Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/3A7527ECC1F711EF8B510B86C4F9AE02.roa
File:                     3A7527ECC1F711EF8B510B86C4F9AE02.roa (raw, json)
Hash identifier:          GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=
Subject key identifier:   E6:B0:8D:8F:58:00:78:E4:A3:63:C7:22:B2:28:4E:FB:5C:0B:AB:B6
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       024C
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/3A7527ECC1F711EF8B510B86C4F9AE02.roa
Signing time:             Wed 15 Jul 2026 04:28:49 +0000
ROA not before:           Wed 15 Jul 2026 04:28:49 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     141778
IP address blocks:        103.229.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
        Validity
            Not Before: Jul 15 04:28:49 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a570c81-879b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:d6:27:14:d3:ff:0c:ed:5d:06:1f:a5:94:
                    dc:c6:f9:f3:47:72:22:90:84:f2:95:d9:4d:bf:90:
                    77:4b:8d:3b:bf:7d:05:3e:80:07:20:10:27:a9:ad:
                    5f:bc:4e:8b:7a:4c:10:3d:c1:ed:0e:36:fe:b6:62:
                    97:67:b7:00:87:80:97:d0:46:16:bc:a2:95:75:fc:
                    fd:ac:fb:02:a5:74:5f:77:24:23:04:5e:06:10:07:
                    ed:a0:c4:7f:89:fe:c0:4a:ea:bc:2f:9b:f4:44:4f:
                    45:b8:4f:1e:c4:24:8f:cb:75:82:a2:26:ac:8b:39:
                    73:fe:e8:cd:0a:e6:a1:02:3a:da:a0:4e:1d:a8:9b:
                    14:93:a3:e2:56:5f:76:42:ce:32:bc:06:7a:93:c1:
                    27:6b:ba:f8:4c:74:c1:97:50:39:86:51:06:a9:db:
                    9f:59:6e:ed:36:c0:7d:b2:ab:5a:d8:a3:5c:41:ce:
                    bb:96:0e:d5:bf:c9:44:83:7d:bf:ff:81:a3:b8:4d:
                    62:75:09:d0:61:8a:d7:11:b0:c4:93:81:30:aa:84:
                    a2:e0:0b:f5:46:48:4d:d5:c0:5b:f7:a6:1a:4c:62:
                    7a:be:6c:06:2d:25:66:60:de:c3:56:75:3e:d7:2d:
                    6e:3b:1a:94:14:c0:57:dd:7e:7a:fd:b2:60:62:cd:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:8D:8F:58:00:78:E4:A3:63:C7:22:B2:28:4E:FB:5C:0B:AB:B6
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/3A7527ECC1F711EF8B510B86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:59:26:8e:83:59:ae:c8:dd:c6:4e:ba:1c:0b:a8:e9:3d:
         31:e4:bb:84:c1:bc:6c:5b:28:64:49:d8:d1:1b:4a:fc:4f:3a:
         b7:fe:fe:27:96:92:0d:ba:6f:19:a9:05:b3:7c:80:09:be:e4:
         e9:01:fd:d8:b5:f6:a5:62:8e:eb:80:20:c1:7a:7e:5b:41:8a:
         d3:b4:0c:ba:e6:f4:ae:f7:d3:31:99:99:fa:44:9d:ac:91:e9:
         1d:09:55:9a:2d:2b:7e:52:30:8b:ea:80:69:48:03:bc:ad:8c:
         01:64:d2:42:16:ef:c4:36:36:a9:0c:60:94:d4:e7:7e:18:4e:
         19:2f:29:a4:f4:57:be:b3:48:51:7f:45:01:ec:21:2c:22:2f:
         5f:57:c2:ae:d4:3c:98:dc:f8:43:a0:1e:85:86:43:bb:79:b9:
         7a:7e:4e:07:d5:dd:90:50:be:ff:fc:e7:cf:63:d6:fb:c3:01:
         b8:0d:4a:eb:82:64:b7:09:01:95:25:3e:f2:09:4b:14:ab:6f:
         37:51:26:69:fc:3f:13:96:65:f8:0d:03:dd:5f:f1:e1:cd:ef:
         d3:41:ed:af:18:d4:7f:7a:34:1e:c4:3c:0e:9d:86:6a:16:f5:
         e1:55:91:ab:ef:43:5e:ac:75:86:87:d2:93:f1:fa:74:6c:d8:
         9e:84:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:26 2026 by rpki-client