Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
File:                     5283F92CF54511EF9907BE10C4F9AE02.roa (raw, json)
Hash identifier:          H9V2MyUqIitXZrS/5dU1I0DAeNIYmQRs+ziomgqJcr4=
Subject key identifier:   63:3C:9F:8C:88:16:DA:3C:3C:2D:4A:A0:91:24:28:05:BD:87:BD:1D
Certificate issuer:       /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial:       DD
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 06:45:06 +0000
ROA not before:           Sat 11 Apr 2026 06:45:06 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.227.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
                          rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
        Validity
            Not Before: Apr 11 06:45:06 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9edf2-7d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:c7:47:cf:76:90:f5:07:a4:cd:f7:3d:a6:
                    e0:76:4c:81:65:02:de:db:e9:02:26:99:93:59:fb:
                    96:a7:0e:be:e0:b0:93:b0:41:1d:2e:3d:c5:a8:08:
                    81:8a:ac:b9:64:ac:61:81:5d:1c:d2:77:ed:ee:bf:
                    d8:8d:60:0b:2b:f2:09:6d:65:79:80:87:8d:fd:4d:
                    e9:0f:46:67:d2:2b:a3:40:28:f2:58:f6:e6:54:83:
                    c3:f6:02:5a:ab:39:37:5d:8c:99:0d:ef:58:28:c8:
                    9e:52:17:83:8c:50:61:93:40:dd:ad:6e:14:70:ff:
                    7e:c1:aa:1c:18:9b:1f:c6:b0:98:15:79:8b:78:c9:
                    76:37:09:e0:27:01:2e:14:da:0f:48:34:1e:7a:c1:
                    d6:57:2f:66:94:81:36:62:08:a1:d0:6b:2d:5e:40:
                    a5:aa:f9:da:0b:40:ef:f2:48:27:0f:f9:d8:2b:22:
                    8a:e1:b6:95:9a:16:01:eb:94:dd:3c:78:8e:05:b6:
                    f5:6c:90:f3:8b:3c:bc:3e:7b:19:1f:68:80:34:11:
                    12:30:7e:16:d4:bc:04:e5:1e:d8:6e:fa:19:c2:c8:
                    e0:f4:0c:94:42:25:e0:c2:b0:b3:32:27:bd:bd:1a:
                    89:9f:fc:f5:96:8f:b9:c1:d5:55:73:9b:56:11:e0:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:9F:8C:88:16:DA:3C:3C:2D:4A:A0:91:24:28:05:BD:87:BD:1D
            X509v3 Authority Key Identifier:
                keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:70:0f:60:ab:47:7e:c3:3a:f6:89:1c:ac:4a:a1:95:47:
         74:6d:2d:c5:c6:ae:09:92:15:42:56:7c:22:03:85:97:0d:7e:
         02:d9:31:4e:55:d0:4a:9c:a9:de:f2:ca:31:38:bf:c4:80:1b:
         24:b3:7b:39:a6:ef:a0:b2:5e:94:95:d2:55:dc:b1:9e:18:fd:
         06:fc:80:34:5b:8e:a1:c0:88:eb:65:c1:56:97:39:c2:8d:fd:
         35:75:9f:02:48:37:f0:ab:98:34:ed:fe:52:ea:f1:3d:6c:81:
         3e:97:1d:9c:24:14:b5:2d:0c:b5:fb:db:cd:4e:1a:53:48:52:
         3e:23:bb:2c:7f:2a:52:2a:fe:14:b9:cf:77:b2:eb:8d:99:a0:
         47:de:3a:39:5c:77:cb:26:f3:2d:5f:1c:b0:05:66:55:6c:c3:
         2d:05:99:25:6a:b0:b9:d2:8e:c3:8a:e3:43:c8:b2:bc:0c:28:
         52:31:95:60:f8:a0:23:16:fd:94:63:40:74:54:3d:35:71:c4:
         02:4f:66:05:2e:c5:37:ae:3b:e0:b3:e9:bd:79:2b:20:53:ad:
         3b:8d:c6:7a:24:81:87:a9:cf:8e:5a:af:0c:d2:1a:13:5f:ac:
         cb:6a:c7:a4:04:98:ea:6a:54:07:e0:c3:73:55:79:a3:f0:b9:
         6f:e3:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:47 2026 by rpki-client