Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/1341A108C14C11E888561034C4F9AE02.roa
File:                     1341A108C14C11E888561034C4F9AE02.roa (raw, json)
Hash identifier:          oSnGk4vYQJveQWXL86sB7flSt8Jy820qrGLOu1rn4Eg=
Subject key identifier:   DA:5E:27:59:CC:15:B3:2C:1B:E9:94:4A:D2:54:9C:80:96:26:86:8B
Certificate issuer:       /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial:       135B
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/1341A108C14C11E888561034C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:57:22 +0000
ROA not before:           Wed 16 Apr 2025 17:25:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132228
IP address blocks:        103.7.197.0/24 maxlen: 24
                          103.226.23.0/24 maxlen: 24
                          2001:df0:410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
                          rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4955 (0x135b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
        Validity
            Not Before: Apr 16 17:25:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a445c2-0a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:c1:19:6f:16:0b:7d:c0:38:df:fb:3e:3d:
                    85:e3:0b:d2:08:cb:e4:c0:52:a9:39:9d:e0:04:b9:
                    96:36:cb:4a:6d:c6:f1:79:0c:62:8d:29:71:3a:8c:
                    75:df:cf:f6:03:5f:dd:fa:57:11:b4:a8:ed:74:81:
                    0d:18:31:d8:27:76:0f:09:40:25:c4:88:42:4a:6d:
                    f9:62:84:99:32:28:8d:54:f4:6e:e0:b4:a9:21:42:
                    26:78:9e:b0:da:30:71:d9:ad:cf:7a:44:e2:af:bb:
                    1e:69:0d:6d:27:fd:d7:7d:23:bb:15:58:50:28:f5:
                    39:b4:f9:50:70:91:fb:7e:1b:6c:82:c2:3a:89:9e:
                    f4:26:19:ba:62:7e:3d:dd:47:61:f6:c5:21:24:6c:
                    48:34:91:e2:e9:03:ac:77:09:a1:ae:69:d9:df:db:
                    7a:ee:2a:73:fc:1a:63:8a:fd:51:58:9a:00:47:4e:
                    d3:a8:fc:e1:f8:02:4e:ae:93:6a:04:dd:25:53:3f:
                    59:f2:54:74:51:0f:49:30:7b:44:3c:c0:1e:ac:8b:
                    e6:0c:8a:61:7b:dc:c8:2a:29:7f:d1:a2:34:85:a4:
                    1b:5c:db:14:ee:7f:cf:a7:93:1c:06:96:dd:c3:36:
                    fa:50:cd:91:e2:96:a3:7c:29:6d:93:36:86:28:77:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:27:59:CC:15:B3:2C:1B:E9:94:4A:D2:54:9C:80:96:26:86:8B
            X509v3 Authority Key Identifier:
                keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/1341A108C14C11E888561034C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.197.0/24
                  103.226.23.0/24
                IPv6:
                  2001:df0:410::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:74:17:22:d2:b2:d3:38:d4:51:1e:cf:47:2b:48:ba:92:
         1a:cf:85:8a:b0:2a:02:0b:7b:22:93:30:1f:a4:99:ed:e5:86:
         27:98:34:d2:f4:8e:27:c3:86:48:0b:bc:66:45:4c:58:62:14:
         04:c3:e7:5c:e9:37:65:9f:35:0c:ed:e1:5c:3f:45:91:2b:64:
         b6:2c:12:12:04:21:ee:56:c1:88:2d:17:6e:d2:bb:89:0d:c8:
         79:57:f1:19:19:df:cd:f9:e6:5d:2f:3c:89:86:b0:86:06:48:
         f1:4a:8d:b7:d7:a6:a1:75:74:c5:32:3a:8f:8e:b9:7c:5a:11:
         e4:9e:d3:c2:da:22:7c:38:1a:07:d7:b4:3a:3e:0c:03:26:cb:
         e3:6a:6b:7c:c6:a3:54:d5:49:38:38:11:98:aa:47:1e:64:80:
         b2:75:79:d6:d7:f1:c3:8e:ee:9f:92:b2:c4:23:40:53:25:80:
         9b:f3:d3:b7:1c:34:90:63:b0:b2:a5:51:bd:8d:be:17:3c:b5:
         41:bd:09:c2:d6:48:cd:40:63:84:4e:1c:ce:16:46:39:bb:79:
         43:91:a1:9a:4f:23:19:6a:aa:2b:1f:89:03:eb:74:10:b4:e6:
         8b:ed:ad:c5:46:52:96:0d:60:e7:2a:ba:3a:e7:3b:b7:07:bd:
         98:2f:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:40 2026 by rpki-client