Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/189D8FCE565D11F0B381417EC4F9AE02.roa
File:                     189D8FCE565D11F0B381417EC4F9AE02.roa (raw, json)
Hash identifier:          V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=
Subject key identifier:   1E:07:37:91:D1:CA:4D:5D:0D:E2:F2:35:62:78:59:28:78:F7:72:32
Certificate issuer:       /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial:       BA
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/189D8FCE565D11F0B381417EC4F9AE02.roa
Signing time:             Wed 25 Mar 2026 06:45:01 +0000
ROA not before:           Wed 25 Mar 2026 06:45:01 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153671
IP address blocks:        103.211.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
        Validity
            Not Before: Mar 25 06:45:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69c3846d-3aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:14:5f:2d:7f:12:d1:b4:6f:01:c9:55:91:
                    1d:c8:4a:be:86:a3:8d:c1:ef:d6:46:71:9a:1e:7f:
                    14:9e:37:4b:d5:f4:0d:21:8d:7b:bc:98:6b:5f:59:
                    5b:3d:e7:a7:f6:3f:14:1a:46:7a:7d:84:d4:ef:39:
                    c8:7c:3c:19:0d:33:bb:0d:15:1b:fa:4e:04:71:5a:
                    ff:ee:ca:d5:0e:c3:42:ef:43:f6:6a:0d:30:30:46:
                    f0:1c:97:b6:1b:33:31:1a:d8:52:fe:5a:8a:b5:c2:
                    83:c3:37:ae:6b:6e:3c:34:5c:23:dc:85:6f:6c:86:
                    41:2a:d4:e6:b4:c7:9b:a1:7e:a7:92:4f:a2:d2:3c:
                    33:18:6a:72:04:08:b5:02:16:47:43:f2:fe:19:71:
                    48:ae:ec:22:56:6e:2e:2a:ba:88:66:3f:53:d3:c8:
                    4b:55:ed:b0:25:54:8d:73:7f:8f:ab:1d:6c:06:a4:
                    d0:98:af:a2:fc:77:53:57:11:7d:19:e0:ef:28:d1:
                    77:ba:dd:01:ef:43:c3:07:43:60:8b:56:34:08:5a:
                    d6:f1:b2:5f:1c:95:e8:55:d7:03:2b:1d:2c:3b:e0:
                    a3:c2:b8:60:f0:23:3b:cc:a7:f7:a3:60:2b:a8:56:
                    f9:a1:3e:bf:e2:00:38:a2:96:ae:bf:13:4a:08:a9:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:37:91:D1:CA:4D:5D:0D:E2:F2:35:62:78:59:28:78:F7:72:32
            X509v3 Authority Key Identifier:
                keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/189D8FCE565D11F0B381417EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:4f:22:38:f7:08:11:82:4d:11:80:3d:c2:94:23:6f:71:71:
         6f:b0:3b:1c:01:c7:3b:be:5d:78:ac:e5:b9:04:b6:c5:ee:1f:
         93:b4:44:79:b5:d9:f7:98:34:60:30:ab:3a:86:90:79:9f:72:
         0f:e7:7e:ba:0d:41:cb:c5:38:9c:4c:86:73:fa:7b:0b:0c:a8:
         f4:c7:d0:fa:d0:e2:cc:05:a3:cd:b2:9e:c0:78:fc:9a:52:87:
         47:68:01:76:9c:b1:2f:75:5b:60:a8:11:02:66:7b:65:aa:32:
         13:a6:b0:f4:6e:b7:33:a7:8a:38:8b:53:dc:8c:13:6f:a9:99:
         a7:6b:f2:ff:ed:5c:22:31:0a:e3:4d:50:72:f8:9c:eb:3b:d8:
         04:f4:c4:1e:b9:aa:df:9d:cb:4e:06:95:f7:82:9c:db:88:04:
         89:46:20:3e:ef:e0:93:c5:3f:75:a0:19:35:ec:53:d8:92:4e:
         4b:95:fd:5b:18:2f:aa:8c:1d:8b:20:6d:6b:15:2e:c4:65:57:
         1f:c5:3c:2d:63:96:a0:dc:56:a1:86:92:b4:23:0a:b7:0c:ca:
         f8:3c:d9:09:20:14:73:65:38:c0:12:34:4c:39:49:33:ac:b7:
         94:1f:a8:c6:c7:46:99:a6:29:5b:3e:85:5e:88:df:96:2b:6b:
         5b:9f:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:13 2026 by rpki-client