Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File:                     3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier:          SpboSxV0W+cALc2qBUAt7J6uQaGYQVqkFPFAX1XkjBs=
Subject key identifier:   C4:00:A6:7A:E5:73:D2:8E:ED:0B:C9:C7:1D:10:C6:84:1B:81:A5:84
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       569AAFB442A8968618A6568514ABE5FC11542089
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time:             Tue 16 Jun 2026 12:00:01 +0000
ROA not before:           Tue 16 Jun 2026 11:55:01 +0000
ROA not after:            Tue 15 Jun 2027 12:00:01 +0000
asID:                     45163
IP address blocks:        203.147.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9a:af:b4:42:a8:96:86:18:a6:56:85:14:ab:e5:fc:11:54:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jun 16 11:55:01 2026 GMT
            Not After : Jun 15 12:00:01 2027 GMT
        Subject: CN=C400A67AE573D28EED0BC9C71D10C6841B81A584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:f6:80:98:7b:e7:93:46:f5:dd:76:6b:b8:
                    3f:c4:1a:ef:55:f2:73:3e:65:3e:07:78:0a:c6:e8:
                    b0:1c:29:c8:e6:87:7c:42:98:25:e7:dc:8b:aa:be:
                    82:50:50:ac:e9:05:64:75:20:87:7c:32:22:3c:b3:
                    d3:a9:17:90:fa:a3:7f:08:c6:44:df:e9:82:46:ed:
                    7e:95:be:0f:a2:67:a9:c6:91:25:c4:a3:81:e6:33:
                    3f:62:9a:46:0c:10:ed:07:f9:f3:00:db:4e:da:36:
                    e1:17:0e:6f:7a:26:42:4f:f7:f6:55:7d:c9:d4:a7:
                    f3:e5:01:74:ae:47:9c:b0:2f:ea:0e:71:6f:93:21:
                    52:47:cb:96:3e:e7:a6:6a:9c:73:9d:72:e9:37:78:
                    12:e8:74:da:1a:cd:3a:9c:63:25:fb:d1:0e:9a:33:
                    ff:7c:f6:3e:c5:41:3b:fe:c6:40:2d:c6:37:45:61:
                    0a:50:18:a2:47:94:5d:48:ec:db:fd:5c:02:60:2d:
                    67:01:19:87:26:41:d7:24:89:ef:2e:55:13:eb:b7:
                    0d:85:70:be:f8:63:8a:4a:47:f6:58:0d:83:b9:fa:
                    d2:d7:e2:ba:00:d1:e3:7a:76:0f:a5:42:1b:3a:31:
                    5f:82:db:ab:11:09:95:64:08:ee:b8:4c:5a:03:fb:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:00:A6:7A:E5:73:D2:8E:ED:0B:C9:C7:1D:10:C6:84:1B:81:A5:84
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:5a:88:b2:ce:71:e7:49:7a:08:0c:d9:7c:a7:fc:f9:ad:
         80:b9:d8:69:3b:cb:e7:4d:db:06:9e:af:7e:a9:cb:11:66:4d:
         8e:92:75:fa:3c:f9:a4:c1:3e:70:d2:f5:dc:18:06:f5:3f:ee:
         12:f5:26:7e:b3:77:85:a4:1c:06:c6:4c:9a:55:8f:6f:af:bd:
         e3:d7:7d:b7:7d:ff:7b:8b:83:6a:8e:e9:a4:21:46:ca:ae:c7:
         00:3a:88:4f:cc:54:a8:3e:77:fe:68:cc:87:ea:42:49:46:16:
         0a:39:19:22:09:68:66:01:65:8c:50:0a:54:76:ec:80:95:00:
         e5:3f:5a:f7:eb:64:5f:89:3f:e9:2d:7b:2d:86:82:2a:ed:47:
         a6:fb:05:3d:a9:35:53:64:c2:17:47:58:47:2b:6d:67:55:ba:
         82:b2:6b:d9:2f:7b:63:fe:71:1c:f9:80:c9:74:eb:0f:0c:b3:
         39:90:26:d6:22:a3:d9:40:95:df:b1:97:bc:46:1a:cf:76:e1:
         ea:84:cc:ec:e8:6d:4e:60:d5:93:a4:9b:bf:fa:5c:4a:f9:61:
         d4:91:6f:9a:ea:61:c5:c4:ca:ab:17:3f:4f:4e:f4:c7:40:55:
         df:c8:2e:91:0b:93:20:41:42:85:73:38:c6:2b:38:12:44:90:
         31:00:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:39 2026 by rpki-client