Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
File:                     3F3532743C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=
Subject key identifier:   29:C9:5B:55:12:BC:FA:3B:8D:7C:F0:31:6B:9A:4C:42:37:E7:00:E7
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       056C
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
Signing time:             Mon 04 May 2026 23:29:45 +0000
ROA not before:           Mon 04 May 2026 23:29:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        103.212.96.0/22 maxlen: 24
                          139.5.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: May  4 23:29:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f92be9-0d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:ca:ac:ea:12:9a:8b:aa:94:bd:5a:39:af:
                    1f:2a:c9:ca:e2:36:9d:96:0e:68:fd:c1:6c:f5:e3:
                    c6:d2:13:bc:e8:67:b3:b1:8b:76:54:f8:20:2b:cd:
                    62:09:24:a3:ce:86:6d:3c:48:11:a4:99:50:f4:98:
                    ac:9f:2b:51:b5:51:8d:b6:be:2f:2e:6f:b0:6f:ba:
                    4b:6f:22:5c:8c:96:bd:77:f6:a2:4a:c5:d8:8a:fb:
                    48:51:5a:d6:f9:08:dc:6f:ef:04:99:c0:69:4a:5e:
                    d8:53:6a:63:c8:a6:3c:6c:62:bf:3e:8b:8a:ef:f6:
                    f9:c2:7c:30:7e:d8:10:92:19:a7:29:63:52:e5:89:
                    a8:3e:69:9f:4d:6a:18:b1:6a:0b:30:96:4a:a0:16:
                    55:95:86:f2:31:a4:0e:8f:00:df:fc:7f:2b:c1:b8:
                    b0:3e:45:82:8f:a4:16:21:38:7d:31:c4:b8:5c:37:
                    37:7d:34:6c:a6:0a:e6:22:62:81:1e:16:8d:0e:d4:
                    d6:de:42:1f:3f:2c:59:91:b9:33:8d:92:9e:6b:9a:
                    4b:cb:27:40:66:32:47:61:e0:63:15:ef:c1:38:dc:
                    17:d0:ea:01:10:5a:06:5e:16:05:f3:22:ee:c1:3f:
                    84:5f:29:50:8a:98:c3:a8:3a:e3:34:75:42:2a:84:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:5B:55:12:BC:FA:3B:8D:7C:F0:31:6B:9A:4C:42:37:E7:00:E7
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.96.0/22
                  139.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:21:cf:e5:4f:9c:88:ea:c8:69:6b:3e:e6:88:88:f4:fd:
         08:04:28:3c:a3:84:bf:3d:48:22:86:62:11:1f:ec:10:a6:79:
         4b:51:7e:e7:54:16:84:12:e7:20:58:24:3b:94:9a:0c:cb:29:
         ba:1e:20:9e:18:00:30:0d:47:25:9a:bb:22:a1:25:d3:a3:0e:
         c8:6a:ed:9e:71:df:0c:fc:2a:44:50:f8:3a:e5:d2:29:a1:2b:
         90:c4:b3:75:fe:8b:0d:8c:4e:05:dc:49:cd:93:55:64:65:66:
         07:45:f9:11:14:18:f6:fe:86:12:3b:3e:e5:e0:5d:e4:4e:b0:
         ef:f8:48:6b:9e:33:56:de:61:c5:51:2b:2a:5c:a5:f0:6d:68:
         7c:f3:fb:ee:37:6e:32:49:61:8b:ec:74:d3:e1:37:2c:d2:1f:
         cc:3d:57:30:a2:95:5c:0b:7b:28:56:97:f8:44:fb:ba:aa:1a:
         fa:63:5b:84:45:de:31:d5:b5:17:d9:e0:74:b7:c2:b0:fc:27:
         4c:b8:e0:27:0f:12:81:3b:b2:81:dc:01:7a:36:34:90:4f:94:
         a0:ea:73:4f:26:70:43:d9:b0:9d:68:f9:b0:a5:a1:5c:8a:21:
         77:7e:5e:51:6b:74:c0:df:7c:76:0b:05:08:35:47:e8:b3:66:
         f1:3a:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:44 2026 by rpki-client