Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/18981398329B11EDB9F09862C4F9AE02.roa
File:                     18981398329B11EDB9F09862C4F9AE02.roa (raw, json)
Hash identifier:          BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=
Subject key identifier:   D9:BA:12:0D:3D:02:7F:21:9C:FF:21:A2:9B:31:58:D5:90:A1:FC:65
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       065B
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/18981398329B11EDB9F09862C4F9AE02.roa
Signing time:             Mon 30 Mar 2026 23:29:13 +0000
ROA not before:           Mon 30 Mar 2026 23:29:13 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        45.120.148.0/22 maxlen: 24
                          103.227.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Mar 30 23:29:13 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cb0749-3d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:a0:af:e9:e7:5a:cd:9e:87:74:2f:ec:4c:
                    f8:81:66:bd:07:27:bf:8b:bc:fa:0a:fc:89:e0:dd:
                    b9:90:fd:34:76:ae:8f:39:ca:96:ee:8d:89:55:63:
                    26:04:c8:9c:4f:b7:1e:62:ad:a4:57:3e:61:42:3e:
                    15:a1:d8:be:f7:5f:36:1f:15:a9:a9:8b:0b:25:49:
                    0d:e2:3e:21:23:5f:2b:2c:29:44:3d:f8:a8:af:18:
                    b1:20:b1:47:85:9e:7b:d0:39:ac:76:99:e4:d8:3b:
                    27:89:80:19:44:db:2b:c0:41:e4:c8:da:35:a0:7b:
                    53:60:75:b4:7d:1a:d7:f4:10:64:4b:10:4d:b1:78:
                    d3:16:87:06:ec:91:7b:c3:01:ac:79:4e:9b:6a:86:
                    8b:d0:74:0b:ba:32:ad:78:16:77:83:7d:2d:5b:16:
                    fa:4e:f6:b7:d0:2a:fc:02:80:31:6d:e6:37:37:91:
                    2b:0e:ea:15:da:2c:dc:6c:8c:62:34:cc:89:67:18:
                    cf:2a:ed:15:4a:96:c1:0c:d9:cb:b0:88:09:42:74:
                    ac:ab:34:64:3e:73:96:16:5e:8c:1e:46:27:20:57:
                    ae:f3:67:a0:29:d3:03:21:b2:1f:e1:2d:b2:52:ac:
                    ff:ad:26:c9:f5:48:3c:9b:8b:b1:90:9e:9d:e0:dc:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:12:0D:3D:02:7F:21:9C:FF:21:A2:9B:31:58:D5:90:A1:FC:65
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/18981398329B11EDB9F09862C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.148.0/22
                  103.227.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:0f:e9:84:bb:e6:f7:e7:5f:01:51:01:8e:bd:78:b2:01:
         e9:3b:19:c2:7a:ac:a4:f8:23:ba:53:6a:7e:e4:4a:ed:bd:97:
         99:04:b8:2c:60:e2:5f:6e:28:97:8e:12:d7:f2:ae:25:6a:ee:
         04:ef:c1:15:1b:21:16:27:c9:fb:29:cb:a1:42:96:a0:4a:ec:
         db:bd:40:cc:e8:cb:77:92:6e:fe:f3:db:e4:1a:dd:60:bd:4f:
         fb:c3:7f:b8:00:79:4e:c9:e0:fc:b6:ec:2d:43:c9:92:7c:eb:
         a9:9f:0b:21:70:1f:82:ab:17:15:ef:9b:f8:76:3d:7d:4e:5e:
         0f:0e:54:90:a1:ff:14:c9:5a:7a:bd:fe:07:23:f9:43:6f:d1:
         80:02:6f:95:07:1d:91:e7:0b:90:5e:be:b9:ad:7d:c4:5e:6f:
         c7:96:8c:f3:08:f6:f8:76:ff:c8:cb:e9:28:b7:6d:71:6c:95:
         b3:89:cf:3b:88:09:bc:69:7a:2a:ce:9f:1c:5b:15:2b:a6:e5:
         b4:5e:e1:58:a7:92:bc:72:fa:4d:6a:97:7c:35:27:f5:30:40:
         ac:39:74:35:40:7e:6d:fe:47:9e:43:54:9c:9d:9c:42:6d:48:
         46:17:ac:94:a7:d1:3d:56:76:ee:40:f2:51:43:a0:29:cd:ff:
         4c:66:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:18 2026 by rpki-client