Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa
File:                     E32E2F000EE811EE90BBC818C4F9AE02.roa (raw, json)
Hash identifier:          o9QOTY0z3HoO1T81xq5TYdHmjJWor4MMo3R90enA53U=
Subject key identifier:   32:D7:ED:AD:84:4C:87:B0:40:AE:C2:2F:CD:2B:56:FD:94:BE:9D:2B
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       0A28
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 20:25:29 +0000
ROA not before:           Tue 30 Jun 2026 20:25:29 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134160
IP address blocks:        45.115.232.0/22 maxlen: 24
                          103.56.12.0/22 maxlen: 24
                          103.225.216.0/23 maxlen: 23
                          2402:4880::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: Jun 30 20:25:29 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a442639-6484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:0e:1b:25:ab:29:83:61:75:01:5d:52:0a:
                    26:fe:2d:17:78:6e:7c:dd:48:17:68:ee:38:c6:10:
                    27:bd:95:74:f6:1d:e7:2a:44:44:fa:e6:46:95:c1:
                    4d:bb:3f:c1:ed:c2:7e:b0:6c:0a:50:6a:7e:52:43:
                    9a:f3:94:8e:d4:26:6f:e6:e5:c2:3f:c2:10:4f:fd:
                    de:ca:00:88:f3:29:5a:6c:79:e3:6c:c4:7e:8f:e7:
                    fd:79:84:f2:d6:df:3d:73:d3:9c:45:ab:94:b0:fa:
                    80:98:49:47:df:5f:ad:3b:23:f0:99:75:7d:13:dd:
                    f8:89:ab:a1:92:16:c8:e3:5a:6c:08:32:16:60:1f:
                    7e:45:22:df:64:26:c9:5e:29:d7:4c:86:cf:aa:25:
                    86:b9:b2:f3:ea:25:00:66:2a:fc:61:71:c0:b7:3f:
                    35:50:35:ef:64:f2:c2:51:32:ea:a7:38:1f:8f:ae:
                    a3:9a:88:e7:a1:17:52:93:4f:30:fd:2f:8e:5c:93:
                    be:c2:ad:c0:6c:f6:09:1d:c4:e2:5b:92:18:6e:6f:
                    4e:fe:b4:75:70:39:a5:68:ac:40:2c:82:90:44:06:
                    c7:27:fe:63:79:79:7e:d1:ad:a7:37:50:69:05:a4:
                    e6:6c:3d:cb:af:55:29:80:95:f4:cc:8f:2c:7a:b7:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:ED:AD:84:4C:87:B0:40:AE:C2:2F:CD:2B:56:FD:94:BE:9D:2B
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.232.0/22
                  103.56.12.0/22
                  103.225.216.0/23
                IPv6:
                  2402:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:57:72:31:6b:55:1f:9f:ec:d2:d0:21:f5:b5:da:0b:dc:51:
         e8:78:8c:83:c8:36:c8:11:ad:69:28:53:12:f0:59:4d:49:c6:
         0d:c8:f6:83:e6:84:61:47:c4:aa:29:fe:af:3d:f7:46:94:3b:
         5c:09:d7:65:7d:ac:0e:e5:ce:5c:fc:21:64:34:31:45:1e:d1:
         5f:9e:6b:e7:06:ca:f6:95:d7:fd:8a:8d:53:67:b8:59:26:dc:
         05:37:66:66:7f:47:cd:0a:21:87:75:70:ea:31:e2:0f:ee:d1:
         3c:a3:e9:21:54:66:17:33:4c:73:81:d9:5f:f1:64:3a:00:de:
         6d:9b:3d:39:ce:d3:8d:55:06:ba:44:fe:fa:66:71:cf:54:6e:
         3e:58:42:8a:b5:08:bd:8e:14:4e:7c:01:f0:bd:8e:e2:d1:fc:
         3f:2d:07:7a:19:52:58:c3:45:67:54:70:4e:6a:f4:f9:21:90:
         3d:b2:24:63:f8:78:29:84:a3:57:4b:6e:6d:58:ef:ec:de:ae:
         12:a8:87:25:33:94:b2:35:0f:71:6d:3b:ba:ee:b9:5a:4c:65:
         73:b1:49:d4:4d:f0:8f:ff:65:0d:d0:a5:5f:b0:d5:d8:3f:1b:
         09:76:7f:b9:5f:53:c8:6c:b2:da:71:fc:f0:5f:21:c4:4a:0a:
         d7:fb:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:51 2026 by rpki-client