Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa
File:                     1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (raw, json)
Hash identifier:          +46LKZYz8qHEfX4xAXpsHndLtnPAkVUeuEgTM+PY298=
Subject key identifier:   F8:CB:F9:7D:A0:5B:DB:A2:BE:DC:71:C3:83:47:F7:A8:3E:A9:D7:F6
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       0230
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:58 +0000
ROA not before:           Tue 03 Jun 2025 03:21:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151077
IP address blocks:        103.130.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Jun  3 03:21:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a41bf2-1279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:47:48:71:a3:4c:54:71:4b:5d:99:7c:76:
                    cd:b2:ba:65:1f:2c:31:6c:71:00:5e:a6:fa:71:e4:
                    9e:f3:37:bb:71:0d:e5:7d:db:c2:0f:2f:f9:c1:2b:
                    91:23:57:89:3e:c7:54:2e:3c:56:da:36:a4:b6:d7:
                    be:72:9e:da:24:dc:fe:3e:b1:fe:6a:99:ba:1c:23:
                    90:27:2d:10:6f:2e:3d:23:67:f2:db:2f:76:7a:a3:
                    1b:16:96:82:a1:37:71:7a:ca:85:e0:bc:f5:ce:be:
                    bb:25:3d:ee:51:84:9c:9d:7c:f3:7f:4e:bc:c9:cd:
                    34:72:7f:a6:4b:49:77:64:12:d3:98:0b:66:e5:d8:
                    58:a9:21:3b:80:b6:6f:7e:69:f0:b6:03:5e:45:7f:
                    a4:f8:d0:f7:bd:46:9b:a2:2b:fb:a6:3c:f0:cb:01:
                    3c:51:52:75:27:a0:96:92:53:c3:f6:98:11:21:d3:
                    41:e6:c6:7b:de:91:1e:c2:3f:96:b9:fb:b5:4f:d2:
                    68:b5:95:97:1b:ae:94:16:d3:b2:5f:10:dd:3c:1c:
                    1e:d6:48:b8:b6:e8:bc:7f:fa:1e:74:74:80:8a:fc:
                    8e:d5:67:03:02:bf:db:6c:9c:6d:1f:da:0a:61:36:
                    53:4e:e6:06:d4:1c:ef:b2:dc:eb:3e:fa:e8:a4:cb:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:F9:7D:A0:5B:DB:A2:BE:DC:71:C3:83:47:F7:A8:3E:A9:D7:F6
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:96:2c:5b:d5:bc:5a:e1:13:39:5f:c5:92:8a:bb:f7:7c:
         df:1a:4d:4c:ee:6d:18:c3:e6:4a:e6:9f:8c:68:ca:f6:b9:6e:
         10:b1:1b:9e:96:25:3e:06:16:dd:f1:15:38:a4:c4:54:79:73:
         a4:0c:82:08:35:d9:5d:cd:53:98:9a:a9:de:fd:22:39:d9:c1:
         10:07:5f:b6:89:de:65:91:55:b2:f5:57:fb:f0:d8:39:1a:58:
         8a:04:e3:07:4a:a1:a5:8f:c7:2c:70:8e:97:9a:b1:74:08:b8:
         55:3c:da:e2:5c:4e:95:8d:21:e8:7c:86:54:34:e8:cb:b8:b3:
         05:23:54:60:8e:c1:7a:06:48:dc:eb:f2:21:e3:d6:f7:50:3d:
         6a:69:8e:8b:75:bf:80:8d:63:32:43:95:e5:33:e9:fa:ce:73:
         57:e1:ee:e5:00:31:c4:85:f2:66:d5:35:89:9b:64:ec:b7:f5:
         50:25:aa:7f:e2:a5:8f:83:62:ea:b7:6f:70:74:7d:3c:48:a7:
         61:39:6c:a6:b5:28:95:39:eb:59:a0:50:b2:83:aa:82:b0:bb:
         ee:b2:cc:27:d2:96:6b:04:d4:9f:b4:64:bc:39:87:d6:89:7f:
         c3:a0:6e:02:2f:9d:08:50:2c:b3:61:a0:90:21:88:c8:8c:28:
         81:64:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:16 2026 by rpki-client