Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File:                     3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier:          /jBNeoEtPMfLgfA5fRUyk6gxhsXgGiiUSQyhqKDNFhI=
Subject key identifier:   40:75:FD:9B:FF:0D:97:3F:9B:B5:79:D6:7A:D4:DE:16:60:A0:E7:ED
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       C722458974552EFDCCE61815CA21EB20E28EE5
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time:             Tue 12 May 2026 12:00:02 +0000
ROA not before:           Tue 12 May 2026 11:55:02 +0000
ROA not after:            Tue 11 May 2027 12:00:02 +0000
asID:                     45163
IP address blocks:        203.147.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:22:45:89:74:55:2e:fd:cc:e6:18:15:ca:21:eb:20:e2:8e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: May 12 11:55:02 2026 GMT
            Not After : May 11 12:00:02 2027 GMT
        Subject: CN=4075FD9BFF0D973F9BB579D67AD4DE1660A0E7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:66:43:5a:ae:b5:81:cf:7b:8f:10:52:e0:
                    27:3c:44:34:9f:67:cf:a6:da:52:16:fe:f7:81:37:
                    b6:3c:d0:b3:29:20:2e:e6:af:91:5d:64:20:43:09:
                    ea:65:02:b3:af:54:0c:bb:00:7c:c7:e4:ca:9f:3b:
                    95:b5:55:29:6a:ed:f2:dd:a2:1f:2a:ff:05:36:10:
                    bc:a2:73:ee:8e:94:fb:0c:36:61:e8:20:49:e4:2e:
                    20:77:f6:28:7e:4c:40:4a:3f:3a:47:9a:35:65:32:
                    4a:89:84:89:ea:ef:9f:8d:47:9e:78:21:5c:91:41:
                    c7:42:45:2d:6b:98:86:ed:e5:94:be:fa:2a:bc:3c:
                    ed:ea:65:df:d2:6a:a7:6d:ec:d3:37:17:7c:40:37:
                    de:fa:06:d8:08:df:8a:e0:89:93:80:ae:5d:46:8d:
                    a3:09:f5:11:42:c1:84:81:18:c3:d1:da:4d:af:c8:
                    e1:6e:3d:67:04:e1:12:2f:d1:0f:c9:d8:68:8c:5c:
                    6e:9d:67:f0:ab:2b:5d:9e:37:ec:ee:9e:12:76:5d:
                    7d:7e:06:50:53:3c:cd:80:64:3b:40:69:bf:f1:06:
                    aa:c8:49:0c:33:1b:6a:17:a7:33:3a:9c:4d:4f:4b:
                    04:8c:dd:0e:3a:7a:9a:8a:f1:71:8e:43:0c:8b:c0:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:FD:9B:FF:0D:97:3F:9B:B5:79:D6:7A:D4:DE:16:60:A0:E7:ED
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:53:d0:a7:e7:88:01:b8:57:ac:d7:f7:9f:f6:0e:da:2c:
         7a:a9:58:09:d4:fa:ec:41:1d:79:28:38:5e:42:dd:1d:8a:51:
         1b:f2:ab:5b:cc:6e:3c:60:34:62:b4:17:28:44:46:db:28:69:
         45:61:0a:58:26:30:5e:28:12:9b:63:5d:b8:b9:d8:25:f2:5b:
         67:b4:2f:e7:c8:15:c5:d5:e4:af:c8:f7:07:ea:ee:89:99:c0:
         47:77:a0:d9:f2:fc:08:5d:4f:1f:b4:cd:3b:c4:7d:e6:ab:21:
         89:8d:cd:d3:bf:e5:8a:59:b2:33:60:73:82:b7:60:c6:46:0c:
         28:be:7d:03:bb:3e:97:9f:cb:37:aa:9e:e9:3c:43:07:a2:2c:
         82:77:ab:86:a9:e8:a3:5c:78:28:5d:28:d0:9d:3e:d4:5f:1c:
         ea:87:a4:67:f1:fc:00:12:4d:4b:cd:18:34:0d:8d:64:b8:1d:
         b8:94:a8:c7:4f:50:74:f2:d6:71:ee:de:15:dd:4e:43:b2:f6:
         53:1e:a3:dd:99:e1:d4:83:fa:04:c6:49:d5:a4:5f:a9:af:28:
         b7:bf:f1:c3:93:9a:13:49:ee:62:ce:aa:d2:c9:d2:46:6d:a0:
         1d:07:fa:6e:00:b2:1c:ee:18:92:9a:0b:cb:b4:77:2d:5f:27:
         89:bd:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:41 2026 by rpki-client