Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa
File:                     732ACDFA1C7D11EF95F4D214C4F9AE02.roa (raw, json)
Hash identifier:          HABRanbKwBSDvCIXRbqb/bNegmEVTDNkozlY/CZQs9w=
Subject key identifier:   EB:F9:1C:3D:3A:FB:F7:D9:25:0B:D5:FB:E5:84:DE:BA:97:A5:D1:7D
Certificate issuer:       /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial:       0173
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa
Signing time:             Tue 05 May 2026 05:36:41 +0000
ROA not before:           Tue 05 May 2026 05:36:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150798
IP address blocks:        103.107.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
                          rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3015, serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
        Validity
            Not Before: May  5 05:36:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f981e9-69cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:d5:f6:bc:e7:88:75:eb:88:c7:25:b5:bb:
                    2c:dc:bc:2f:e5:bc:24:91:32:87:ad:d0:b8:39:3d:
                    77:05:be:e4:83:a8:8c:5a:a0:43:80:d3:66:64:e6:
                    9c:ae:a6:ce:40:49:bd:23:2b:ed:97:64:91:a3:fb:
                    3d:06:3a:60:d4:2a:45:21:8d:1a:76:f2:93:7f:5f:
                    da:f5:e9:27:40:e4:e3:99:29:eb:c3:86:dc:56:7f:
                    33:eb:4d:60:e7:73:c3:a7:d0:67:8f:90:19:10:d1:
                    10:df:eb:17:a6:42:5a:04:63:9d:ff:9f:31:28:96:
                    c7:64:11:c1:b7:4a:2b:44:96:a9:a8:ad:5c:64:a2:
                    6d:35:82:39:99:1b:c3:ef:f0:1a:9e:5d:d3:0e:7e:
                    ec:5f:c0:f5:17:82:10:02:33:a0:38:b1:c1:f7:2a:
                    ed:d7:65:6b:d6:5f:39:f1:c2:d5:c8:90:87:7e:28:
                    3f:fa:a1:55:04:3e:cf:fa:7f:5f:d4:9a:ca:c8:83:
                    2d:0e:6f:fe:da:7e:53:bb:b7:a9:33:e5:e3:fd:82:
                    33:24:85:89:c6:42:58:4d:1a:5c:21:9c:89:99:ae:
                    b5:b1:4c:02:c3:e3:62:30:f6:af:ae:e3:55:50:d9:
                    7e:86:5e:d9:10:5a:66:83:bf:90:7a:ba:c9:7e:18:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:1C:3D:3A:FB:F7:D9:25:0B:D5:FB:E5:84:DE:BA:97:A5:D1:7D
            X509v3 Authority Key Identifier:
                keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/732ACDFA1C7D11EF95F4D214C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:02:72:d8:49:8a:28:e3:8a:37:42:20:10:72:d1:18:35:ab:
         98:aa:4e:78:7f:f4:db:29:a4:33:bc:d4:ff:89:5a:17:d3:95:
         b1:bb:29:cf:bf:7b:11:29:86:3e:fe:5f:d1:5e:59:6b:67:58:
         09:3b:a9:a1:ba:71:48:ca:3e:ed:a7:87:28:55:16:37:2c:2b:
         14:6d:7c:0e:85:c4:b8:18:c4:56:08:b0:3f:39:c2:66:9d:6e:
         1d:26:5a:ce:e4:6a:10:a5:fe:f4:6b:ed:9a:16:03:be:5d:bf:
         28:be:7f:22:d4:95:90:95:f6:f4:68:30:34:5d:e7:51:bf:3b:
         7b:98:70:5c:76:4d:17:c5:89:b1:27:b0:19:88:8b:be:ac:66:
         c2:d0:b7:4b:da:9a:d1:c2:91:04:4c:9f:1d:00:f7:9f:dd:66:
         28:63:dc:6d:ce:ca:0a:4b:d4:44:ec:45:b0:43:d5:d5:ac:66:
         61:2e:c9:f6:e5:49:56:2e:73:3f:40:fa:96:f9:a9:d8:2d:1f:
         83:c2:34:66:12:fd:b9:dd:9f:c0:9d:d7:99:db:ab:a3:a6:85:
         7a:1d:f0:ac:ad:b0:b4:d4:ff:5b:0d:e1:c3:47:7e:c7:12:df:
         3f:10:7a:31:8a:59:5b:26:d2:7f:9b:65:c3:87:04:5b:5b:47:
         cb:60:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:52 2026 by rpki-client