Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/C0D0F162FFEB11F085398A1A766F56BC.roa
File:                     C0D0F162FFEB11F085398A1A766F56BC.roa (raw, json)
Hash identifier:          bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=
Subject key identifier:   D9:EE:3D:B7:73:8C:31:6B:BB:EB:4E:71:41:E4:BC:93:95:A4:DD:A1
Certificate issuer:       /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial:       10E9
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/C0D0F162FFEB11F085398A1A766F56BC.roa
Signing time:             Sun 01 Mar 2026 14:37:10 +0000
ROA not before:           Mon 02 Feb 2026 04:00:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132344
IP address blocks:        103.13.32.0/22 maxlen: 23
                          103.13.32.0/23 maxlen: 24
                          103.13.34.0/24 maxlen: 24
                          103.71.248.0/22 maxlen: 24
                          2406:b380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
                          rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4329 (0x10e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
        Validity
            Not Before: Feb  2 04:00:46 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44f16-767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:cd:e0:f7:7d:20:9b:74:3a:27:82:e6:80:
                    96:15:24:e5:f9:46:80:23:15:0b:b9:a3:01:bb:5a:
                    24:0d:ab:95:a7:e9:4a:ab:c7:a3:24:45:73:88:ba:
                    2d:46:14:e1:2b:fe:4a:8c:ab:a9:27:79:a9:f3:17:
                    c9:b1:6f:de:01:26:b2:8e:2e:e8:00:f9:e7:b8:72:
                    47:a0:89:d1:81:1e:a8:3f:29:89:df:9a:d8:d0:9d:
                    e2:5a:ef:03:32:cb:8b:3f:06:24:c6:a5:42:ff:91:
                    2d:dc:e1:30:b1:1f:66:d9:2f:33:7d:e3:3b:1d:8f:
                    60:32:b4:ed:2c:5b:de:5d:f0:dc:2f:3c:93:6c:2b:
                    c2:f5:1a:c5:94:f1:2d:5e:36:52:eb:09:99:9c:3e:
                    b5:19:f2:c9:96:f3:18:47:72:bb:e6:30:af:bd:6d:
                    4e:8a:3d:55:36:b8:ba:a8:e9:91:08:f1:b4:49:52:
                    7c:8b:79:14:ad:e3:6a:8d:62:ac:a7:b2:06:2f:8a:
                    4b:05:e8:be:e0:4c:61:20:7b:5c:a1:f2:49:01:7c:
                    34:97:70:f1:1c:f0:25:08:18:92:a5:c4:ef:6f:40:
                    9d:78:d6:e6:e5:e7:0d:3e:7d:af:6f:01:fb:ab:9b:
                    7e:fa:dd:96:d0:db:e3:90:d5:3e:60:f8:dc:f7:34:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:3D:B7:73:8C:31:6B:BB:EB:4E:71:41:E4:BC:93:95:A4:DD:A1
            X509v3 Authority Key Identifier:
                keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/C0D0F162FFEB11F085398A1A766F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.32.0/22
                  103.71.248.0/22
                IPv6:
                  2406:b380::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:88:7f:74:43:f9:1f:12:ea:6b:a5:fa:d5:d9:a6:4a:2d:
         dd:5f:75:ed:00:36:12:ec:1c:91:4b:b4:72:c2:05:e7:b3:7f:
         c6:ad:d7:91:fb:c8:e7:9d:4e:fb:48:0a:01:66:8f:39:b2:b4:
         a4:65:11:8f:e4:af:1b:ff:87:6e:e9:95:8e:42:c5:d7:12:17:
         f1:e4:96:cb:c5:11:88:b3:a6:11:a2:87:48:14:0d:f7:76:1d:
         73:d9:f2:33:1c:5f:d6:a9:1c:f0:89:e9:c2:f8:8f:bb:1f:bf:
         ce:12:ea:f4:27:61:1c:78:e2:2f:77:4c:f0:38:18:18:ef:be:
         7d:84:e0:3c:6d:9b:0f:9a:82:04:67:6f:3a:84:1f:0f:42:ec:
         de:5d:dd:cf:29:0d:d5:5c:cd:5e:93:d1:89:2e:33:fd:b8:31:
         f3:17:88:4a:80:0c:87:e6:e7:cc:73:73:39:ec:65:b4:ac:35:
         38:fb:31:d4:07:c2:51:15:af:53:65:b9:13:f6:79:01:60:de:
         42:aa:4c:4a:91:3d:aa:f3:00:3e:00:9a:e2:b1:0a:d4:16:59:
         29:98:23:63:3e:e0:7b:a9:37:6b:ae:4f:a2:ba:0a:84:2d:21:
         88:33:82:2c:e7:3c:4d:81:c4:cf:ff:0f:3b:d0:1a:5f:ec:cd:
         a5:02:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:38:00 2026 by rpki-client