Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa
File:                     AF95CCA0A08711EC88A88D39C4F9AE02.roa (raw, json)
Hash identifier:          QPgluyQ0OOHN3tIEk3zp/OVQdTFmcorAT0g2yRkNjp0=
Subject key identifier:   7B:03:05:55:FA:FA:9D:1B:5E:2A:09:09:7C:65:99:2B:99:6F:69:E2
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       0421
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:55:37 +0000
ROA not before:           Sat 29 Mar 2025 01:26:40 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149643
IP address blocks:        103.183.106.0/23 maxlen: 24
                          2400:6260::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Mar 29 01:26:40 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ff09-8dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:a5:02:2a:93:c5:dc:ec:a5:eb:7e:77:20:
                    a1:d4:f6:f5:14:cd:8d:6d:cf:bd:ef:a9:d3:4a:9c:
                    76:9f:cc:c8:98:3f:7c:08:ee:eb:f4:b3:ad:4e:82:
                    d1:62:f5:be:0b:53:9f:28:4d:87:2a:ed:79:d1:ff:
                    50:41:34:6c:54:50:42:05:a3:e5:cf:3d:16:c6:8a:
                    d7:36:36:d4:9e:4b:18:26:b4:ae:25:e7:b2:60:66:
                    db:3a:05:a6:30:84:44:93:e6:80:5f:8e:1d:84:a1:
                    92:03:37:55:e8:15:5e:42:09:22:19:cf:30:46:db:
                    26:46:53:67:88:e9:2e:3f:cc:c8:a7:b4:30:ba:d9:
                    68:0e:f9:ae:06:bd:04:0f:97:7c:5b:5d:ee:9c:45:
                    1a:ed:e1:9a:34:a2:8c:1f:a5:b7:58:75:2e:33:b6:
                    2c:f6:07:8b:f0:19:57:ba:49:8a:35:22:3c:95:b8:
                    87:84:28:38:99:78:d4:5c:75:27:bc:99:e3:1b:68:
                    71:10:9e:99:74:d7:f6:7b:b0:db:a8:6d:8a:e0:ac:
                    5d:6f:d3:5f:4b:08:ee:fe:3c:17:6c:85:93:b9:7f:
                    7e:7e:1d:72:48:73:70:c7:e0:73:da:be:b1:29:b8:
                    cd:6a:a0:61:da:d8:b7:87:09:3c:2c:3a:16:45:cb:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:05:55:FA:FA:9D:1B:5E:2A:09:09:7C:65:99:2B:99:6F:69:E2
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.106.0/23
                IPv6:
                  2400:6260::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:52:46:49:55:2c:07:b8:d7:f9:d5:46:10:c1:02:e8:a4:
         ee:dd:7a:5c:a4:9e:a3:ef:80:7c:86:42:96:91:00:08:95:37:
         ab:ba:9f:34:19:50:a7:29:94:0b:be:c5:5b:c8:d7:a6:ac:e9:
         e9:14:a7:23:18:5b:22:c1:49:72:9d:5a:e8:fa:9b:41:0a:94:
         51:e9:77:a2:12:dd:6f:e0:c5:4f:c7:1d:33:96:df:14:be:c0:
         9b:62:8c:ec:8d:eb:79:d3:45:57:f5:d4:e5:0e:c6:ea:00:fe:
         e0:16:89:21:44:22:96:e7:e0:b8:09:e7:80:36:29:33:82:b9:
         1a:1e:2d:70:79:b3:e8:26:b9:42:1d:b1:bd:0d:6d:f4:cf:99:
         16:79:f6:2c:ce:5e:ba:ef:a0:b5:d5:ea:ee:b7:7b:e9:68:47:
         e8:b8:68:b1:4e:ff:e0:8b:06:78:3a:1b:14:f4:53:77:1c:eb:
         d9:7a:52:ca:af:94:05:54:43:59:8f:1c:7d:aa:06:4e:f1:cf:
         44:d6:18:ed:8e:0b:16:2d:3f:6f:04:35:b9:74:6a:a5:f4:e4:
         43:25:f7:00:37:70:3e:ae:99:3b:a2:37:d8:a8:b7:3d:46:f5:
         6d:d6:53:8d:a9:6b:0b:c9:34:2a:e7:2d:aa:34:e2:c9:d9:a0:
         27:1c:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:41 2026 by rpki-client