Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
File:                     C0BBFCC003A911EF9DE2F919C4F9AE02.roa (raw, json)
Hash identifier:          yasiUvU6UoXOIBspAAELMW2y9DYtiMBdgsKStLMK/z0=
Subject key identifier:   B4:05:78:92:11:AD:F5:C4:86:A2:C8:4B:10:D4:4C:94:1D:B8:BC:C4
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       0405
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:56:58 +0000
ROA not before:           Tue 15 Apr 2025 01:05:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        103.181.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Apr 15 01:05:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ff59-7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:4e:df:99:38:54:a7:b2:21:93:e5:e8:54:
                    1a:c6:16:0b:9e:a3:f1:00:9b:63:bd:63:c7:ab:09:
                    db:66:80:5c:e5:2a:51:93:09:49:22:31:d3:3a:66:
                    f5:3a:4c:af:9b:c2:87:b3:e9:68:3f:88:99:90:99:
                    be:6f:68:65:cb:e7:42:70:32:3b:84:3a:fb:cf:a0:
                    36:25:53:df:52:ac:97:89:67:b5:40:03:b1:f3:46:
                    2c:e7:a8:f5:c4:60:76:fc:af:0d:c8:50:65:b1:18:
                    6a:28:3c:76:dd:03:d1:79:df:3a:ed:31:e0:b7:4c:
                    86:a6:3c:82:69:fe:e0:f3:74:f6:30:6f:84:ca:fd:
                    f1:ed:77:35:ce:8c:27:9e:6d:20:fe:42:f6:2f:aa:
                    ce:49:cf:05:d2:ff:93:3c:31:01:37:dd:21:5c:82:
                    52:5f:5b:ec:d6:2d:1a:7b:fc:8b:f0:af:f5:8f:db:
                    34:86:9f:73:0e:e0:f1:ca:4a:3b:60:17:8a:3b:1b:
                    9a:3b:7b:05:44:26:f2:43:b1:54:56:6c:c6:e5:2f:
                    04:f8:05:b8:82:f4:b2:fb:44:cd:ae:77:6c:69:0c:
                    bc:9d:d8:09:87:69:87:46:2d:5c:4c:33:e2:5e:04:
                    21:b9:28:2e:c9:d9:6e:a4:bb:ff:71:b1:df:45:55:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:78:92:11:AD:F5:C4:86:A2:C8:4B:10:D4:4C:94:1D:B8:BC:C4
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:48:64:01:59:5e:b0:67:27:25:3f:f2:c0:bb:28:d1:63:
         9e:33:55:ba:d8:dc:be:78:0f:d9:e8:0a:e3:7a:18:5b:79:ae:
         b8:a0:d3:25:2c:e2:10:c2:80:30:8b:ca:c0:df:43:54:6b:9a:
         6c:a2:27:d4:75:fe:b2:eb:a1:d1:97:48:23:d9:71:cb:1e:6f:
         d3:ce:60:8a:9f:35:57:8e:27:71:d9:a3:be:6b:a8:51:41:21:
         71:b0:a9:7f:e2:d3:54:a2:ef:b4:5c:dd:40:77:ed:b0:04:2e:
         32:e5:cc:ce:ee:3d:61:e2:f6:6b:78:70:70:ba:fe:f1:7f:64:
         dd:a2:36:22:cb:e0:9f:85:1e:94:de:ae:5e:25:89:17:46:1d:
         62:b9:fe:6f:05:f7:8e:8c:72:18:81:be:3c:11:ac:65:03:71:
         63:ac:4f:98:78:38:2f:95:63:fd:17:e7:6c:6f:97:08:6c:e7:
         47:d7:0d:9a:2e:86:b9:9d:00:43:81:8a:d8:54:91:95:a8:f9:
         f0:9d:5a:b1:8d:a5:d4:24:86:fd:e5:6b:ac:9f:c9:e9:d1:89:
         85:3c:10:a1:0d:9e:70:83:9d:53:e2:c4:fc:ea:61:3e:c9:74:
         ff:23:10:58:e8:21:e2:5e:3a:8d:5a:17:e1:18:9d:9c:80:9b:
         7b:ad:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:08:26 2026 by rpki-client