Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa
File:                     48485D88CC6411EDA7970484C4F9AE02.roa (raw, json)
Hash identifier:          YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=
Subject key identifier:   91:3B:EE:12:66:31:B1:0F:18:0C:00:3C:0C:62:83:2F:D1:1E:12:0C
Certificate issuer:       /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
Certificate serial:       0235
Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa
Signing time:             Thu 19 Mar 2026 02:37:00 +0000
ROA not before:           Thu 19 Mar 2026 02:37:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149631
IP address blocks:        103.224.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
        Validity
            Not Before: Mar 19 02:37:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69bb614c-8868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:3f:fe:6b:3e:80:78:68:ff:3e:1b:d5:8e:
                    b1:75:4a:14:15:e1:a9:46:5b:22:8d:83:7b:b1:c8:
                    2d:4c:0a:b6:db:4e:ef:ca:41:98:40:5f:f0:8d:e5:
                    85:4d:66:5b:35:ca:36:a7:33:b9:12:c8:fe:2f:a1:
                    84:3d:cb:3b:fc:ae:66:91:34:01:da:20:cd:ee:1b:
                    d1:f9:e2:86:a6:05:47:3d:66:45:2f:a5:9f:33:35:
                    cb:0f:84:0d:7d:56:86:95:39:b8:8f:91:c4:27:d1:
                    da:3d:bb:72:36:f7:b3:a5:9f:17:43:58:db:88:a7:
                    86:c5:2b:a9:20:b5:c1:8a:e0:8a:10:9a:d5:cd:c4:
                    64:2e:bf:3b:50:95:52:9b:8b:7d:65:a2:c3:a8:07:
                    99:ba:b6:d0:09:e4:52:10:21:98:ff:d9:37:05:74:
                    32:06:0f:60:f5:f6:db:b4:8c:4b:5d:94:1f:6d:1d:
                    db:2a:50:b8:0e:ec:89:7c:d1:7f:df:ff:50:30:6d:
                    ee:68:d6:93:aa:ef:f8:41:18:dd:b8:bb:e5:94:2e:
                    07:e4:27:9e:ba:9e:13:58:c0:18:2a:12:da:ec:fb:
                    10:ec:13:c4:0c:5d:b7:21:87:04:a2:2e:e1:72:6d:
                    35:3f:f1:34:d0:43:0a:b9:29:f0:6b:cb:13:df:0e:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:EE:12:66:31:B1:0F:18:0C:00:3C:0C:62:83:2F:D1:1E:12:0C
            X509v3 Authority Key Identifier:
                keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:63:13:73:3c:ae:e4:2c:88:be:9f:1b:21:39:6e:d3:ea:
         fe:af:8e:17:16:21:d8:c4:d3:ec:56:dd:53:15:de:ed:ea:65:
         e3:f8:a8:01:27:5c:8e:1b:fe:ac:8a:e3:92:e8:f3:3b:bd:1f:
         3d:fc:cf:ee:14:76:0b:dd:b1:04:9e:03:7f:df:05:73:54:b7:
         aa:29:9b:62:ac:bd:c6:51:13:e0:f4:18:74:62:75:25:74:24:
         2c:16:d5:2a:cd:06:59:b8:5b:61:be:20:51:67:3b:15:45:fd:
         af:bf:8d:fa:3e:d9:3a:3d:4b:c1:d1:aa:cd:99:9d:12:10:05:
         28:8a:46:01:f4:1a:2a:b6:e9:2a:86:b4:11:79:70:19:4d:d2:
         b8:13:b2:41:30:74:3c:9f:c3:3f:6b:36:0b:4b:7f:31:5b:ef:
         ce:24:f3:ed:b1:8b:f0:aa:e5:53:f0:cb:bc:69:3e:13:fd:f3:
         6d:09:d1:c6:0d:d8:cb:68:95:d2:fc:88:4a:c0:ed:06:97:07:
         1b:45:b1:96:df:d2:e9:44:13:9f:f4:94:ed:b7:74:1f:30:51:
         cd:e0:bf:19:09:c5:b5:81:08:60:84:a7:06:71:9b:e0:b4:4a:
         b5:65:52:27:85:ba:62:ab:7b:23:cb:5e:73:20:29:91:f3:01:
         62:bc:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:38 2026 by rpki-client