Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
File:                     8C5D4FF4766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier:          iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=
Subject key identifier:   B1:4A:0F:74:1B:8D:34:B6:A8:6D:7E:17:F1:7C:98:3C:C3:74:6B:C7
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       043F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 00:32:08 +0000
ROA not before:           Sat 11 Apr 2026 00:32:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45250
IP address blocks:        103.183.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Apr 11 00:32:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d99688-7fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:8e:30:7c:ce:2e:43:37:bf:85:62:a3:10:
                    4f:72:35:3a:fd:f7:fd:b3:69:28:70:93:7d:66:b8:
                    27:ca:b7:e7:df:e3:a0:38:ca:64:92:b2:fb:23:f1:
                    e0:e2:4d:6b:44:44:6e:fa:58:91:8f:40:ea:10:25:
                    94:6b:b5:13:8a:e9:7f:68:69:7a:b0:64:be:aa:0d:
                    83:11:82:c9:06:e7:cb:d6:ae:50:85:0b:cf:78:a1:
                    1e:fe:dc:10:9e:98:ef:49:5f:a0:86:fc:b9:9c:e5:
                    27:d5:a6:e1:31:29:f0:5c:c8:f1:4a:c5:bb:6b:53:
                    f7:bb:7d:57:26:2e:7c:2f:e2:0e:f1:b5:b1:fd:b4:
                    59:c6:eb:e6:81:c0:61:a0:08:14:a4:3d:a6:52:5a:
                    16:22:94:01:a6:b0:fa:98:b8:03:0b:de:c0:28:a9:
                    07:83:d6:eb:be:74:12:82:ee:bf:bc:b0:ff:8d:09:
                    2e:59:50:ba:80:0b:e9:63:01:5f:1b:35:be:11:bb:
                    65:82:19:bd:17:42:71:53:e2:08:10:4f:f7:99:c6:
                    be:8b:b1:73:aa:08:fa:ff:c8:09:1a:93:03:fd:6f:
                    46:00:9d:0f:6a:d8:e3:52:d6:7c:09:aa:42:aa:5f:
                    2b:95:4b:1e:82:81:81:9d:7b:13:c9:40:16:ec:18:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:0F:74:1B:8D:34:B6:A8:6D:7E:17:F1:7C:98:3C:C3:74:6B:C7
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:42:c1:a5:ba:c3:db:16:5f:79:31:01:34:a0:f3:c9:d0:88:
         c8:30:bd:05:30:72:55:1a:13:d4:dd:8b:8f:0c:d5:ce:2e:60:
         6a:85:22:d0:2c:33:0f:31:71:3f:a6:f7:5b:f3:f1:b0:38:c5:
         94:81:6b:cf:fb:1e:51:c5:da:12:3b:88:dd:dd:8f:77:2c:67:
         bd:16:cc:07:ff:5d:0c:d8:ab:f4:ed:e1:20:80:85:ce:b0:25:
         e6:ad:00:7c:5b:27:8f:55:ee:ee:ef:6d:4a:a3:b0:0a:e0:6c:
         ae:46:ae:8e:31:16:c1:e9:c8:9a:7f:bd:86:66:39:76:e2:6e:
         23:e1:dc:6b:5d:17:0a:8f:03:ee:e0:48:60:e8:85:ee:b1:ff:
         53:87:1d:8a:4b:5d:5d:d0:5f:58:f7:57:89:39:29:7f:f6:d2:
         98:6c:9f:41:7d:56:f5:2d:5a:10:c5:ad:91:aa:76:9c:0e:01:
         d0:ed:02:5a:55:f0:9b:9e:24:79:ee:1e:dd:c2:71:bb:83:08:
         91:71:af:1b:32:ed:2a:bc:dd:80:c2:9d:93:22:26:d1:bb:a5:
         00:54:3a:f7:1a:5b:63:75:dd:3c:5e:38:9a:73:7a:92:62:6f:
         53:dc:ec:97:50:62:fa:01:ec:4e:24:36:4a:67:00:c3:eb:18:
         6e:ba:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:30 2026 by rpki-client