Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa
File:                     80C33BD4227811F190F6266DA4833773.roa (raw, json)
Hash identifier:          3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=
Subject key identifier:   62:EA:C2:E2:BD:3C:44:0A:B7:4A:56:F2:EA:BB:9C:1A:C7:EF:C9:8E
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C33
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa
Signing time:             Wed 18 Mar 2026 03:13:58 +0000
ROA not before:           Wed 18 Mar 2026 03:13:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.249.184.0/24 maxlen: 24
                          103.249.185.0/24 maxlen: 24
                          103.249.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Mar 18 03:13:58 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69ba1875-a8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:a4:fb:d6:8d:44:0b:7d:2d:99:45:42:52:
                    ff:0d:da:3c:8b:fc:3e:48:e4:ce:f1:a2:b0:30:04:
                    c1:45:e7:e5:6a:d3:df:b0:e8:b3:1f:80:e3:5b:4f:
                    0e:d7:7e:4d:3c:de:a0:eb:70:80:0a:7e:90:ab:93:
                    61:14:08:d0:e9:e3:6a:58:0f:26:d9:64:cc:a8:52:
                    c5:04:88:92:6c:44:29:94:3e:5f:27:37:86:ef:38:
                    fa:2c:75:f1:9b:83:55:fa:53:04:e1:c1:db:ec:85:
                    d8:4d:dd:73:04:5f:b0:bb:20:b9:9b:ab:4f:a9:eb:
                    2d:e3:45:6e:7c:e4:e8:3c:92:bd:6c:0d:f7:f6:8a:
                    53:5f:fa:d2:5d:d6:e6:12:51:68:62:ba:27:f9:17:
                    2d:b7:06:b8:57:3c:50:38:5f:f8:ce:0b:65:55:82:
                    0a:20:c7:cb:f2:22:88:2b:41:6b:ca:e8:55:93:f5:
                    cb:c4:46:ab:9e:ec:56:b6:85:cc:ed:85:79:b2:43:
                    bc:af:14:9e:d5:23:1a:8d:14:f4:5a:3f:35:4b:d0:
                    21:c9:78:56:59:67:5f:03:4a:ba:38:17:c5:9b:56:
                    35:0a:bc:6b:58:13:b4:8f:e4:cd:86:6b:b9:3c:dc:
                    ab:49:8a:83:81:d2:86:7a:91:ea:31:3b:b5:ac:37:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:C2:E2:BD:3C:44:0A:B7:4A:56:F2:EA:BB:9C:1A:C7:EF:C9:8E
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.184.0-103.249.186.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:2c:43:ac:69:2b:31:1c:2e:58:94:7c:4c:21:f4:80:85:
         b6:7d:c3:62:d6:7e:e4:71:af:59:e3:ae:ae:4d:45:21:a0:1c:
         a4:de:04:a0:dc:d6:d2:ea:ec:52:41:64:f8:2f:98:b2:b2:d1:
         eb:fb:11:22:b4:36:45:78:81:c7:f4:dd:be:f1:0d:ec:59:8d:
         64:2a:8c:4c:cf:7d:4b:27:4e:c0:dc:fc:5f:3b:94:d8:ce:cc:
         75:62:67:9b:b9:6d:04:1b:10:ce:34:f1:95:5e:f7:2f:3b:63:
         a2:e7:c5:1f:06:16:2d:b9:00:5e:75:5a:48:f1:0f:3b:1e:84:
         4c:4e:9b:0b:b7:a8:0a:b0:51:0e:ee:19:00:d7:dd:6f:9e:7b:
         6d:bc:df:37:5f:86:25:d9:25:70:e3:bc:09:fb:df:ff:3a:02:
         1f:cc:1f:73:a5:55:6c:56:41:8b:2a:d9:01:6d:ff:47:c8:e5:
         b4:db:3f:8a:a3:5c:ec:dd:44:05:49:68:3f:84:35:31:a4:3b:
         94:2a:44:45:0d:c5:ff:32:44:9a:1d:10:9f:ce:69:03:c6:35:
         a5:f6:c2:05:2e:f6:92:41:57:09:43:9a:9b:f2:b3:1e:1d:fe:
         7a:4f:a8:97:d3:28:f2:4f:89:e7:fb:94:3a:7d:7d:ec:22:d6:
         5b:00:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:04 2026 by rpki-client