Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa
File:                     F6722FA6822411F088762570C4F9AE02.roa (raw, json)
Hash identifier:          FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=
Subject key identifier:   44:B8:B0:96:AC:26:50:E6:9E:FA:54:F7:A1:2D:87:4E:AF:7A:05:A5
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C24
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:34 +0000
ROA not before:           Wed 07 Jan 2026 07:58:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        43.239.104.0/24 maxlen: 24
                          43.239.105.0/24 maxlen: 24
                          45.124.204.0/24 maxlen: 24
                          45.124.205.0/24 maxlen: 24
                          45.124.206.0/24 maxlen: 24
                          45.124.207.0/24 maxlen: 24
                          103.25.100.0/24 maxlen: 24
                          103.25.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3108 (0xc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Jan  7 07:58:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48a02-4f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:b5:ff:3f:44:37:94:2d:b1:d9:a6:65:57:
                    71:fe:34:41:42:d8:e5:37:d0:bb:f1:8f:53:49:44:
                    b0:11:73:49:95:bf:7f:67:0b:61:f0:65:e0:01:b3:
                    f3:38:0a:0e:5b:bd:c3:35:02:3b:25:bc:54:df:04:
                    dd:0a:8d:a8:04:03:16:57:d0:2b:e5:34:a7:88:ff:
                    70:82:03:c3:08:80:d1:50:f1:09:b6:d2:bc:0e:f7:
                    b8:23:26:3a:7c:58:fd:7f:e1:8a:43:1f:d0:42:5a:
                    55:50:3f:cf:2b:90:89:05:43:4c:00:54:eb:91:00:
                    ed:9f:48:7c:fb:08:bd:35:44:77:71:dc:60:d9:72:
                    04:e3:6d:1e:6d:48:df:d5:7c:06:c3:06:c6:d4:08:
                    c3:c5:8e:bc:ea:ea:37:9b:cf:21:75:b4:bd:e6:10:
                    0d:8e:aa:69:3c:58:2c:74:83:f5:68:3a:cc:57:0c:
                    f0:32:12:07:52:fd:07:52:01:e7:80:78:77:37:8e:
                    78:a5:50:c3:ae:66:f5:7e:6b:92:c1:56:ee:30:78:
                    fa:75:80:fc:c0:4a:5b:4c:a9:35:c2:ad:c8:d2:5c:
                    62:50:07:86:d3:8b:a2:bf:3a:80:b8:17:be:0f:a1:
                    0f:f8:da:fe:f0:ba:fd:69:88:87:a6:b8:96:80:df:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:B0:96:AC:26:50:E6:9E:FA:54:F7:A1:2D:87:4E:AF:7A:05:A5
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.104.0/23
                  45.124.204.0/22
                  103.25.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:63:30:b8:22:fc:fe:9d:2c:f7:b6:46:92:4d:00:fc:ab:
         00:70:7c:5f:8e:6d:59:df:49:63:8b:17:85:cc:4d:cb:ed:01:
         82:41:c9:b2:f3:19:e0:2d:49:12:60:bd:55:c9:a7:ce:65:dd:
         ac:8e:38:39:0a:be:4a:22:44:dd:c0:61:d3:cf:7d:34:07:be:
         b0:e7:15:3c:19:fd:ea:3a:d0:ec:ba:d5:5d:34:7d:d2:95:ff:
         5b:30:fa:ff:2a:67:6c:e6:25:8a:6b:ef:2b:97:b4:92:b0:70:
         b9:65:72:b4:a2:85:ec:84:5c:87:57:2d:dd:2c:c1:19:6c:ab:
         43:59:6f:c8:05:15:5e:0c:af:3d:af:8f:1a:37:dc:7d:ad:b3:
         c4:87:e8:c9:ab:88:39:5a:ca:64:11:07:e3:40:4b:91:0d:2a:
         8a:a0:dc:89:0f:8c:91:05:74:55:24:89:b5:6f:ac:6c:b3:c3:
         4c:7c:42:ad:68:10:2b:8e:62:4b:3c:e8:d9:37:21:a5:aa:5e:
         b2:98:62:c1:65:60:b4:66:3a:21:79:84:a7:ee:c8:f1:2f:72:
         b4:e0:bd:a1:4a:e3:0b:11:76:0a:2c:08:36:46:7f:2f:aa:51:
         a6:95:90:f9:96:74:71:c9:92:a9:d0:8c:3b:91:d0:60:69:5e:
         d7:65:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:27 2026 by rpki-client