Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/3304B5BA43B311F19399644A98833773.roa
File:                     3304B5BA43B311F19399644A98833773.roa (raw, json)
Hash identifier:          bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=
Subject key identifier:   C3:51:F0:F2:79:BB:BA:25:DC:35:74:31:4E:7E:60:21:7E:72:DE:4D
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0225
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/3304B5BA43B311F19399644A98833773.roa
Signing time:             Fri 01 May 2026 08:03:38 +0000
ROA not before:           Fri 01 May 2026 08:03:38 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.145.190.0/23 maxlen: 23
                          103.145.190.0/24 maxlen: 24
                          103.145.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: May  1 08:03:38 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f45e5a-280b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:dd:af:64:72:94:99:17:0c:4f:28:a9:eb:
                    0c:17:00:c8:79:21:62:74:26:71:ed:a9:e1:61:b1:
                    92:24:4c:2d:23:ec:13:23:fa:bc:e4:89:3b:f4:33:
                    e3:8b:98:43:27:60:a9:1a:cc:20:81:1a:7a:fe:cf:
                    6b:e1:5e:82:06:41:8a:68:3c:0d:50:6a:03:a3:8c:
                    b6:1d:76:1f:f6:99:16:8a:a3:a5:ce:09:c2:5d:11:
                    c2:de:28:97:c4:12:c6:b4:6c:60:d4:73:b4:a8:29:
                    f8:9c:ea:3d:0f:56:e0:6d:ef:c4:65:b9:5c:a8:58:
                    9d:1b:ec:65:b3:0e:dc:97:de:90:e2:c2:3a:40:9b:
                    d4:67:9c:45:19:47:ee:b7:1f:5a:25:da:b4:9a:46:
                    e3:55:1e:1b:8c:79:c4:8e:bc:e1:fc:40:7b:86:f1:
                    02:8f:5a:91:97:76:54:6a:cc:11:b5:c9:de:e4:0e:
                    3e:79:2f:75:33:96:98:98:b8:a7:8b:17:0d:d7:3d:
                    cc:2f:70:df:87:0d:6a:ae:ff:9b:0d:61:83:ad:be:
                    1e:ad:2a:55:79:c8:cd:ab:fd:db:0d:01:ff:f6:ec:
                    26:25:68:f7:a8:f3:60:2c:26:8d:e7:c6:9e:87:2f:
                    8c:5a:fb:ab:4c:24:9e:16:1b:2c:db:cd:18:2f:20:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:F0:F2:79:BB:BA:25:DC:35:74:31:4E:7E:60:21:7E:72:DE:4D
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/3304B5BA43B311F19399644A98833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:55:72:c0:96:48:db:8f:1c:bf:cd:ff:a9:a6:c4:33:42:
         7f:89:81:5d:cc:72:a2:10:80:b5:45:74:c4:fa:89:ac:e1:dd:
         f4:96:7a:3b:b3:66:4c:c5:8f:7a:a4:d4:ae:5b:e4:dd:a8:27:
         40:47:d0:48:9b:71:e5:99:be:3c:db:50:2b:65:fc:96:0d:b5:
         8c:d2:d4:c1:1c:01:96:54:ed:0c:d6:ad:5a:9e:a3:b4:61:ad:
         b8:92:4e:60:c7:eb:93:02:a4:fd:f5:e0:9c:46:43:f2:ca:15:
         f9:4e:f1:42:e3:2b:fc:c5:f1:23:57:a3:d9:ad:e0:da:25:93:
         7e:99:72:51:2d:58:c1:47:f1:e7:52:7f:8d:6c:26:50:9f:f5:
         6c:8d:36:91:43:c6:e2:aa:04:60:c3:96:d3:21:e6:f4:4a:30:
         38:bb:9a:e2:9e:c0:ca:42:bb:9c:9b:b6:fb:67:66:c6:25:f2:
         76:5f:88:f6:29:7d:19:79:c2:fb:13:42:58:09:82:99:46:45:
         4a:23:37:11:af:fd:cd:06:05:98:9d:84:8c:fa:23:dc:7c:ee:
         a5:82:f9:d4:0b:44:27:d1:c3:c7:27:f0:17:57:85:8e:7b:83:
         d7:f2:ea:f2:f3:22:0f:a7:62:b0:f1:c8:9d:bc:ef:33:b9:5a:
         88:aa:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:45 2026 by rpki-client