Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
File:                     CC26BAE6895E11F08FE3390FC4F9AE02.roa (raw, json)
Hash identifier:          gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=
Subject key identifier:   99:C6:29:66:90:40:09:30:0B:F0:0D:4C:51:0E:E0:F3:E4:FD:A0:4C
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       082F
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
Signing time:             Fri 20 Mar 2026 21:27:26 +0000
ROA not before:           Fri 20 Mar 2026 21:27:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     40605
IP address blocks:        103.85.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Mar 20 21:27:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bdbbbe-adde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:48:47:f7:4d:dc:f2:83:70:4f:0c:aa:e2:
                    d0:23:30:ad:43:b0:9f:91:57:42:0c:a7:f9:ac:ec:
                    26:bb:1c:f6:e4:c5:4c:d5:8f:09:e4:45:fe:ed:50:
                    73:b5:0b:7f:dc:33:0c:00:bd:5a:4a:f7:5f:85:1c:
                    18:aa:8e:fd:01:07:3b:71:72:98:42:f3:72:f4:5d:
                    40:27:4a:bd:46:f0:22:69:10:1f:71:a1:e3:9e:c3:
                    98:6d:fa:f4:ab:6f:89:98:a0:a3:e0:a7:ae:96:a4:
                    92:51:de:fc:cd:08:96:0c:c5:b4:ec:24:33:7f:cc:
                    75:a9:30:46:1f:cf:fd:dc:4d:51:9c:e1:de:82:11:
                    be:8e:ce:f1:c8:7c:43:5c:bc:c8:ad:82:06:b4:cf:
                    96:bf:22:c5:ff:51:a0:32:4d:8e:7d:d3:61:4b:bf:
                    8a:f2:c5:b6:95:46:e8:f4:8d:09:b7:82:2a:fb:37:
                    ac:91:fa:15:c2:c2:65:4c:82:8b:a2:90:b0:1d:8c:
                    cb:f6:ab:cc:fa:40:97:7f:fd:c4:7b:cc:20:5c:5b:
                    fb:55:48:a6:e4:f3:10:7f:69:97:a8:16:db:f1:61:
                    60:ab:d4:72:5a:68:c2:50:4c:0d:23:b9:16:d2:d2:
                    9c:e7:51:f1:49:77:81:68:ad:e4:80:3f:fb:01:36:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:29:66:90:40:09:30:0B:F0:0D:4C:51:0E:E0:F3:E4:FD:A0:4C
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:82:ac:c0:c5:b2:a2:39:6c:c7:dd:5d:0e:39:9e:a7:87:
         1b:fe:8c:07:60:1f:1b:72:1b:e9:77:62:e3:40:09:4f:ef:d9:
         d7:c1:6b:cd:d3:22:be:19:cf:a1:91:a6:18:69:05:e7:65:9e:
         ba:c9:f4:59:ea:c5:d2:3a:af:61:e8:76:0e:51:44:28:4a:1e:
         e1:3e:8b:62:b8:94:ba:6a:bd:d4:12:b2:f3:db:aa:06:18:ab:
         7c:73:4f:fe:71:84:57:a3:8f:1f:97:c1:a3:11:10:8d:9c:24:
         73:59:66:07:e3:3d:7a:9f:83:84:c9:14:70:35:8f:97:be:6f:
         f6:1d:db:fb:e3:a9:74:36:4d:4c:e6:90:70:67:d1:04:27:74:
         7d:76:e2:0d:9e:20:bc:0d:ae:c9:c9:dc:32:11:4f:a9:38:9a:
         eb:4e:a7:6c:1d:80:c3:c0:dc:3d:cf:18:02:19:ef:a2:ee:41:
         7b:d7:60:41:8e:6c:3d:7c:13:1e:3f:c6:87:b4:b0:65:e5:21:
         2c:0f:a3:02:da:ca:e3:25:df:c2:39:0b:81:b7:ae:eb:1f:b4:
         b7:78:15:a0:bd:14:9a:3c:75:3b:8a:bf:93:d1:b5:9c:45:33:
         88:5f:1f:8c:dc:82:26:31:da:1f:f4:5d:82:a9:ec:2f:e1:9a:
         04:6b:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:23 2026 by rpki-client