Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa
File:                     D927A2DAA64A11EE8316D651C4F9AE02.roa (raw, json)
Hash identifier:          LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=
Subject key identifier:   A8:36:A0:1F:C1:22:A9:9F:5D:0A:90:9E:9C:51:0F:DF:18:6A:4F:85
Certificate issuer:       /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial:       0FE0
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:10:01 +0000
ROA not before:           Thu 20 Nov 2025 17:36:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     23750
IP address blocks:        103.130.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4064 (0xfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
        Validity
            Not Before: Nov 20 17:36:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a51ba8-3445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:3e:27:76:0d:9a:30:98:26:d7:c8:8b:fa:
                    b1:fb:bd:81:8a:98:25:35:89:65:7f:2e:0f:3c:08:
                    e1:cf:ed:7b:6b:73:59:14:68:3d:01:67:3f:46:a2:
                    86:e2:26:b7:7b:90:13:db:2a:37:16:cc:84:4d:68:
                    fb:3c:34:c7:f1:72:11:c6:a4:b4:58:71:f3:c0:05:
                    ae:61:9e:d6:b0:d3:46:e5:6a:d7:6a:7e:1c:35:19:
                    35:35:fa:dd:f7:f9:c3:90:f6:6d:41:39:b0:a3:ae:
                    c2:6e:6f:39:65:c9:e8:57:c4:14:ce:00:14:d7:9b:
                    2d:78:7e:c1:61:69:93:c2:17:61:61:7b:49:d1:56:
                    5c:5c:47:1d:a3:7b:98:27:13:d8:16:af:b6:35:2c:
                    c0:76:2d:77:dc:e4:11:40:d6:99:77:64:6e:91:2d:
                    f4:7a:fe:54:b1:43:40:b9:20:30:1d:5f:b6:84:e7:
                    8b:8d:2b:d4:1e:dd:6f:5b:0b:24:aa:27:01:d9:33:
                    29:47:96:db:82:53:5a:3b:9b:ee:88:4a:ba:47:1c:
                    af:84:3f:ac:ba:cc:31:76:04:a8:e8:e3:38:be:d4:
                    d8:8f:7e:73:ac:85:1f:4d:9e:d7:0c:2c:8f:79:1e:
                    55:06:e4:5c:6f:53:b3:8f:71:84:9c:3e:29:13:f3:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:A0:1F:C1:22:A9:9F:5D:0A:90:9E:9C:51:0F:DF:18:6A:4F:85
            X509v3 Authority Key Identifier:
                keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:b3:bb:38:2c:6f:27:48:37:c4:09:1e:45:34:4a:89:24:
         b0:ff:29:d2:dd:cb:72:4e:76:63:20:d9:77:21:1d:69:f0:57:
         25:87:53:6a:c9:a0:40:49:ad:32:c3:17:c9:64:19:64:4c:1c:
         77:34:87:30:1a:de:61:77:49:55:dd:0e:29:65:29:7f:39:81:
         70:70:77:53:54:b3:ec:2b:28:a5:13:71:01:5b:52:f1:6f:9a:
         ae:f9:25:a0:53:a7:ce:5d:5d:8e:1d:4b:38:34:0d:44:86:42:
         17:ec:4c:63:33:69:20:ab:6d:10:ac:2e:b7:f8:34:d8:71:44:
         fe:fb:95:b5:ac:08:1f:b3:3a:2f:1b:26:67:19:9f:2e:a3:93:
         22:b8:44:fc:c3:76:17:90:89:05:9f:db:10:d7:47:18:35:27:
         c5:d0:45:b3:f1:0c:1c:2c:29:94:96:53:fc:21:80:5a:63:b4:
         7e:60:2a:26:9f:5d:92:47:17:1e:e6:33:39:c3:69:26:ab:be:
         a5:cc:a4:9a:45:9b:08:f4:59:0f:9f:e5:9f:ee:d7:e9:a3:af:
         42:13:8d:b2:bc:de:aa:14:f7:85:44:7c:27:fd:37:a1:53:5e:
         80:63:2f:07:a5:ef:2b:44:25:05:ae:40:3a:14:83:a0:cd:23:
         a0:5e:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:18 2026 by rpki-client