Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/7F64C44645A511ED93E3C45BC4F9AE02.roa
File:                     7F64C44645A511ED93E3C45BC4F9AE02.roa (raw, json)
Hash identifier:          D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=
Subject key identifier:   EB:CB:54:C9:65:81:12:BF:24:7E:17:31:7C:02:1D:EF:CD:F9:BF:EE
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       0336
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/7F64C44645A511ED93E3C45BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:04:32 +0000
ROA not before:           Thu 09 Oct 2025 01:28:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58704
IP address blocks:        103.20.140.0/22 maxlen: 24
                          2405:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: Oct  9 01:28:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a42b50-239f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:0f:b8:da:f6:60:25:eb:fb:1a:0f:a3:7b:
                    2d:66:62:4c:93:ec:17:83:f1:a2:fc:7e:ae:1f:7c:
                    7b:7b:0f:6a:4d:98:f0:b2:7a:c8:33:f2:60:82:2d:
                    7c:8f:a9:02:60:33:aa:3a:fa:e4:ff:cf:cf:0d:29:
                    6b:99:50:ca:0b:8c:87:ff:47:cd:5f:7c:44:37:15:
                    4b:07:96:1a:d6:e2:7c:56:2c:c8:00:58:4c:d0:3c:
                    a9:dc:93:ea:e2:7f:a5:91:ed:48:41:98:57:88:86:
                    f0:c4:f1:cb:e2:fb:f1:a9:97:9c:81:c4:26:68:c3:
                    f6:0b:eb:47:60:d2:b5:7e:e5:83:e2:a3:8f:72:b1:
                    ee:15:9d:33:34:a7:36:61:42:85:56:07:c1:5b:b9:
                    9c:f0:ca:f3:d5:14:bf:b6:41:46:ef:98:78:68:f2:
                    65:dd:af:8c:b5:f2:6e:17:b7:3f:ee:94:d6:ec:eb:
                    e5:bf:b5:8b:34:ad:17:1b:dd:c8:50:db:ed:f6:50:
                    d6:f7:81:84:58:bf:30:47:fc:db:93:23:9a:68:08:
                    a7:c4:e1:de:d2:22:a2:77:88:a8:40:bf:6d:7e:1a:
                    b8:1c:94:f0:98:ed:7e:19:fe:0a:64:1b:98:d9:f1:
                    9c:b0:54:1c:f8:c3:6e:8c:3c:40:9e:ba:4e:1c:92:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:54:C9:65:81:12:BF:24:7E:17:31:7C:02:1D:EF:CD:F9:BF:EE
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/7F64C44645A511ED93E3C45BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.140.0/22
                IPv6:
                  2405:2f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:6e:4a:d2:b8:db:aa:27:7d:e6:e8:7a:54:4b:c5:de:0b:
         42:2c:6c:bc:73:e4:20:9c:10:1b:18:5f:09:28:3e:51:7f:3b:
         e5:27:92:a1:8d:74:ca:cf:8e:78:e6:f3:05:9d:e0:bb:e3:9d:
         e3:f9:9e:6e:5d:9a:85:0a:7d:de:d6:bd:16:9e:61:52:cb:7d:
         59:72:6f:ad:b8:3d:66:f6:35:d3:be:78:55:d4:b2:ef:ea:9b:
         21:09:51:d4:73:6e:57:d4:fa:f7:95:07:03:5d:83:69:ce:d8:
         01:1d:cb:84:30:6c:85:3f:3d:51:61:f4:70:06:5a:72:d1:47:
         64:02:42:de:d8:c7:ad:58:ad:d1:cb:1a:a8:08:d3:07:63:83:
         14:d3:ea:1e:8a:cc:1b:c8:4d:0b:a2:1e:a4:01:a8:d0:47:45:
         87:cd:76:09:01:26:34:78:e1:70:1e:c4:bc:5b:05:19:1a:c5:
         e6:aa:b3:f6:7b:c7:79:77:47:e6:04:16:de:0b:4e:8e:c1:1e:
         ed:47:9b:79:ee:8a:47:ef:f8:17:95:cf:a5:13:18:5c:ca:61:
         1a:f6:1d:20:47:b6:f5:01:07:9a:20:4e:75:92:bc:1f:93:fe:
         71:70:72:81:d7:76:7e:d0:8c:ce:0b:db:1c:7a:f5:10:ed:6e:
         f4:4a:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:22:49 2026 by rpki-client