Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
File:                     DB0C41022A0611EE95A2F00DC4F9AE02.roa (raw, json)
Hash identifier:          nfSDHyxIpYxuJaa572+JGo1gsCxYp6fGEhVukj2YiGw=
Subject key identifier:   86:5E:DD:4A:98:92:BE:DB:07:03:5B:57:02:BE:65:14:F8:88:A2:7B
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       021D
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
Signing time:             Sun 31 May 2026 03:34:53 +0000
ROA not before:           Sun 31 May 2026 03:34:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151207
IP address blocks:        103.107.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: May 31 03:34:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1bac5d-332a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:0a:af:3e:ea:79:f5:c9:1b:61:fc:a6:60:
                    b4:ab:81:84:a2:0c:10:96:fe:38:0b:30:c8:13:35:
                    95:41:06:2a:c5:02:f7:01:71:ed:a9:67:f4:68:33:
                    70:c6:fb:86:9a:d4:8b:bc:b5:74:10:84:c2:54:14:
                    3f:91:f6:ca:cc:f6:ad:d8:43:e1:c8:a0:2b:90:aa:
                    ca:eb:07:be:42:5f:9a:17:ce:a0:fd:84:80:bd:09:
                    f0:97:b2:79:d5:40:fd:ca:b5:1b:fb:9a:bd:9c:20:
                    eb:3a:de:d1:3c:c3:58:a1:d5:4b:f0:9b:ea:4a:52:
                    c4:ad:07:4e:87:57:70:61:d0:84:9f:4c:54:de:6f:
                    3b:b0:dc:71:40:15:44:41:de:5e:51:1d:fa:52:5d:
                    ac:51:f0:81:9b:35:da:2a:64:ec:79:eb:29:63:c6:
                    c4:b0:a3:50:87:eb:3f:6d:44:b1:1f:ad:50:53:56:
                    9f:1b:e5:2c:03:d7:c0:c7:37:c2:74:e1:d5:5b:3f:
                    5d:cb:46:73:00:44:6c:24:63:73:a1:72:2a:67:52:
                    11:6b:92:31:2a:75:98:5c:f0:fd:a5:66:82:0d:55:
                    85:6c:e3:61:29:c4:ce:1a:8b:5b:a9:21:6a:e3:a3:
                    60:68:80:f4:a2:4d:43:52:00:e3:2d:e2:d8:f4:d0:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:DD:4A:98:92:BE:DB:07:03:5B:57:02:BE:65:14:F8:88:A2:7B
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:2f:4f:f8:11:59:77:b5:ca:b6:32:89:b7:bf:57:3a:93:
         aa:a7:7a:bd:7b:22:b9:b8:3a:f4:ef:ad:95:6b:d2:2e:34:73:
         05:d5:fa:73:50:91:f3:f3:21:b7:44:93:17:1f:37:0b:57:73:
         5b:85:da:8c:a8:ce:73:a8:24:59:4d:1e:1f:99:a6:54:81:7e:
         31:86:b1:17:87:8d:c5:9f:74:3e:67:ac:6d:85:18:d2:18:8d:
         fb:7c:70:b9:ec:c5:5b:ef:71:97:5a:54:1d:9d:f1:de:05:6e:
         58:0b:8e:2f:0a:93:3a:da:e0:31:9f:1f:ba:45:ff:0d:2e:e8:
         9a:d6:e6:bf:b3:04:9f:ac:27:1f:20:ab:d5:01:b2:b1:36:93:
         fc:47:9e:4b:39:08:06:84:f0:2f:51:95:6b:37:4d:d1:9e:c6:
         53:ab:7d:93:7f:48:10:b8:a2:7e:97:60:ec:a6:b1:42:54:cb:
         ae:bb:99:a3:4f:d9:44:55:12:8d:4c:71:b1:1c:14:8f:58:f0:
         50:40:45:ab:a8:1f:f7:e0:37:f2:f3:55:11:a6:ca:5f:a1:e0:
         7c:d1:f0:d3:51:34:58:7d:e2:cd:53:0b:64:59:48:d0:53:92:
         be:72:ff:06:ec:10:9c:18:dd:24:b9:a7:6c:6c:e5:24:a6:06:
         5e:4d:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:38 2026 by rpki-client