Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa
File:                     4214E284606911EFBDF1A71AC4F9AE02.roa (raw, json)
Hash identifier:          dXxXH3k4HDVIe0Nszw/qyhG1QYul5iP9wevqRM4orcM=
Subject key identifier:   9E:7D:33:B6:FA:0A:F9:8D:74:6D:04:D2:ED:36:C9:CD:0E:F8:5D:04
Certificate issuer:       /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Certificate serial:       02A3
Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 01:34:32 +0000
ROA not before:           Fri 03 Apr 2026 01:34:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        103.185.176.0/23 maxlen: 23
                          103.185.176.0/24 maxlen: 24
                          103.185.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
                          rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
        Validity
            Not Before: Apr  3 01:34:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69cf1928-097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:66:ed:5d:0d:8b:82:57:e2:da:5c:8e:37:
                    b7:81:ac:03:b3:5f:e1:7f:03:af:9c:63:25:b6:70:
                    a1:c0:97:72:3b:0e:5c:d0:67:4b:50:43:30:c8:79:
                    c0:6e:33:13:27:76:80:3e:c9:ab:d4:85:9a:4a:2a:
                    81:3d:02:ae:f0:10:20:e8:92:c3:69:d1:89:1d:45:
                    c1:97:8e:7e:ef:25:16:57:e6:ce:31:ff:69:e2:ea:
                    fe:d0:16:1c:3e:01:c9:6b:c2:75:89:6a:85:ad:20:
                    63:bf:db:c1:d2:13:e4:21:dd:90:67:93:77:fd:db:
                    fd:71:26:4e:9a:5e:39:8c:d0:c3:83:d7:49:7d:fa:
                    93:e6:3c:f7:9a:a4:a5:8c:bd:86:57:fc:fa:24:ad:
                    3f:93:a8:3d:64:6e:36:90:ae:26:e8:4e:68:5d:c4:
                    25:4d:76:5f:ad:e8:a9:45:4f:b3:09:42:bf:5c:67:
                    a6:99:1c:a4:59:62:8e:26:9a:8d:37:4a:7c:1b:54:
                    bf:09:2f:28:01:e1:f7:f1:0d:4c:ed:f8:32:60:2f:
                    08:ef:75:0f:b8:0d:96:08:fc:12:33:b8:55:d7:39:
                    25:c8:7f:d0:60:c6:f4:64:8c:05:90:3e:67:3b:18:
                    02:a1:86:67:ad:f5:02:02:2e:d5:00:b4:07:8a:26:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:33:B6:FA:0A:F9:8D:74:6D:04:D2:ED:36:C9:CD:0E:F8:5D:04
            X509v3 Authority Key Identifier:
                keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:52:45:4c:11:f1:7b:2c:6f:7f:4b:0d:b3:e7:5e:6d:7b:
         da:df:39:72:ea:a2:3b:e8:d3:f5:60:1b:bf:ff:b8:79:4d:71:
         5c:16:e3:50:58:9e:56:db:45:63:3c:4c:52:a4:3b:02:d7:a9:
         cd:cd:50:4b:1f:a1:f6:8b:34:64:27:d3:62:cf:7e:af:93:a1:
         14:da:8d:00:16:6a:4d:5c:55:79:a1:de:69:f7:69:7f:16:96:
         59:e0:c8:3d:95:ef:e6:ef:5b:41:78:a6:24:a3:38:ea:37:e0:
         02:12:27:ac:31:c7:11:07:cb:ee:fd:bd:8f:13:9d:31:d0:b1:
         c5:a1:59:1b:35:a6:71:39:54:b6:34:12:d5:78:8b:9d:54:79:
         9b:06:b0:4e:1e:86:35:44:d4:73:0c:76:77:8b:42:a9:19:9e:
         ed:99:f1:2c:ca:44:3c:79:a7:b8:29:0d:49:16:9b:67:8a:02:
         67:cc:db:df:af:c4:71:2b:fc:9e:17:33:07:4f:ff:08:85:97:
         c4:7b:da:c7:c5:05:0a:8a:e0:40:bb:3a:1f:47:bf:1d:89:4e:
         e7:59:90:c0:c7:bd:ed:52:b2:97:1f:f0:8e:c9:fb:8d:c2:5f:
         d5:c3:c0:27:4d:cf:9f:2a:28:ce:df:d7:df:17:a4:a1:86:3d:
         67:62:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:22 2026 by rpki-client