Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
File:                     5283F92CF54511EF9907BE10C4F9AE02.roa (raw, json)
Hash identifier:          gfj1R11Mpbbs83ejkJtVj4rQi5q0YUJRvMfHzMv20uM=
Subject key identifier:   10:60:7E:4D:08:43:8C:7A:03:58:EB:6C:38:01:EC:67:39:89:90:5B
Certificate issuer:       /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial:       C3
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:05:15 +0000
ROA not before:           Mon 31 Mar 2025 07:02:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.227.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
                          rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
        Validity
            Not Before: Mar 31 07:02:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3f33b-a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:30:1d:ba:aa:c6:1b:ca:87:82:57:52:ec:
                    b5:9c:72:ca:10:e4:ee:4c:0f:0a:2f:2c:59:14:d1:
                    4e:72:2b:a5:55:94:2e:4a:6b:79:6c:f6:b5:38:af:
                    d4:c7:7f:f0:8b:c3:09:bf:88:e4:73:9a:04:44:d0:
                    10:b6:f9:d5:46:bf:0c:f8:d4:b1:29:a9:57:69:4b:
                    8b:86:4c:ad:0c:29:60:d6:2c:ea:26:1a:58:a1:76:
                    11:41:39:32:27:c3:37:4c:05:a1:fc:b4:5a:c0:78:
                    24:68:8c:2b:09:bf:ed:ae:3d:5f:aa:1e:e6:3d:47:
                    a0:d0:40:55:da:ae:17:e1:c9:92:f5:73:9b:69:db:
                    91:6b:4a:8b:61:29:20:ba:9f:bf:3c:d0:48:df:b5:
                    e2:10:a5:2d:ca:da:5b:89:5a:b2:0a:a1:06:53:f8:
                    c2:54:34:60:6e:07:1f:95:87:cc:ef:2a:9f:23:57:
                    41:53:4f:c8:db:db:71:62:02:82:51:0e:57:e2:5c:
                    3f:db:f1:9f:42:04:dd:0d:4c:30:b9:b6:8e:5b:73:
                    0c:1c:98:6c:12:af:06:be:ee:99:53:d3:32:20:f1:
                    a6:9a:83:a5:d5:d8:67:62:f1:9c:e0:5c:02:6e:5b:
                    66:31:97:1a:fe:0d:f7:b5:f8:ec:06:89:96:c3:7e:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:7E:4D:08:43:8C:7A:03:58:EB:6C:38:01:EC:67:39:89:90:5B
            X509v3 Authority Key Identifier:
                keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:de:75:03:70:56:af:e9:e3:14:61:2d:df:3a:f5:e3:ba:
         d5:59:95:e9:4f:b0:08:9b:ed:f2:9d:2e:b2:6c:69:41:44:71:
         ba:c6:bf:db:6e:f5:ac:b7:9c:55:55:74:4a:81:4a:a8:bb:e4:
         09:27:a6:5c:c9:cb:db:a2:49:b7:ba:6d:0b:9d:da:91:ee:67:
         e3:14:0c:e3:4f:d1:3b:f4:99:ce:0c:e8:e1:55:bf:ad:58:4a:
         1d:e7:3f:50:29:a9:f5:84:f7:6e:69:53:33:99:ed:e5:67:1f:
         3d:d7:3f:49:db:2b:32:16:74:d2:ef:36:ac:9d:d7:11:c7:01:
         83:64:ce:1f:78:f6:02:92:1d:d1:ef:5f:4e:f7:36:2c:9b:65:
         16:f0:63:8d:77:b7:dc:e2:8f:13:05:cb:ff:1d:bc:38:67:f9:
         49:f4:a1:5d:bc:f7:64:89:37:3b:e0:50:f8:3c:ae:38:a8:fc:
         c8:bb:8e:fa:72:b0:51:68:2d:60:69:ce:e4:ac:f1:5a:90:cd:
         cc:0b:d9:67:ce:f5:bd:fd:18:1f:c2:7f:cd:ed:20:51:26:33:
         2a:ca:57:29:b0:6a:8a:81:01:8c:fc:da:92:41:74:71:f2:63:
         e8:90:49:fc:6a:5d:7f:32:80:d7:b1:76:0b:46:28:2a:5d:56:
         67:0f:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:48 2026 by rpki-client