Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
File:                     D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (raw, json)
Hash identifier:          f9eKkmIgCJaQFOg187aXrQmV7LNrCWaEZ2LQUyHHEz4=
Subject key identifier:   99:91:52:12:9D:24:68:C2:0F:9C:16:0C:15:5B:B4:56:7F:26:ED:6E
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       047B
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 00:31:31 +0000
ROA not before:           Thu 09 Apr 2026 00:31:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149499
IP address blocks:        103.181.70.0/24 maxlen: 24
                          103.181.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: Apr  9 00:31:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6f363-cc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:3f:9c:05:07:e0:86:8e:5b:90:58:d6:fc:
                    20:0c:af:25:3d:97:a9:86:c1:7e:bb:c4:d7:9b:40:
                    a4:ad:19:3f:a6:06:7a:12:26:b5:fe:69:52:a4:3b:
                    75:24:06:11:ec:c9:17:e7:e8:99:68:29:1b:e5:55:
                    04:9d:6d:65:2c:e1:13:2f:94:4d:be:a8:00:55:2f:
                    52:35:bd:5c:f4:56:2d:1f:ee:73:85:15:b5:e1:bf:
                    62:51:a7:22:38:f1:b8:da:fd:0a:e8:20:09:c9:d4:
                    48:d3:34:39:ae:c5:1f:8a:1b:4e:43:2c:2f:45:67:
                    03:f9:d8:c6:d4:a9:d7:f6:95:dd:53:86:f8:e8:46:
                    96:cf:3f:e7:c3:5d:48:93:59:0f:d4:e0:00:ff:40:
                    53:6f:77:bc:83:d9:40:0a:d2:54:ae:d8:6f:59:89:
                    af:26:a9:db:5f:ac:53:4a:df:e0:1f:51:ef:5f:4a:
                    03:41:c5:e4:dd:31:f5:89:3a:39:e4:04:63:6b:fc:
                    21:da:4d:b1:2e:01:48:fa:1a:13:3d:0d:8f:22:e3:
                    a0:e6:84:58:39:34:74:fa:97:b7:4a:8f:05:65:f4:
                    e3:ae:16:11:19:61:38:3f:62:ed:39:c9:ae:40:08:
                    2c:06:07:cb:81:23:0b:7d:79:9d:1e:c3:06:52:ba:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:52:12:9D:24:68:C2:0F:9C:16:0C:15:5B:B4:56:7F:26:ED:6E
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:0b:dd:47:19:6b:9c:81:ca:d4:35:37:6b:b2:0d:c8:5b:
         7c:c0:6d:c2:4a:64:bb:c9:06:47:ae:4e:86:35:48:1c:76:6c:
         6e:8b:71:25:a3:86:5b:5c:66:d5:e0:89:dd:1c:33:f2:99:14:
         e3:da:3d:44:62:cf:e7:e8:3d:dc:4c:d0:f9:62:4f:6d:bc:56:
         a4:7d:81:14:60:16:f5:be:2d:a6:2a:5c:1b:c3:d0:e0:68:3c:
         ac:d4:6e:df:67:0a:21:67:58:65:74:11:58:f7:a1:37:7b:47:
         bc:75:c2:92:95:67:f2:df:4a:91:6a:5d:ae:35:d5:0d:5c:9b:
         3c:0e:60:11:aa:1b:09:48:34:5e:40:50:98:07:04:fa:85:43:
         7e:3b:83:d7:6a:b2:f5:b7:9b:8c:39:d9:08:f2:4c:9f:00:ef:
         14:2c:6c:ab:1d:da:1c:52:cd:19:9b:e7:96:7b:2a:11:e7:b7:
         4a:39:ce:cd:4f:97:e1:31:ec:05:17:a5:ec:5d:61:5c:ff:2a:
         48:63:1c:64:bd:5d:45:ec:cb:e3:17:ec:cc:89:d5:8e:a8:9d:
         78:b5:d3:61:9c:d5:7e:08:4b:e9:8c:f4:1f:cd:7a:ff:ac:49:
         d0:0a:6a:13:eb:54:d8:d3:4e:01:30:6e:67:70:70:92:89:ea:
         c5:77:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:42:32 2026 by rpki-client