Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/EEAAACE61BD311F1B0DCA9E21A3D8C67.roa
File:                     EEAAACE61BD311F1B0DCA9E21A3D8C67.roa (raw, json)
Hash identifier:          EbLua6nrmYxr0cQ+Pz21LaDR2r3PPaqZnCGDVGEk2GI=
Subject key identifier:   32:E2:32:F9:BF:93:44:F7:09:F5:FA:95:45:50:55:D9:ED:17:E9:75
Certificate issuer:       /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial:       06E8
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/EEAAACE61BD311F1B0DCA9E21A3D8C67.roa
Signing time:             Mon 09 Mar 2026 16:20:48 +0000
ROA not before:           Mon 09 Mar 2026 16:20:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132169
IP address blocks:        103.165.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
        Validity
            Not Before: Mar  9 16:20:48 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69aef360-9a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:7c:c5:8b:13:04:c8:87:76:ce:de:a1:41:
                    88:a9:d9:43:44:62:b4:68:a2:23:07:fb:fb:81:d6:
                    49:cf:be:27:c7:4d:3f:1d:68:65:47:b0:c2:88:63:
                    77:95:d5:30:b5:55:1b:d2:55:1b:b8:cf:14:da:92:
                    64:1a:00:7a:bf:34:51:6f:08:3a:22:b9:e3:10:d4:
                    ad:df:2d:56:b1:7c:9f:ed:d7:12:0a:59:74:d5:20:
                    94:d9:f1:bb:40:98:ea:3b:63:ab:61:d3:31:3a:f4:
                    4d:76:e4:d6:0c:63:57:fa:ca:4e:06:4a:26:7a:8d:
                    1d:4f:62:4f:5d:ac:8f:f5:78:a7:25:19:ef:a3:96:
                    1c:0f:33:7d:30:b5:79:07:28:b6:b9:4a:55:89:dd:
                    b6:b9:af:2a:e7:33:9a:6f:11:af:46:87:5d:01:5e:
                    1c:2a:c0:bd:41:2f:75:5b:de:39:f3:e4:76:c7:43:
                    d3:d0:a7:00:55:a1:01:a4:03:41:fb:02:0c:86:5c:
                    2a:4c:fc:c0:7f:dd:26:54:fb:c2:98:d3:08:ab:e9:
                    20:bf:12:e0:99:4c:b7:90:36:66:27:f0:04:ab:85:
                    03:67:02:f8:07:ae:ae:1e:0e:c4:9e:6a:3f:0b:bc:
                    2a:23:74:a7:25:8d:e7:c7:eb:56:14:2f:17:7d:26:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:32:F9:BF:93:44:F7:09:F5:FA:95:45:50:55:D9:ED:17:E9:75
            X509v3 Authority Key Identifier:
                keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/EEAAACE61BD311F1B0DCA9E21A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:65:87:55:f6:1a:f9:16:be:54:81:ec:e4:91:9b:cd:0a:87:
         65:1a:87:30:2b:ad:fa:9d:fe:80:53:c1:88:86:ee:34:57:18:
         9e:41:00:5d:ab:48:f7:02:33:86:92:82:1d:dc:e2:05:c3:6e:
         0a:5f:b4:66:ca:81:4f:20:ab:b1:95:5b:d0:7d:6f:f4:ef:26:
         40:c9:d9:05:87:33:00:b0:35:23:85:69:bd:49:0d:3e:33:80:
         35:3e:29:cf:fa:dc:f5:06:e6:25:80:f0:49:17:2e:d2:26:87:
         a2:c2:ff:dd:8b:9a:b7:c8:c1:f1:6f:44:17:e3:5f:04:ad:8a:
         d3:18:c3:52:5d:66:89:36:a1:9e:c2:ad:5e:e6:57:e4:77:0a:
         de:4f:e5:44:dd:66:32:81:1c:b5:b4:9b:e4:cb:54:5e:61:b7:
         b3:f5:b2:d2:42:67:be:c0:0d:ee:92:3c:03:2e:15:43:59:f6:
         d0:80:0a:51:cd:e9:af:1d:5d:42:41:af:f1:06:72:84:41:7a:
         4d:4b:34:5a:3c:26:3d:38:1f:07:8c:33:0e:05:3b:c0:b3:df:
         c3:50:ad:11:c4:63:78:12:3b:60:ad:90:9a:0f:2d:6f:59:be:
         e6:03:4f:fb:fb:30:fd:1d:2a:26:2f:63:5e:21:a4:c5:ea:92:
         23:84:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:48 2026 by rpki-client