Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa
File:                     C8AE3C40B93811EBAC80A46DC4F9AE02.roa (raw, json)
Hash identifier:          1mbzzSgNt8PbQ4g3ytun+iVzC+s6rXhERemAXDwVlkg=
Subject key identifier:   91:0D:B2:BB:C4:C2:59:CE:9F:A9:06:A2:F6:8C:DD:9F:9B:A9:44:E7
Certificate issuer:       /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial:       067E
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:29:45 +0000
ROA not before:           Mon 02 Mar 2026 23:29:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63923
IP address blocks:        103.44.76.0/22 maxlen: 22
                          103.44.76.0/24 maxlen: 24
                          103.44.77.0/24 maxlen: 24
                          103.44.78.0/24 maxlen: 24
                          103.44.79.0/24 maxlen: 24
                          2001:df1:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
                          rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
        Validity
            Not Before: Mar  2 23:29:45 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a61d69-d128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:60:bc:66:12:23:c3:9c:b5:1e:19:66:87:
                    08:a4:02:92:60:8b:ac:6f:67:95:07:47:b1:f8:9f:
                    02:66:1e:89:75:e9:cb:b7:09:5b:72:f7:66:ba:c4:
                    94:c5:5d:53:e1:c1:eb:c8:74:fd:2a:47:52:7f:b5:
                    62:37:7b:d9:13:bc:e4:1d:f9:49:5a:03:91:9c:a7:
                    e5:bd:d8:6a:a5:d7:1c:d8:11:25:b0:ca:32:4b:0a:
                    98:71:1c:0c:dd:84:60:a3:1e:a7:df:59:43:ef:d8:
                    d8:6a:4b:4b:39:22:37:27:80:52:20:e5:c4:36:b6:
                    c3:7f:f1:6e:6d:26:b4:f9:63:63:29:c8:24:11:4d:
                    df:a1:69:b7:65:e7:c9:47:8e:da:6f:2e:3c:42:9b:
                    18:ae:f1:7b:13:23:55:2d:e0:8d:2c:e0:a9:2c:b6:
                    f6:b9:11:ba:52:25:db:6f:1c:49:41:2f:42:57:41:
                    26:63:c3:1e:13:43:c9:6a:c7:d8:29:b0:7a:81:17:
                    27:e9:28:ff:30:7f:91:2e:45:4f:6e:8f:f2:75:28:
                    68:9e:e4:45:06:c8:9b:cc:2c:a8:51:0c:2d:09:79:
                    3e:1e:f4:df:5c:bd:fc:b6:ee:9d:1e:13:e8:6c:9c:
                    27:86:25:bb:df:48:b9:5a:fb:5d:7c:d9:75:3e:48:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:B2:BB:C4:C2:59:CE:9F:A9:06:A2:F6:8C:DD:9F:9B:A9:44:E7
            X509v3 Authority Key Identifier:
                keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.76.0/22
                IPv6:
                  2001:df1:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:44:68:90:31:82:cd:d2:a7:d2:8b:a0:53:20:0c:74:e2:
         74:e6:2c:6a:48:1b:d6:40:73:1a:d9:19:e2:92:85:32:67:ff:
         f6:56:48:71:40:9c:6d:84:15:d3:09:58:ca:91:65:2a:bf:89:
         ba:59:99:80:d3:a7:1f:f8:9b:9a:0a:5b:ae:4f:e9:c3:16:f2:
         d8:9d:f9:d6:1f:fe:84:56:fb:d3:21:08:0e:ce:18:1d:66:31:
         a8:22:75:d2:d1:f3:3b:f8:2e:77:15:5a:36:3f:e7:00:c9:4f:
         6f:c2:10:94:92:48:4a:20:37:d2:cb:1f:7d:75:bd:ae:af:bc:
         a6:6a:e6:10:5f:77:bc:f3:9c:73:a3:14:54:83:e3:4b:2a:06:
         ed:c7:1a:33:68:de:6e:8f:18:8e:31:f6:50:1e:c0:39:97:60:
         08:19:82:7c:ca:00:df:a7:46:4a:9d:53:8d:d2:7d:ab:32:f6:
         87:7e:6e:a7:39:10:1f:22:b6:83:4d:d8:70:c0:bc:5f:5e:d9:
         36:24:7e:7f:49:42:aa:2a:ab:31:16:e1:d2:3f:fe:55:14:a2:
         00:a1:77:41:cb:92:74:3a:af:68:9e:b7:fa:fe:09:6d:cd:fb:
         19:72:cc:e3:6a:9e:bb:bb:78:6c:8f:0c:b7:a5:c4:2b:40:f3:
         af:d1:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:10:01 2026 by rpki-client