Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa
File:                     37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (raw, json)
Hash identifier:          uAPz3oqpyV8H/ba3OsJeuX8/ZXubOJrKDa3EJe/hGAk=
Subject key identifier:   D3:63:FF:92:DD:56:E4:41:9C:8E:37:A6:05:5E:60:66:E5:3F:62:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       08FA
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa
Signing time:             Sun 01 Mar 2026 17:57:27 +0000
ROA not before:           Sun 01 Mar 2026 14:23:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.70.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2298 (0x8fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Mar  1 14:23:29 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47e07-fb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:c2:8d:d9:f3:45:96:18:c3:fa:1c:89:eb:
                    ee:7b:f4:36:66:0a:32:0c:3e:29:ca:66:93:61:5f:
                    3e:0b:17:bf:45:35:d2:62:07:b6:74:18:90:a0:62:
                    09:b0:93:41:d2:0c:2c:93:67:9d:bc:6c:74:99:14:
                    0d:71:fd:2c:13:82:27:f0:b2:87:10:8c:ed:11:7a:
                    f5:59:88:1f:bf:8f:f6:28:90:e1:19:7d:e4:0c:00:
                    64:64:22:4e:4f:f2:5e:5f:cb:e5:69:64:1c:b0:f3:
                    8b:4f:3f:e5:16:c4:3b:c4:c6:e5:3b:94:45:9c:45:
                    91:bb:75:1e:ab:eb:83:b7:23:0b:2b:96:00:c1:db:
                    46:98:9b:19:ae:ce:ac:76:9c:1c:c0:83:10:04:cb:
                    5b:39:2e:91:c3:06:ef:b6:cd:db:3e:6b:11:21:3f:
                    e3:66:c1:af:1f:d1:7b:4d:70:4c:0f:d4:75:ad:23:
                    0b:6b:ef:ed:5a:74:40:a8:b7:33:16:7f:58:22:0a:
                    8e:4e:1a:0b:06:ac:63:12:ea:da:a9:63:d4:18:94:
                    c8:42:08:00:03:16:5b:af:c0:ca:c1:ec:00:55:fa:
                    b8:8a:36:ad:fc:82:d4:ad:b0:c8:0f:46:1d:81:10:
                    3a:e4:50:05:d5:b5:87:0c:f6:1b:4b:f8:7a:72:09:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:FF:92:DD:56:E4:41:9C:8E:37:A6:05:5E:60:66:E5:3F:62:D1
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:b7:d7:73:e1:83:55:93:ae:e0:07:90:1d:86:cc:b4:43:
         aa:39:87:e0:3c:9d:e8:8e:f5:36:14:0a:02:ff:39:de:d7:58:
         a1:71:84:9c:d5:48:f4:df:17:59:2a:53:7c:f2:6c:10:ae:65:
         64:31:25:d7:f8:ba:c0:bc:0e:9b:1f:64:7f:0f:e1:26:dd:41:
         5f:b1:58:47:d6:12:10:ce:88:cc:19:3d:66:91:b9:b3:cb:77:
         8d:15:cf:e0:55:79:dc:c8:98:01:2f:43:77:ff:b6:7d:68:39:
         6f:05:7b:4b:48:8a:4b:c5:91:8f:0d:f5:5f:b8:d8:9c:2c:95:
         89:01:d1:8f:c9:48:af:48:d6:14:9d:e3:04:24:15:3c:07:66:
         2c:3b:d4:8f:f7:40:4e:b0:3f:7d:ab:c7:f9:3e:13:8f:66:7b:
         16:20:00:c7:d7:4e:c6:c0:6e:6f:da:f9:b2:5c:cd:7f:c5:fc:
         03:f8:a2:7f:4b:5b:49:e0:4f:8c:51:fb:4b:c4:d9:38:38:a3:
         ee:49:8c:3c:29:e0:2a:28:ca:53:16:fb:e5:a6:3a:43:b7:51:
         f3:45:d2:2c:1d:b3:77:98:62:57:03:d9:ec:c1:47:07:b3:89:
         c3:97:bf:02:dd:57:ff:00:29:5d:8b:6b:bb:ef:1a:fd:52:09:
         5e:6f:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:35:56 2026 by rpki-client