Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/95FE27F02D1511F19EAB6E70B3833773.roa
File:                     95FE27F02D1511F19EAB6E70B3833773.roa (raw, json)
Hash identifier:          hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=
Subject key identifier:   B5:1E:DA:7A:24:92:5A:36:A6:1E:35:15:20:FD:84:5F:21:41:11:2B
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       020B
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/95FE27F02D1511F19EAB6E70B3833773.roa
Signing time:             Tue 31 Mar 2026 15:23:36 +0000
ROA not before:           Tue 31 Mar 2026 15:23:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     8796
IP address blocks:        103.144.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Mar 31 15:23:36 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69cbe6f8-7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:b8:97:05:b9:f4:7a:b9:f6:db:5e:a3:a5:
                    a1:f3:d8:cc:04:ba:b6:97:c1:1f:c6:9b:aa:53:f2:
                    ec:f4:fb:dd:f2:e9:b9:1a:34:85:37:fd:9b:22:69:
                    a3:fe:91:03:dc:27:57:36:82:f3:a7:ea:5f:81:c6:
                    5b:5c:81:51:b5:59:6e:93:11:8b:a6:68:5b:33:cf:
                    50:a5:8f:83:90:f9:2f:de:c8:4f:8a:b0:a2:62:0d:
                    c2:da:ad:98:35:d5:cf:a7:68:ec:c3:99:1d:53:4b:
                    7f:3f:59:4d:df:5e:bc:75:5e:dc:60:26:e3:26:97:
                    15:16:75:ee:49:97:af:9d:58:a7:7f:ee:6f:88:24:
                    a9:0c:da:4c:9a:e4:e9:d6:99:fb:e2:ae:d2:4e:65:
                    0c:46:6c:d1:8a:66:86:27:bf:66:bd:1f:f8:76:57:
                    e1:b8:35:45:20:be:df:fc:76:8b:a7:fe:06:eb:ad:
                    ad:7b:ce:8b:f0:81:88:f5:86:c9:60:d8:a1:ee:f6:
                    51:a9:08:17:21:f9:b7:68:55:38:99:e7:5a:7d:d9:
                    c0:02:53:08:3e:bd:ca:6d:98:86:db:0b:94:b4:c1:
                    21:6c:ef:91:aa:32:5a:93:87:89:94:31:7e:8a:c8:
                    8f:52:94:82:39:67:32:7a:34:94:3d:02:a8:52:d6:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:DA:7A:24:92:5A:36:A6:1E:35:15:20:FD:84:5F:21:41:11:2B
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/95FE27F02D1511F19EAB6E70B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:39:ca:19:0a:ca:5a:58:6f:36:52:0e:34:85:00:53:94:38:
         ac:73:2a:a7:1a:2b:e0:c9:61:b3:c6:92:da:1a:e3:c6:0d:d9:
         fa:72:4d:79:0f:26:3e:eb:60:09:41:97:09:50:2b:cb:84:92:
         38:2a:b0:91:fd:91:78:6a:c4:c4:c5:fd:ed:ab:67:ab:b3:8f:
         3e:3b:0b:26:bc:e1:e0:75:d1:21:04:c5:9c:81:e6:eb:81:75:
         20:c2:14:98:27:a6:5d:0b:b9:ae:dd:4f:53:06:06:b7:5e:b4:
         58:f3:a9:8d:5e:c0:fd:3e:2a:a6:41:11:7a:cf:64:f5:98:71:
         c4:34:da:e4:f1:d3:8d:76:0a:94:e7:2b:66:f8:69:9b:b9:df:
         97:e0:93:c0:bb:38:63:50:f1:a3:25:87:da:bf:d1:0d:d1:16:
         f0:7e:1e:82:e9:68:4c:71:f9:88:c2:92:de:98:43:49:19:a6:
         af:cc:dd:5f:7a:ab:f1:f2:ae:dc:cb:62:48:97:60:5e:c9:fc:
         37:44:75:54:8b:85:c9:47:57:7d:19:b8:2c:37:79:a3:7a:4d:
         07:4d:c6:ff:bb:c1:35:41:53:99:df:f0:fa:e9:e5:de:fd:97:
         bd:46:4e:68:59:13:a6:5b:e6:04:e7:ed:be:db:4b:20:3e:85:
         f8:43:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:03 2026 by rpki-client