Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa
File:                     753703FE045C11EAB8BF0932C4F9AE02.roa (raw, json)
Hash identifier:          q50wzpuKp2/XOfQFTtCqUx6pSJaLEnYn8T7ElxcuFQY=
Subject key identifier:   04:9B:BE:98:85:8F:75:8D:C9:A1:27:12:58:8C:3A:05:F4:2D:2F:50
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0CE4
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:39:37 +0000
ROA not before:           Thu 26 Jun 2025 18:41:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134106
IP address blocks:        103.115.82.0/24 maxlen: 24
                          103.115.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Jun 26 18:41:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42579-5a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:91:5d:c6:8b:40:66:79:c8:df:8c:6c:a5:
                    94:91:30:1b:4b:0d:e0:41:78:57:0c:47:0f:71:88:
                    b3:50:2e:d4:5f:a8:14:1f:6c:8b:5a:21:d7:f3:b1:
                    81:bb:05:c5:ca:62:ec:71:d8:30:1c:23:4d:cd:f7:
                    aa:72:62:9b:22:cc:50:fe:3f:eb:41:9a:71:40:95:
                    22:94:67:10:09:40:6b:75:70:6b:bd:42:22:33:c6:
                    d5:17:fe:03:b6:6e:cb:a5:2a:1f:89:58:f8:c1:d1:
                    df:df:bf:74:d0:fa:88:e5:5b:eb:ab:cb:2f:37:c5:
                    30:2d:a5:1b:d0:e9:34:56:25:4a:93:7a:7d:90:af:
                    2b:35:dc:9d:49:70:dd:1c:d2:7c:9e:60:f2:29:cc:
                    91:a6:44:17:c6:62:66:93:1f:3c:ce:ec:d2:18:9c:
                    c7:bc:32:0e:b1:26:08:20:5d:74:c1:80:8d:a0:5d:
                    48:04:9e:2f:54:01:49:ef:ba:af:f3:98:09:af:34:
                    70:d5:e9:86:1a:32:77:a5:fc:d9:8a:7a:77:72:7a:
                    99:07:a1:f3:8f:32:f0:a4:b2:55:40:a1:b3:1d:51:
                    e0:0e:f8:87:9e:df:9d:03:76:a2:68:55:28:70:a0:
                    84:1e:93:50:a5:40:f3:18:e6:30:f2:3a:b8:17:d8:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:BE:98:85:8F:75:8D:C9:A1:27:12:58:8C:3A:05:F4:2D:2F:50
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/753703FE045C11EAB8BF0932C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:06:d3:5e:2e:c5:b7:df:5d:d8:3d:ad:75:e9:a1:f3:68:ea:
         24:f1:ae:98:ee:e0:fc:6f:7a:7e:e4:c7:47:4a:11:22:ec:c2:
         96:d8:b6:e9:e4:f1:7f:93:c5:f4:68:11:57:55:5d:0a:85:25:
         92:bf:7d:26:cf:b3:d0:61:bd:5b:36:fe:5f:77:a5:67:8e:52:
         33:13:6c:e3:12:94:5e:31:df:7c:b3:49:28:eb:92:38:aa:fe:
         8b:72:9b:80:47:2c:64:02:cf:41:b8:03:53:2a:6b:69:17:50:
         83:4f:9e:cf:30:26:8f:84:24:f1:f6:7c:b0:48:a4:0e:b2:7f:
         10:0a:45:e7:ac:6b:41:49:44:05:aa:26:7e:2c:09:dd:8a:c0:
         b2:f8:4a:82:9e:6f:2c:1e:de:5e:0f:64:23:15:71:c7:b5:53:
         42:08:b8:14:c2:6c:f8:8e:25:4b:6a:98:c1:80:72:d6:32:e1:
         5a:0b:ae:0a:36:e8:de:ba:6e:d2:52:9f:0c:b1:8a:21:ca:c3:
         53:98:67:f3:9d:ca:bc:b6:3b:74:94:13:7e:ad:76:2c:61:ff:
         d8:e8:5d:70:ce:3a:4d:3c:9f:24:33:38:d8:18:8c:ea:85:b0:
         c4:b3:f7:2b:f4:5b:f5:60:5c:6d:f5:d9:9f:8d:a9:cd:bd:81:
         76:9d:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:02 2026 by rpki-client