Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa
File:                     C3F53A0654F011E7BE4A6431C4F9AE02.roa (raw, json)
Hash identifier:          QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=
Subject key identifier:   C8:21:D3:7E:14:5D:3D:93:D8:26:54:81:80:62:CE:46:C8:3D:D2:AD
Certificate issuer:       /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial:       3170
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 16:17:27 +0000
ROA not before:           Thu 04 Jun 2026 16:17:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     32934
IP address blocks:        45.64.40.0/22 maxlen: 24
                          103.4.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12656 (0x3170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
        Validity
            Not Before: Jun  4 16:17:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21a517-f27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:c6:bd:d5:77:7b:f3:3a:c9:7f:56:95:99:
                    68:5b:d5:d2:8a:02:2d:09:a5:0d:2f:78:87:f2:b7:
                    db:ec:8c:73:e4:8d:fe:d8:a7:0d:cb:60:ac:fc:59:
                    0a:a0:be:67:3d:f1:92:cd:0b:f6:0d:bf:03:54:c3:
                    00:41:9c:3a:24:b1:b0:cd:42:7f:9b:92:6c:f0:96:
                    e9:d0:79:a4:2a:6c:8a:17:a2:97:5f:5b:87:b6:ac:
                    96:af:6d:8d:d4:d4:66:94:73:08:9d:15:70:17:e5:
                    fc:25:0a:c8:20:95:18:8a:c1:9e:0f:3d:f4:06:cd:
                    cf:f2:f6:1d:3d:71:11:a0:7b:c0:5b:34:76:55:2c:
                    77:40:15:1b:67:40:04:ff:9e:96:a0:1c:62:15:b8:
                    a9:f3:a8:7a:6d:27:16:0f:25:ae:90:57:a4:79:5a:
                    62:e2:f8:68:c1:d4:f8:4d:64:2f:b1:df:af:51:5a:
                    a0:4e:4a:79:0d:64:26:ac:39:88:fd:60:e8:e3:8a:
                    76:b7:10:72:24:56:69:b3:93:b6:7d:97:f9:06:97:
                    b5:f7:6b:80:c2:b9:fa:ba:3b:36:13:67:87:51:c2:
                    a5:29:77:46:e9:85:3a:cf:c4:96:a9:91:91:d0:05:
                    8e:5a:83:1d:34:4b:97:30:9d:d2:35:66:9f:86:d1:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:D3:7E:14:5D:3D:93:D8:26:54:81:80:62:CE:46:C8:3D:D2:AD
            X509v3 Authority Key Identifier:
                keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.40.0/22
                  103.4.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:36:9a:7a:0b:d3:e6:34:9f:55:36:5d:7f:20:ff:a5:5f:
         2e:f6:a7:b7:15:e8:3e:a5:84:c6:e3:ec:f9:37:ab:d1:93:15:
         ac:54:78:9f:71:ec:08:55:36:15:52:19:e9:fc:fb:bc:ec:a4:
         cf:ba:84:92:95:09:e8:19:77:ab:b3:7b:15:5a:27:bb:0e:70:
         d3:cf:50:a2:51:08:ba:0e:1f:e1:7b:82:1c:23:26:a0:16:47:
         92:b0:5a:47:f3:62:a3:1d:26:59:4f:16:62:cc:c9:bd:12:df:
         85:f9:99:4c:a5:c5:b0:e1:ce:54:90:89:1c:30:ff:b0:39:84:
         f7:e7:49:be:ff:a5:4f:bd:cc:27:38:2d:f5:f6:f0:8c:66:8b:
         dd:38:d5:57:f1:93:2f:52:5b:4e:2e:8a:c3:ff:a9:e0:14:cf:
         03:c8:ce:d7:bd:04:53:6d:1b:ce:c5:f6:26:8e:62:54:ab:16:
         e4:04:05:d8:60:b5:5e:da:18:28:0b:c9:5a:34:b6:4e:67:b7:
         da:b8:26:22:69:7c:f3:e5:f6:11:ed:7d:90:ec:72:df:79:7b:
         cd:7b:41:46:7c:55:95:ab:66:37:50:fd:7f:8b:c4:c4:75:ff:
         da:af:db:98:e3:97:ac:a0:c0:64:ef:a1:a1:b8:00:f4:4c:79:
         b6:ed:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:48 2026 by rpki-client