Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa
File:                     B8D1F4E8501411F09C0FE83FC4F9AE02.roa (raw, json)
Hash identifier:          D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=
Subject key identifier:   8B:42:FA:9B:E9:96:BE:77:72:EC:69:35:A8:F8:C6:A1:18:8A:52:9B
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       0132
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:05 +0000
ROA not before:           Sun 07 Sep 2025 06:43:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     395886
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 09:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Sep  7 06:43:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a480fd-98cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:3b:7d:9c:3d:b2:35:ac:ad:2c:fc:1f:10:
                    45:da:0a:8c:3d:5d:f8:75:17:3b:62:3b:27:93:bf:
                    c3:6a:09:82:7d:0c:0b:af:69:dc:38:3c:45:0c:eb:
                    8f:6a:fc:54:b8:32:84:60:5a:bd:90:b1:82:9e:cd:
                    c2:13:7f:af:ee:04:bc:ae:7e:fc:7c:32:9b:7a:e5:
                    4a:97:f1:73:ee:47:6b:53:b6:e9:46:6b:e1:d3:c1:
                    13:1b:63:fe:8f:eb:4d:50:36:c0:bb:a9:f1:7e:42:
                    99:5b:ae:07:ec:ea:80:18:1c:47:ea:69:dd:c9:a3:
                    43:87:0d:9a:40:97:f5:19:94:27:28:8f:0e:0b:3d:
                    4c:5f:39:c1:39:f9:4e:ea:68:9c:9c:df:fd:3b:6a:
                    cc:5c:8d:37:17:a8:8f:97:c7:62:0d:65:55:80:dc:
                    27:c3:67:50:52:37:2a:da:ce:4d:36:5b:ff:92:95:
                    f0:ac:5e:8f:d6:18:fe:fd:56:6e:84:ec:f7:b7:a8:
                    b9:1f:0b:c6:7d:91:73:01:56:70:c5:22:a9:79:fe:
                    70:d4:4c:1b:56:14:a1:e4:a9:79:a5:ad:ab:0e:3f:
                    5a:77:ff:bd:8e:ee:c4:7d:9f:f4:3b:3b:73:fd:7f:
                    40:a7:57:30:a2:10:75:f1:a3:be:37:ad:9b:f8:02:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:42:FA:9B:E9:96:BE:77:72:EC:69:35:A8:F8:C6:A1:18:8A:52:9B
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:48:80:3c:4c:f0:4a:c9:39:e9:c0:8d:ab:97:51:ed:48:7b:
         7e:31:c3:5d:45:b0:ab:5b:6a:43:35:4f:1d:39:65:df:37:97:
         8f:73:d1:88:25:40:cf:58:fe:82:b5:b4:5c:66:c1:5a:aa:02:
         1a:47:0e:74:b5:66:f8:9d:35:16:85:90:6b:65:4e:0b:45:45:
         6d:02:61:c5:bb:f2:99:ea:ca:1e:c9:17:e2:73:2e:df:3b:4e:
         aa:46:f4:81:22:0b:bd:ce:9a:8b:20:86:d4:55:0d:20:29:a0:
         2c:6d:4a:3b:ae:5f:31:05:40:41:69:0d:56:f1:e7:13:0c:a4:
         44:88:29:cf:e2:bc:bc:80:3d:ec:a4:bf:a0:0c:1d:3a:e7:a2:
         70:05:2a:20:8d:75:9d:05:bc:f2:45:27:38:15:1c:19:59:95:
         18:d4:ae:1b:88:8e:8e:75:70:a8:23:87:63:25:7e:a6:3d:44:
         7c:c9:87:f2:58:43:03:2c:91:3e:d9:01:69:03:10:24:1f:74:
         99:b4:9d:22:2a:7e:56:4f:a4:81:1f:7e:c6:f2:f7:67:b6:89:
         66:f0:4e:60:ad:04:e1:8a:2e:0d:2e:60:1a:3d:f5:88:63:ca:
         7b:f9:33:d9:a5:ba:dc:1a:3c:ed:91:c6:7c:56:89:35:63:44:
         87:a1:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:22 2026 by rpki-client