Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E99E81C816E11F0A5992F28C4F9AE02.roa
File:                     3E99E81C816E11F0A5992F28C4F9AE02.roa (raw, json)
Hash identifier:          PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=
Subject key identifier:   58:BC:58:BD:53:A4:04:6E:23:0E:0A:E3:62:EC:DE:8D:62:2C:EC:5E
Certificate issuer:       /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial:       6B
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E99E81C816E11F0A5992F28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:18:29 +0000
ROA not before:           Sat 27 Dec 2025 06:25:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150706
IP address blocks:        103.160.44.0/23 maxlen: 23
                          103.160.44.0/24 maxlen: 24
                          103.160.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
        Validity
            Not Before: Dec 27 06:25:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43ca4-987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:5a:c9:6e:96:6a:7d:96:a4:e4:62:27:63:
                    55:b5:11:2b:88:60:44:6e:d2:7c:7d:9d:48:b3:03:
                    18:5c:95:55:79:dc:96:86:2d:4d:1b:70:f3:1e:5f:
                    0e:21:5d:3f:b9:96:bd:13:23:a6:29:f2:62:b6:fd:
                    95:70:01:f2:77:aa:fe:8b:4d:52:a6:45:12:b5:4e:
                    a8:7e:93:80:4f:bb:fa:7e:03:ab:ec:a4:91:85:c8:
                    10:1c:f3:b3:ec:15:44:4c:05:61:8e:69:f2:f4:d6:
                    6e:3c:88:34:d4:4e:2d:92:95:05:02:05:e7:ec:7e:
                    e7:95:56:a4:73:5f:0e:95:be:61:df:f7:81:ac:1e:
                    32:44:43:84:7a:5c:5b:80:a0:a4:c6:16:8d:f3:3a:
                    7c:59:8c:76:c0:49:62:c3:e0:e4:07:27:b5:af:fa:
                    60:05:d3:52:c2:81:80:ff:29:dd:2d:22:8b:12:96:
                    a6:12:32:06:0d:fc:36:85:7c:58:b7:32:5c:94:8f:
                    e7:ac:72:bc:26:40:b8:6c:ec:ac:d8:10:3c:e4:19:
                    83:62:ae:1e:68:a6:4c:fa:b3:54:1c:b2:9d:ed:ad:
                    16:3f:a3:04:e9:f5:ac:f3:0f:83:c6:78:e8:b7:6c:
                    d7:3b:9e:8a:e8:f7:f5:8e:4f:6b:fa:3c:98:85:6e:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:58:BD:53:A4:04:6E:23:0E:0A:E3:62:EC:DE:8D:62:2C:EC:5E
            X509v3 Authority Key Identifier:
                keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E99E81C816E11F0A5992F28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:2e:b9:9e:bc:bb:0f:be:08:0b:02:4c:b4:ff:ee:dc:37:67:
         8a:21:c2:68:b3:34:ce:fa:4c:7d:3f:90:26:01:bf:d5:94:00:
         91:0a:b1:70:47:72:79:64:1c:68:26:2d:03:fe:9b:e6:b6:44:
         5c:a7:ce:28:cf:0a:6c:7d:70:db:7a:0e:d7:dc:60:82:a7:02:
         e9:bc:f5:67:d6:d9:21:de:0d:41:a2:d4:29:cb:7c:07:55:77:
         6e:5e:66:89:c4:a0:19:46:95:2c:d7:1b:43:22:c6:d8:06:99:
         35:c7:0f:83:bc:aa:ff:aa:fc:bd:9f:31:1f:60:0c:79:b5:85:
         01:f9:39:b8:c0:8e:d8:64:78:c3:ae:11:50:cf:c4:69:c8:b4:
         40:10:0f:ba:f1:b8:f4:45:db:4d:c8:ff:e0:77:f5:29:cb:d4:
         f6:27:14:87:01:f8:41:3c:bd:a2:16:5f:fb:8e:c0:9b:bc:45:
         b2:c9:90:f7:3d:ed:e5:0a:78:c4:0f:7b:75:65:bb:a5:33:df:
         be:ad:b7:ce:03:1c:7f:3f:5d:ad:82:3e:46:1d:4d:16:af:46:
         ce:6b:9c:85:d5:15:6e:0f:8e:8d:b0:ba:80:e4:c4:f5:4f:f5:
         df:73:69:91:77:a5:f0:f8:b9:b7:bb:5e:31:7e:ca:98:83:b6:
         46:70:88:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:04 2026 by rpki-client