Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa
File:                     376CBBEA504411ED83277887C4F9AE02.roa (raw, json)
Hash identifier:          iFgAxWIqhMXkANK5iK8yEgu/dYZgeUc6ccGlbZDOQPc=
Subject key identifier:   4D:91:C2:80:8E:C5:29:9E:97:65:6A:51:9B:CB:BB:AB:C2:5A:1C:56
Certificate issuer:       /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial:       029A
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 01:33:26 +0000
ROA not before:           Thu 23 Apr 2026 01:33:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149652
IP address blocks:        103.184.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
        Validity
            Not Before: Apr 23 01:33:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e976e6-9f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:92:31:19:ca:1d:f3:f7:75:4f:11:e2:9e:
                    9a:4e:2c:61:e4:fb:18:5f:56:aa:24:92:5b:a8:99:
                    75:09:70:82:61:8d:ea:cc:0c:0c:60:14:1e:f6:a0:
                    9d:7b:81:18:60:ea:71:a3:da:00:df:52:18:c4:fe:
                    65:4d:36:b1:9c:56:e0:75:cd:26:23:17:2e:27:70:
                    90:b1:ef:5a:af:40:a2:cb:bd:61:98:85:fb:93:ed:
                    6e:9e:52:bf:35:cc:6a:61:23:a6:8d:45:7e:48:e4:
                    37:62:49:ff:d4:23:9e:da:34:a6:8e:18:3f:ea:ad:
                    56:ef:20:2f:94:a7:ed:e8:df:d4:96:fd:fc:a8:a1:
                    d0:43:b8:d4:fc:9c:8d:c2:01:7a:1e:cc:8d:8e:51:
                    af:3e:52:d9:c4:d8:df:d7:db:10:ea:f1:9c:24:fb:
                    bd:d9:87:26:63:71:cd:10:f4:cd:6d:24:65:51:99:
                    8c:9a:ce:61:9b:d6:d6:13:14:54:2e:8a:83:fe:84:
                    48:1c:f9:eb:14:a7:57:f9:9c:36:3d:3e:09:56:44:
                    a9:6c:82:94:17:ee:de:ba:50:ab:be:4e:12:38:ac:
                    6e:fa:ce:0f:3e:71:65:a8:eb:d3:33:91:69:48:77:
                    fc:28:e5:21:18:19:ef:7f:d7:82:32:6a:85:14:2a:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:C2:80:8E:C5:29:9E:97:65:6A:51:9B:CB:BB:AB:C2:5A:1C:56
            X509v3 Authority Key Identifier:
                keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:7b:7b:0f:f4:9c:5f:e7:4e:f6:9a:1c:16:db:aa:c5:03:
         9d:24:ae:b7:30:33:05:31:32:58:ad:90:c8:11:5b:ff:de:f7:
         0c:43:d4:21:e1:c1:46:4b:4d:ab:ac:04:10:53:2f:78:40:99:
         67:dd:ba:ea:9f:ac:6b:0f:a0:9c:af:3f:3a:56:e9:8f:33:62:
         4c:20:1a:eb:0e:d1:d5:60:e3:46:32:23:46:57:a4:62:3b:d7:
         cd:10:0e:e3:c9:16:06:75:8c:78:17:92:38:b3:e1:72:3d:a6:
         cc:fe:f2:be:20:77:4e:79:04:a2:0f:af:77:3b:70:bd:a1:10:
         78:6e:a2:d4:bc:e3:17:19:a6:8d:b2:cf:7f:75:98:7e:de:f3:
         3b:56:18:b1:fe:d3:83:fa:8b:a0:ee:0c:c4:97:00:4b:7d:ea:
         ca:2d:a5:17:e6:84:20:88:59:48:b3:d7:3e:1b:8c:0c:90:0c:
         31:7c:05:65:03:71:5b:45:85:90:9a:b4:24:06:6c:93:cc:c4:
         78:7a:fb:d1:60:ac:94:46:12:95:42:6e:28:6e:4c:3f:82:b1:
         6e:d3:de:80:d5:d7:cb:22:27:4c:f7:85:4a:3c:8d:13:f9:3c:
         de:4e:d6:fe:b8:3a:da:4a:ab:4e:c3:a9:2a:ca:55:77:36:c7:
         e1:9d:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:33 2026 by rpki-client