Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/C8D28C084D0D11F1BB69BE04B5833773.roa
File:                     C8D28C084D0D11F1BB69BE04B5833773.roa (raw, json)
Hash identifier:          xIXzdhPfo53rwNh2Mlgu0y8PEjCEJhfEi2ZuL9DtaEc=
Subject key identifier:   B6:8F:57:31:90:71:BA:92:94:F6:97:E5:52:BE:1F:CE:48:EA:F6:2E
Certificate issuer:       /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial:       06F4
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/C8D28C084D0D11F1BB69BE04B5833773.roa
Signing time:             Mon 11 May 2026 07:48:22 +0000
ROA not before:           Mon 11 May 2026 07:48:22 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138115
IP address blocks:        103.143.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
        Validity
            Not Before: May 11 07:48:22 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0189c6-8528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:02:95:95:16:80:5a:b9:69:3b:f9:9c:06:
                    81:27:26:c7:3c:ef:61:43:54:db:56:53:74:50:0d:
                    be:88:5c:d3:39:f5:b7:57:52:3c:b5:ce:d4:73:dc:
                    07:9f:f8:2a:18:1a:2b:3d:d3:0f:4c:7f:a0:e6:fb:
                    de:d7:f8:28:a8:bf:42:e3:5b:f1:7e:06:2f:d0:ad:
                    df:cb:ae:e5:cb:e3:f2:9c:db:ce:f1:58:e1:9b:08:
                    34:12:29:ca:dd:5c:5a:fa:e7:58:07:c8:f0:90:7f:
                    1b:7b:fa:03:14:9b:3f:c9:a4:a1:19:e4:b7:d7:0d:
                    2e:ea:85:c6:1d:7b:e9:3e:0d:67:79:1a:1c:4f:0d:
                    1c:b7:48:e1:d0:42:0f:27:77:4b:77:8d:45:e8:bf:
                    f5:45:5c:89:4d:48:4b:bd:ea:cc:c9:7b:1c:bc:6d:
                    25:b3:a7:a1:dc:10:29:78:ef:16:33:68:8c:41:5d:
                    18:77:4c:95:f1:2b:64:49:44:56:0b:4c:9b:6d:46:
                    d5:13:5a:9e:5e:1a:af:38:00:c7:1d:88:4e:5b:84:
                    55:ac:c7:be:f3:01:2e:be:e1:6c:a2:c8:6b:56:6c:
                    a7:99:b5:11:26:4b:08:ff:f7:38:aa:9d:77:45:73:
                    5a:86:af:53:ff:44:ca:c2:65:7d:48:b4:2c:bb:d8:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:57:31:90:71:BA:92:94:F6:97:E5:52:BE:1F:CE:48:EA:F6:2E
            X509v3 Authority Key Identifier:
                keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/C8D28C084D0D11F1BB69BE04B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:9e:51:d5:8e:70:18:e8:16:48:16:be:92:f5:68:e9:77:
         8f:4a:d1:91:16:a9:6f:b9:ff:1c:7b:15:32:1f:f6:26:ba:4c:
         33:47:c5:d1:73:ff:09:12:72:d2:bb:8c:49:20:4c:97:41:4b:
         ae:02:52:d8:83:1c:12:9e:41:34:c9:8b:5a:f1:73:c9:cf:d6:
         be:45:3d:68:ae:00:24:f9:a4:fd:f4:d5:ed:ea:1b:a3:d5:bc:
         c3:eb:a8:77:81:63:b8:da:c0:8b:ee:24:cc:84:94:47:88:33:
         68:ed:0d:55:74:db:0d:d8:fc:c5:9b:13:bb:ca:a8:f0:5d:a0:
         8b:30:27:45:09:06:46:98:ef:50:16:94:3d:50:20:8c:c7:fa:
         c8:de:37:86:75:36:30:ee:16:28:1e:79:c0:89:02:b0:aa:db:
         14:bb:e5:33:dc:49:4a:f8:8f:cc:25:8b:3c:b8:e7:0a:33:b4:
         19:e4:5a:9a:31:38:89:83:55:f7:81:8e:53:62:ea:0d:22:43:
         b0:6a:50:f9:a6:47:95:57:4b:1c:e8:2e:e7:bb:82:f6:4d:2c:
         ac:fc:e8:b0:78:f9:e6:db:18:a0:d3:2a:93:a4:5e:d5:c6:a7:
         aa:d2:83:12:6d:90:6a:5b:00:d2:6f:ff:19:f2:49:41:9f:f8:
         f8:6f:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:34 2026 by rpki-client