Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa
File:                     5417C204181311F1BB2D572D153D8C67.roa (raw, json)
Hash identifier:          H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=
Subject key identifier:   EB:49:24:0B:BF:D1:0B:2C:5C:E4:41:AD:32:7A:FD:57:AC:3E:63:28
Certificate issuer:       /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial:       08
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa
Signing time:             Wed 04 Mar 2026 21:44:32 +0000
ROA not before:           Wed 04 Mar 2026 21:44:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133624
IP address blocks:        103.36.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
                          rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
        Validity
            Not Before: Mar  4 21:44:32 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a8a7c0-05e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:a5:4d:26:05:66:08:f7:0a:52:3f:99:c0:
                    f1:6a:25:3a:95:f4:1d:7b:64:d8:8e:28:c6:89:07:
                    7f:d4:8d:83:58:86:92:75:81:7c:8d:28:8a:27:b9:
                    88:b3:aa:1c:63:1f:9e:94:fc:59:a2:24:19:a5:27:
                    8a:aa:d5:b8:1f:da:b3:5b:1c:f9:26:f4:66:7d:66:
                    40:94:42:a1:ee:1c:61:4d:1b:1b:8b:a2:3e:7a:20:
                    7b:55:10:08:a7:e2:6c:b1:f2:c5:af:24:b6:1b:42:
                    21:b8:bb:f3:a9:f7:82:d1:f6:3b:ce:4c:6a:2a:f6:
                    19:56:3a:9f:57:e3:6f:75:88:64:dd:60:37:27:e4:
                    38:f6:7c:fb:84:17:17:15:4b:da:f3:46:60:68:8a:
                    fc:57:2d:e8:ad:98:30:a7:25:70:c2:c7:93:d2:ac:
                    ee:53:c6:17:e3:6f:6c:4c:79:65:bf:be:81:e7:4b:
                    8d:9f:34:d1:79:31:a7:ee:44:a4:09:a4:7f:e5:74:
                    b0:c4:6f:9b:65:08:c9:69:f3:2e:6e:b3:d7:72:95:
                    75:f4:d9:d8:67:10:d2:35:1c:ae:a0:c4:0a:29:bd:
                    73:30:b9:e0:89:ca:b2:44:1b:e0:d1:bb:ec:d1:db:
                    a8:95:bc:a1:d6:42:f3:8e:18:ab:76:06:03:03:95:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:24:0B:BF:D1:0B:2C:5C:E4:41:AD:32:7A:FD:57:AC:3E:63:28
            X509v3 Authority Key Identifier:
                keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:b3:26:17:50:f6:cb:be:fa:ac:eb:9f:a7:03:2c:a0:dc:
         34:db:86:35:b6:b2:a8:a0:ba:d9:95:f5:e4:66:40:f2:c0:56:
         6f:67:a2:f4:59:92:5c:6c:48:28:be:e1:14:98:7f:20:2e:e0:
         04:e9:3a:b9:46:bf:62:5c:7e:d1:6f:9e:a6:7c:35:88:e0:74:
         85:9e:76:68:ae:45:79:cf:af:7b:2e:21:b1:06:1c:a7:ad:b5:
         03:b0:7c:8a:66:1e:65:dc:04:61:a3:6a:1f:a9:07:50:c5:2e:
         70:a5:4e:fd:79:35:54:40:67:77:c2:34:95:81:32:05:bc:f0:
         68:c8:2f:92:10:bf:fd:3d:9a:3e:cd:f1:54:38:0a:d3:a5:dc:
         26:53:c8:84:39:cb:3c:45:a6:2c:4b:76:9d:ae:af:5a:fe:5d:
         8e:1f:75:e4:1f:35:e6:69:57:7c:c6:2b:a7:09:a9:7c:3f:48:
         22:70:7c:90:28:e7:13:0f:a4:89:0b:29:68:74:df:b5:fd:b3:
         fd:c4:b2:7f:23:b8:e3:7e:bb:9c:d0:53:8f:1e:36:64:a5:60:
         7c:af:f9:c2:30:1d:6a:19:ce:2f:aa:50:e6:47:1e:5a:59:fd:
         e6:98:f1:f1:0a:2a:5f:dd:e0:f6:c7:77:02:6a:b4:19:e2:8f:
         d8:d4:7f:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:41 2026 by rpki-client