Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/92F3063C248A11F0AD4B1179C4F9AE02.roa
File:                     92F3063C248A11F0AD4B1179C4F9AE02.roa (raw, json)
Hash identifier:          snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=
Subject key identifier:   88:9E:D8:55:8C:71:7B:A0:DF:BA:5D:53:C6:97:81:17:9B:CE:FC:5D
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       BA
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/92F3063C248A11F0AD4B1179C4F9AE02.roa
Signing time:             Fri 17 Apr 2026 07:41:32 +0000
ROA not before:           Fri 17 Apr 2026 07:41:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133741
IP address blocks:        103.183.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Apr 17 07:41:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e1e42c-7847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:6d:fb:d3:44:d1:c1:bf:0a:48:c8:33:4b:
                    95:4e:7a:f9:4e:2b:b1:e2:46:69:bd:7f:fa:3e:12:
                    36:11:10:69:17:cd:05:1e:be:24:bb:6f:03:ea:be:
                    c9:5b:f9:c5:66:6d:48:19:1f:8e:c1:c1:4e:da:20:
                    5b:e0:e3:c3:63:1a:fe:08:13:a0:86:9f:1a:42:08:
                    32:1e:79:46:d9:88:db:99:b5:f0:aa:56:00:90:84:
                    d7:bd:69:b8:e3:a7:d0:ca:c0:0e:fa:ce:56:cf:21:
                    4b:0e:2b:ca:75:92:5b:15:2a:03:b8:04:3a:a8:50:
                    e8:5b:96:4c:bb:30:91:eb:bd:b6:01:2d:c3:11:f1:
                    08:79:d3:4e:6a:8c:bc:f0:5b:86:8f:7f:fa:dc:3a:
                    5e:49:9a:a3:e0:e9:87:98:f6:3b:a8:61:03:47:45:
                    4e:f5:29:1b:ad:4d:ad:48:1c:d8:99:09:be:78:cf:
                    a0:c4:9a:db:39:bd:b2:ac:a3:99:c6:61:01:99:63:
                    a6:f6:2c:ce:3a:f0:14:b5:2b:25:4d:fa:d0:dc:b3:
                    f6:dd:36:56:1f:de:33:58:7b:e2:c2:7e:96:d1:87:
                    48:eb:51:4e:38:71:2f:ae:87:c5:5a:e8:e5:f2:6b:
                    8a:d3:8a:5a:ec:eb:ae:23:2b:81:95:da:53:2d:a6:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9E:D8:55:8C:71:7B:A0:DF:BA:5D:53:C6:97:81:17:9B:CE:FC:5D
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/92F3063C248A11F0AD4B1179C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:62:88:06:06:b4:13:7c:c4:9d:2c:15:f0:4e:26:1d:76:27:
         a9:46:58:25:cc:5d:b7:c5:8d:da:f7:5c:b8:dc:5a:39:f9:1e:
         1f:66:fe:15:e5:8b:33:eb:2e:5b:37:aa:21:68:6d:3e:c7:c5:
         48:5a:8c:ec:f0:06:27:f1:10:28:4a:cc:91:c0:c7:0a:a2:52:
         eb:28:74:59:13:b4:64:09:a1:66:fb:50:f3:36:2b:b4:8a:13:
         bd:b4:c1:0e:72:e3:e9:f9:0e:ca:6b:59:af:65:d4:a8:52:49:
         2c:19:60:22:7a:51:dc:a8:c0:98:c2:39:04:2d:66:b3:7a:23:
         f2:83:97:a5:e5:3a:22:f0:f3:18:82:d5:70:1a:ee:17:4b:29:
         6d:d4:b3:da:59:32:ce:46:61:31:49:a8:cb:04:c2:6e:75:b5:
         87:d4:b3:d3:44:2f:f7:a8:82:64:3c:b8:cc:6a:96:44:52:ae:
         7d:8d:a6:08:f6:13:a9:e3:14:54:32:b1:af:a0:3a:78:8f:33:
         f1:c6:dc:dd:a6:eb:b8:2a:bd:2f:4e:59:a0:ee:dd:c0:64:dd:
         83:fc:8f:6a:46:d6:df:bd:fb:5a:72:ab:28:09:f8:cd:04:ae:
         93:29:2f:b8:8b:5c:d2:c8:dd:fc:96:56:e0:f7:8f:66:77:d6:
         26:ec:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:53 2026 by rpki-client