Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa
File:                     AF6A12881EBB11EDB35A2561C4F9AE02.roa (raw, json)
Hash identifier:          xggHUqhGoBU2THPCHBd7SfkVooQu9NCISC2XN1yhp3M=
Subject key identifier:   66:77:6C:14:91:B4:DB:C7:63:F1:70:DE:0A:C3:4A:4F:02:3F:76:4E
Certificate issuer:       /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial:       02E3
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa
Signing time:             Sat 07 Mar 2026 01:34:46 +0000
ROA not before:           Sat 07 Mar 2026 01:34:46 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133947
IP address blocks:        103.49.148.0/24 maxlen: 24
                          103.49.149.0/24 maxlen: 24
                          103.78.102.0/24 maxlen: 24
                          103.78.103.0/24 maxlen: 24
                          2001:df2:5c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
                          rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
        Validity
            Not Before: Mar  7 01:34:46 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ab80b6-8cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:fc:09:c4:81:43:a4:0e:43:42:43:32:e8:
                    24:18:3b:3a:e4:03:2e:1d:14:4e:e7:c6:2b:69:5e:
                    e5:45:2c:23:d7:84:41:5b:cc:16:1d:fa:e8:06:ab:
                    a2:78:c9:1e:22:df:3f:be:47:ae:89:52:f0:1a:98:
                    f7:45:2e:e2:62:25:d7:53:35:3d:8f:4c:a1:d6:27:
                    3d:24:f6:61:1f:1a:1b:a5:89:fa:73:5d:59:83:fe:
                    94:7f:16:d9:3b:94:b8:13:ea:1b:93:53:11:a4:c4:
                    af:4d:45:dd:32:19:21:24:cb:99:0e:03:cd:ba:20:
                    4d:b5:95:9d:a7:2b:a4:b6:65:60:53:75:44:84:b8:
                    0f:aa:ab:e5:f3:2c:6d:73:2f:4e:ae:b7:06:12:77:
                    c9:86:2e:4a:45:d8:cc:70:91:05:49:eb:f5:94:25:
                    aa:63:f3:23:d9:09:aa:36:71:b6:72:51:7c:b7:50:
                    57:56:82:39:56:55:30:e7:00:6d:49:f2:ca:2f:1b:
                    37:4d:b2:33:0d:b5:e8:73:9b:5c:a6:af:66:0d:96:
                    73:41:25:12:7f:c6:ca:07:d9:97:39:10:e7:49:db:
                    cf:d1:d8:0c:3e:da:d0:41:df:44:12:ad:ae:cd:11:
                    f5:6c:be:2a:4a:37:07:41:6a:4c:bd:ef:1b:4a:d9:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:6C:14:91:B4:DB:C7:63:F1:70:DE:0A:C3:4A:4F:02:3F:76:4E
            X509v3 Authority Key Identifier:
                keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.148.0/23
                  103.78.102.0/23
                IPv6:
                  2001:df2:5c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:b4:ba:86:81:99:a4:01:dd:c0:81:3b:82:65:64:4e:f6:
         f2:04:9f:8d:e6:69:55:cd:eb:99:8b:62:de:2c:32:f7:94:00:
         96:cb:e3:74:9c:5b:c9:e2:30:56:1f:2d:93:39:fe:15:c1:d0:
         73:4b:91:77:b1:ae:e5:ca:be:b3:c7:88:b9:9f:e8:52:b3:18:
         d2:80:9d:eb:de:87:10:9e:73:87:51:19:ae:56:f5:00:fd:11:
         5e:6f:d3:e0:ab:1e:a7:5a:41:4a:e7:35:42:86:4d:76:e9:09:
         8f:6d:5b:81:2a:9d:63:bf:36:43:25:f1:69:39:56:4e:ee:71:
         6f:1b:99:80:56:8c:11:40:6e:21:cc:2d:d3:34:7f:4c:22:3f:
         1c:7b:b9:72:cf:23:f2:c3:8a:94:6e:ff:32:e3:bf:00:1d:8d:
         c4:ec:3f:82:48:67:99:90:95:2d:54:b9:a7:ee:8c:6e:06:b8:
         d1:56:53:3d:58:f0:29:5b:f3:ef:bd:44:8a:4e:2d:9d:6d:83:
         98:f0:7b:2f:c4:47:cc:13:70:d5:99:53:ff:67:13:20:8b:93:
         3a:54:a9:da:b0:14:1a:be:10:54:9c:52:f7:72:a2:fc:06:71:
         8d:1b:5a:c0:e8:68:ee:91:f3:10:9a:88:e5:69:d2:45:bf:e5:
         30:cc:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:06 2026 by rpki-client