Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
File:                     FFE0F998101511EDA7D8F271C4F9AE02.roa (raw, json)
Hash identifier:          ZQpN4eFzD7d15/pql3WL2/ZjZDYkswUqki4AmBgOAPo=
Subject key identifier:   20:92:87:2A:2D:3E:8B:8E:C8:93:B7:F8:6F:F0:4B:B7:83:F9:EB:6E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       19C4
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:30:23 +0000
ROA not before:           Sat 28 Feb 2026 17:14:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149781
IP address blocks:        103.101.175.0/24 maxlen: 24
                          2001:df0:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6596 (0x19c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Feb 28 17:14:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45b8f-3338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:08:e5:8d:d1:c8:32:49:6f:30:68:89:5b:
                    06:a7:62:c1:ff:2c:92:69:c9:cf:d1:91:7e:30:76:
                    82:85:a2:5c:66:7f:88:bd:b7:0d:f1:cd:92:da:60:
                    27:89:48:1e:c1:97:78:94:30:87:7c:48:9c:de:76:
                    6e:8d:a9:0a:a8:a9:40:b7:03:85:55:9d:40:7d:95:
                    6f:d3:29:41:43:4a:04:00:5a:c0:5e:54:2a:17:94:
                    1a:43:83:ff:41:b4:6f:cc:66:01:d1:f7:a1:43:fa:
                    7d:2f:34:8c:3b:01:62:31:2c:50:06:e2:b4:50:db:
                    9f:4f:6a:16:9d:7f:e9:c7:c4:9a:b5:04:18:d5:4f:
                    95:9d:f9:dd:42:98:08:9a:ad:92:79:da:6d:b0:17:
                    c5:27:52:0d:5c:dd:96:08:d1:a7:fd:bc:f8:87:08:
                    96:b8:2a:13:68:8c:18:9f:f1:23:8a:45:02:d5:d2:
                    6d:a2:a0:f3:1a:e7:4d:9e:6f:53:e7:df:54:e7:7e:
                    de:f6:ad:e5:75:a2:0d:1d:a9:ed:42:22:d4:f1:a7:
                    e9:ff:7c:12:66:bd:8b:f0:45:cd:e5:b7:6d:ac:49:
                    0e:8e:b0:ca:df:f3:a3:a4:08:fc:6c:f7:09:b4:9f:
                    d2:48:a7:57:36:7b:82:5f:0b:24:2a:01:68:3e:ac:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:87:2A:2D:3E:8B:8E:C8:93:B7:F8:6F:F0:4B:B7:83:F9:EB:6E
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.175.0/24
                IPv6:
                  2001:df0:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:01:1a:89:9c:af:69:46:dc:eb:a3:71:eb:4a:66:9a:b9:58:
         dc:7a:53:8c:d5:d0:d4:ae:ea:3c:05:2b:a2:41:81:17:7e:3f:
         05:ef:59:ce:7b:ef:b5:58:4e:8d:08:51:f7:88:86:b0:db:fd:
         28:d3:34:59:3e:e7:0f:6f:f1:bf:5a:e2:24:e3:d0:12:79:93:
         65:c3:62:8d:d5:dd:42:82:0f:81:e2:a5:04:34:31:e9:b7:68:
         41:04:00:51:5f:9d:17:3d:64:d6:03:9a:49:bb:c9:eb:00:4e:
         fc:5e:d8:f1:82:a0:e8:35:24:23:9a:88:aa:97:29:5b:9b:61:
         11:92:42:52:27:ad:31:e6:4d:45:b7:3e:8d:77:d0:5c:10:4a:
         3d:84:6b:5c:18:dd:9e:e7:f0:03:d2:fd:c0:07:3e:63:37:c5:
         78:5c:e0:34:6a:71:7b:ac:02:06:2d:71:c2:d1:63:09:0d:06:
         36:38:30:b8:98:ce:53:13:88:52:de:5d:c3:56:19:48:02:52:
         46:dd:fb:52:15:11:4b:e9:4e:bd:cc:d4:b9:2c:ad:71:b4:7d:
         aa:10:e5:ab:92:d5:c9:ed:b2:cb:7d:63:91:a5:7f:4a:b4:89:
         7d:32:15:c1:48:fe:f0:3b:2c:ba:05:1b:f6:96:6f:87:84:fb:
         49:1d:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:50 2026 by rpki-client