5:e2:99:39:41:32:
                    a4:f3:99:88:10:60:55:31:51:af:46:18:e8:9c:34:
                    68:32:a6:7d:ce:ac:25:18:ab:07:d9:02:73:6c:14:
                    ee:ef:e0:7f:41:19:c1:bd:3f:7d:5d:e3:e3:50:89:
                    fa:15:69:56:57:02:d2:3c:88:de:2c:2f:81:c2:8d:
                    b9:f5:fe:e2:4c:e8:1c:dc:fb:5f:cc:17:d4:5a:ba:
                    e5:3b:a3:51:ee:3d:60:5a:27:e7:1e:81:92:a3:78:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:89:C6:23:0D:B2:77:1B:F3:E9:07:69:CF:81:0B:FA:4B:E1:92
            X509v3 Authority Key Identifier:
                keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:52:12:80:a7:88:74:ba:aa:48:8f:0d:29:5c:b3:54:12:
         d0:cf:d6:8b:d1:a5:2d:04:1f:6f:78:e5:a2:75:91:b5:64:a3:
         9f:b8:10:15:22:36:da:84:e1:04:50:90:56:ce:b7:ba:c4:6d:
         c5:62:77:c2:c2:84:85:e0:9c:f8:12:2d:91:5f:bf:bb:ba:4e:
         57:c5:b2:f3:1e:20:a2:a2:ed:6e:3a:11:70:19:40:d8:42:67:
         4d:15:c0:5f:68:dd:f7:74:30:4a:ba:6e:82:c8:59:e2:74:67:
         ae:e8:b0:16:6f:a8:42:6a:b2:0d:a7:37:25:e5:1f:28:a3:fd:
         c9:85:83:0f:b7:df:5b:a0:08:7e:ad:98:72:c5:52:73:e0:68:
         41:91:b9:65:b1:3a:0d:f4:64:9e:83:0d:4f:8f:ca:5b:54:9d:
         fa:bc:32:56:87:ea:ea:84:16:f0:14:16:6f:1f:52:29:0d:61:
         c3:a8:3e:46:ac:5e:32:75:78:d3:8c:1b:2e:69:f3:94:28:99:
         b9:5c:61:0f:b4:18:3a:8a:48:1b:4a:b0:75:12:c8:e1:48:da:
         87:37:4e:03:92:27:5e:1e:af:2d:af:ae:ca:92:22:03:9f:71:
         f1:c1:3b:90:f1:8b:52:97:d2:a3:14:fb:f8:90:c5:d8:70:d3:
         0a:f7:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:29 2026 by rpki-client