Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa
File:                     2998A0E0F99011EF89B2363DC4F9AE02.roa (raw, json)
Hash identifier:          C7ArPIYFNK5A4mOStnsyTHFMTUZf+fChC6QWQfJwx3M=
Subject key identifier:   AB:C5:9C:F2:71:EB:DC:73:4F:58:CF:E2:BF:94:C6:67:BA:E5:32:82
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       0404
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:03:27 +0000
ROA not before:           Tue 29 Apr 2025 02:08:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151636
IP address blocks:        103.184.92.0/24 maxlen: 24
                          103.184.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Apr 29 02:08:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40eef-31c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:f3:a5:17:d4:18:df:12:2c:54:14:d4:1a:
                    5c:a2:a6:24:a1:c0:d2:7c:69:a3:7a:2f:a0:a6:70:
                    b9:ba:fc:48:e1:89:40:47:5f:9b:89:31:c8:46:b2:
                    8f:13:df:4d:6f:8a:95:19:e1:a5:60:3f:28:c6:63:
                    c2:9a:2f:40:c7:50:6c:c9:a8:72:e8:1f:25:a5:9d:
                    72:b8:5a:69:5c:ae:d9:b0:1e:c1:aa:c6:f7:b3:d3:
                    60:c0:6d:db:ca:6a:6b:bd:41:f0:d9:fb:e3:f4:eb:
                    15:f4:08:e8:cc:88:b6:39:36:61:c8:f1:3a:0b:80:
                    42:9d:85:9f:77:2d:87:dd:cf:a1:b7:42:b5:b5:ad:
                    46:e4:cd:90:f9:72:78:b6:bf:4e:99:25:c4:89:bb:
                    12:d2:55:08:84:46:42:8e:0d:10:85:e3:3b:64:21:
                    31:98:4d:fb:62:e8:a7:0f:41:50:15:12:dd:85:c4:
                    3a:19:73:a9:97:bc:d3:f6:3d:51:68:20:21:6b:0c:
                    33:fa:ff:fd:ec:90:30:08:8a:bd:7c:de:ac:23:09:
                    c7:5d:7b:76:1d:06:f5:d0:66:16:9a:75:a0:f2:c9:
                    b7:07:98:ee:cd:38:8b:5f:02:bb:e4:30:2b:d8:fc:
                    4f:88:2a:85:f3:a5:28:a2:61:85:24:43:a4:4e:0a:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C5:9C:F2:71:EB:DC:73:4F:58:CF:E2:BF:94:C6:67:BA:E5:32:82
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:db:66:04:ff:e0:a5:59:63:8c:a6:f2:06:7a:af:22:0b:
         cf:33:91:b8:83:a0:fc:20:72:d8:8d:6e:87:70:8e:dc:8c:94:
         25:51:ee:a1:65:45:56:ef:94:c2:3e:4c:dc:df:27:93:5c:14:
         2f:f0:7a:19:e5:0a:ab:e6:36:0e:c7:8f:97:1a:61:98:a3:80:
         51:9d:bc:ec:99:02:26:27:32:d7:0d:09:d9:77:7d:63:b6:8e:
         66:83:97:4e:5a:3a:41:71:3c:fd:0d:e0:0f:10:99:21:ad:64:
         1a:06:6f:3d:e2:4f:78:c1:de:9b:41:2e:c1:d2:fc:15:da:6b:
         9c:4a:28:06:0a:ec:af:b9:d9:50:8b:bc:3d:ad:f0:5b:87:b2:
         88:36:0b:17:e0:3c:11:db:70:f2:00:45:9f:10:43:6f:a6:c7:
         0b:95:f1:2b:20:aa:f4:7a:bc:a5:df:4d:c1:c6:de:54:02:2a:
         1f:46:e3:fd:d9:aa:3a:f7:7a:ad:05:10:b4:61:7b:ef:25:a2:
         b0:f1:22:8d:3a:61:f7:14:24:f9:19:e8:b0:45:be:b0:1d:ee:
         e5:3c:47:91:eb:7a:d6:4c:95:6d:fa:18:28:28:4b:c7:73:60:
         0f:6b:c3:70:d8:9e:f7:1d:d5:2e:c6:10:6d:2d:e4:ab:78:18:
         11:f3:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:38 2026 by rpki-client