Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/02157718B9DF11EBA8BE9876C4F9AE02.roa
File:                     02157718B9DF11EBA8BE9876C4F9AE02.roa (raw, json)
Hash identifier:          PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=
Subject key identifier:   3B:B5:08:CB:D2:D9:10:1D:63:A6:A7:47:9C:D1:02:1C:23:06:AF:EC
Certificate issuer:       /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial:       067D
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/02157718B9DF11EBA8BE9876C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 22:29:15 +0000
ROA not before:           Thu 02 Apr 2026 22:29:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141734
IP address blocks:        103.163.2.0/24 maxlen: 24
                          103.163.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
        Validity
            Not Before: Apr  2 22:29:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ceedbb-48f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:f4:76:ce:25:0b:95:10:b8:8b:65:68:8a:
                    3a:a6:ef:3b:e1:a3:59:ee:b5:01:36:d2:34:34:80:
                    a2:72:8a:29:3d:48:82:27:5a:3e:b3:de:86:c7:3d:
                    83:f2:08:a2:d2:5f:ca:07:01:d2:fc:0d:12:60:03:
                    b9:95:dd:d0:a7:5e:01:37:74:fa:42:c2:00:90:36:
                    ee:db:47:4e:63:a0:9f:cb:01:4c:8e:b0:81:c0:11:
                    f3:12:37:cf:70:57:96:b2:aa:dd:2d:2b:0c:55:32:
                    4e:cd:60:3f:15:0f:0b:63:35:76:e0:0e:34:b9:b0:
                    40:db:72:cf:1a:41:82:d3:2f:fb:a0:19:60:5b:72:
                    2b:6a:4b:fe:9c:83:dc:53:82:de:38:2f:1c:4d:d8:
                    30:fb:f6:a5:7b:02:97:b0:86:0d:3f:37:dd:30:80:
                    73:5a:f8:c7:7b:4b:6c:67:92:5d:b7:7d:6b:60:a0:
                    96:b4:9e:00:10:df:36:3b:40:c5:46:34:c7:b1:01:
                    ff:23:b5:df:45:ba:4b:9a:42:6a:54:c6:33:f8:64:
                    29:54:6b:cf:67:85:98:68:ce:88:2f:d6:0c:ed:4e:
                    28:53:62:71:41:51:19:b7:dd:1b:e5:d1:99:cc:fa:
                    70:ae:63:71:74:c7:70:f8:24:a9:bf:46:c1:63:26:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:08:CB:D2:D9:10:1D:63:A6:A7:47:9C:D1:02:1C:23:06:AF:EC
            X509v3 Authority Key Identifier:
                keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/02157718B9DF11EBA8BE9876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:0d:0f:b2:fb:ed:54:2c:01:ac:2d:f8:2c:b2:e3:50:3e:
         33:be:15:ef:65:d1:e4:3a:5e:c7:7c:8d:fa:1f:54:82:10:6c:
         a7:ca:4f:d6:68:79:02:40:2f:f5:90:2f:54:c0:0f:4b:b7:f0:
         78:4e:23:33:6e:61:02:ee:63:02:c4:ee:ff:89:fa:69:55:a2:
         d6:4b:b5:32:79:38:1e:f1:4c:1b:a1:08:d4:3a:d3:9f:5e:dd:
         7e:6a:2b:40:a1:44:57:9c:02:5b:9f:fa:d6:c4:4b:18:0c:a4:
         ea:a5:44:b8:c1:59:2d:5e:0f:c2:a1:d4:62:15:82:46:6d:fa:
         20:ef:89:cb:17:73:8f:0e:0d:dd:11:fd:69:e4:91:f4:d4:ad:
         d0:42:d2:18:d9:71:7c:e0:af:de:c6:84:88:1c:32:9f:6d:05:
         b9:7c:6c:08:23:a6:2a:e2:a4:45:bb:00:62:a6:3e:58:f9:2f:
         bb:27:7c:b9:51:12:c4:04:d5:c7:19:ea:81:db:63:bb:dd:18:
         0e:2c:1a:13:c6:22:44:4a:aa:d7:36:98:ad:b7:a5:e2:eb:3b:
         69:f6:0c:0a:38:0e:df:f9:15:8a:ef:12:b6:33:a6:c6:81:b5:
         e0:91:96:6b:63:38:98:30:67:4c:ef:b3:56:a2:e1:3c:e9:e5:
         01:5b:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:31 2026 by rpki-client