Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/1F34B5C0250011F1A608795FB9833773.roa
File:                     1F34B5C0250011F1A608795FB9833773.roa (raw, json)
Hash identifier:          g5vttMWt0+XQbj5GazBAdpSevdiy5U6hlhse6ij41HQ=
Subject key identifier:   1B:BC:D7:1D:CE:73:8A:55:29:94:1D:4E:BE:CF:3F:1E:3E:19:43:50
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A8A
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/1F34B5C0250011F1A608795FB9833773.roa
Signing time:             Sat 21 Mar 2026 08:29:48 +0000
ROA not before:           Sat 21 Mar 2026 08:29:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136786
IP address blocks:        103.115.4.0/23 maxlen: 24
                          2001:df1:c700::/48 maxlen: 48
                          2001:df1:c701::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6794 (0x1a8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Mar 21 08:29:48 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69be56fc-0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:e3:02:f4:5a:4a:10:58:be:f1:ba:16:58:
                    99:0f:36:4e:4d:2e:8e:18:b7:32:db:7d:f8:b0:c3:
                    ab:84:42:bb:8f:ea:11:c2:f4:18:90:ec:71:12:37:
                    f2:9e:36:9c:26:37:55:ab:8f:f6:8a:21:dd:02:ed:
                    91:72:b2:e8:42:38:a7:9d:6a:bc:77:33:97:61:a1:
                    da:dd:ac:3b:ef:92:3c:d2:1e:9f:18:5b:c5:cd:f5:
                    5b:75:dd:c9:e9:a2:51:06:23:49:b1:f4:59:b1:11:
                    2f:fd:9b:0c:2f:87:b1:30:28:a9:cc:58:b1:20:cb:
                    73:0b:6d:a2:46:62:b3:e6:72:89:68:e9:57:8e:ab:
                    b2:88:f7:8f:d6:ef:8b:db:ea:a5:44:0d:02:aa:f0:
                    5f:70:ea:8b:e4:83:41:9e:f8:6a:91:f3:6b:fb:80:
                    a1:f3:10:b9:2c:c0:85:4c:af:8b:1b:df:64:73:36:
                    04:5c:9c:d2:de:97:f6:c8:37:2f:55:a8:97:51:42:
                    d2:d1:25:57:b8:3c:92:de:dd:3f:e8:11:2e:58:10:
                    24:90:6c:d3:eb:f6:c3:2b:db:8f:d0:40:02:99:69:
                    93:5a:3f:82:f8:d1:3d:01:a6:b0:06:de:5a:8c:91:
                    45:06:6a:f9:bc:aa:87:53:22:73:dc:0d:90:b2:02:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:D7:1D:CE:73:8A:55:29:94:1D:4E:BE:CF:3F:1E:3E:19:43:50
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/1F34B5C0250011F1A608795FB9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.4.0/23
                IPv6:
                  2001:df1:c700::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:38:db:9f:69:df:e3:61:d6:e0:c6:d8:b1:74:6d:d1:49:
         98:73:16:67:e4:63:a5:d4:d0:d4:44:4e:46:70:45:cf:03:25:
         91:53:46:01:a7:cb:32:7e:b0:0a:3f:b3:9e:3b:fc:37:ee:f1:
         63:6b:b6:e8:78:9c:52:1f:d1:b7:38:18:5c:1d:cb:ac:91:2e:
         4c:23:59:a1:93:d8:4d:bd:d7:8d:fb:8b:ef:c6:fd:0d:42:94:
         42:ea:cc:6e:13:7c:f1:94:3d:cd:d3:1b:c5:93:ef:e2:c0:77:
         d8:8b:7d:74:75:1f:77:34:71:91:3f:46:d5:2c:0b:99:40:7c:
         a8:f7:8a:67:79:4b:6b:56:c0:83:18:28:90:45:d2:e2:6a:47:
         33:d5:d9:08:be:31:52:94:f1:46:e7:f4:a0:70:99:da:f2:0c:
         c9:61:d6:22:0c:7b:a4:e1:a3:89:c0:a3:73:fc:12:13:09:73:
         cb:58:77:71:48:22:7f:91:e9:44:ca:97:bd:55:30:a4:5f:0a:
         26:be:ff:55:01:c2:ae:b8:a6:e0:d7:6e:d3:2d:02:57:00:76:
         d4:68:b9:34:ed:ad:b7:ba:fc:c9:8b:03:a4:87:71:c2:4d:eb:
         de:1d:4e:67:c9:37:5e:6f:c7:5d:1b:db:12:28:0f:25:4d:02:
         af:31:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:25:45 2026 by rpki-client