Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
File:                     F23D65727CAF11ED87752A6BC4F9AE02.roa (raw, json)
Hash identifier:          QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=
Subject key identifier:   F5:EC:C6:F2:6E:63:3F:38:4C:69:2B:81:41:48:59:D7:99:4D:26:BB
Certificate issuer:       /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial:       0ACA
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:46:48 +0000
ROA not before:           Sat 20 Dec 2025 19:16:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     40627
IP address blocks:        103.44.68.0/22 maxlen: 24
                          2400:db60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
                          rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762 (0xaca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
        Validity
            Not Before: Dec 20 19:16:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45158-c306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:5c:02:f9:fa:bb:1d:92:c5:8c:d8:04:64:
                    97:b2:4a:4e:c2:2f:1a:bf:6b:83:5a:ee:4f:0f:dc:
                    0f:a2:3c:d1:9d:94:7c:3a:d4:6c:e6:9d:b8:18:12:
                    cc:f1:d9:8e:a9:69:cb:b9:6c:9f:28:fc:8c:e1:29:
                    bd:f1:26:8f:4f:9c:ea:26:37:36:5f:9b:c9:01:95:
                    3b:a1:e7:e4:cd:c6:d9:72:fb:ed:e4:c9:c6:f8:74:
                    6d:10:d2:78:9a:d8:73:60:27:29:4b:d3:22:46:11:
                    bf:5c:72:40:b2:8f:6e:e3:4d:1f:74:44:71:f1:ac:
                    3c:02:da:80:4a:71:54:82:ef:47:9e:48:ce:b1:0c:
                    d5:97:3f:b7:cb:05:99:52:01:5d:44:0f:a1:5b:8d:
                    a0:a4:a1:32:72:92:e2:06:4b:d2:f9:ee:1d:46:64:
                    1f:2f:31:49:a6:87:3c:8d:ae:bf:0e:44:9e:ef:3b:
                    92:cb:5b:18:c7:41:79:7f:e6:d6:63:da:a3:5f:43:
                    4f:ec:6b:3d:0f:f8:fa:c5:77:4e:b9:e6:56:41:db:
                    38:93:70:f2:0a:0a:d5:e9:09:17:5b:74:fc:20:28:
                    7c:e5:cf:22:07:ef:d2:5b:ff:d2:94:4b:13:1c:56:
                    67:2c:fe:ea:cf:ac:6a:94:f8:f4:1a:16:8b:20:83:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EC:C6:F2:6E:63:3F:38:4C:69:2B:81:41:48:59:D7:99:4D:26:BB
            X509v3 Authority Key Identifier:
                keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.68.0/22
                IPv6:
                  2400:db60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:df:69:79:b6:b4:39:b6:fa:1c:86:a4:f8:1b:2e:66:80:
         e7:13:10:7d:8f:d9:02:49:f0:ed:2c:99:db:06:ea:1b:91:bd:
         5f:68:31:6c:3c:f7:56:8b:58:c9:cd:41:7a:83:b9:4a:8d:a7:
         6f:e1:46:ff:88:ef:0a:4d:98:b5:33:b7:2d:11:3e:c4:56:ee:
         3d:8c:18:e5:33:c9:38:18:e6:2f:c6:03:1c:f5:01:3c:2f:65:
         54:07:9a:52:3f:2d:30:33:7a:c7:8b:58:41:ae:9d:e8:1b:c5:
         24:ec:7e:07:29:e1:d8:85:a8:9d:55:f7:2c:f5:cf:92:72:eb:
         c2:eb:5a:36:fa:75:35:55:bf:54:ab:9d:14:e3:0a:7d:85:d3:
         c3:e4:ce:81:b3:97:c0:7b:cd:d9:6d:61:87:d7:ea:8a:11:2c:
         66:51:5b:1e:fa:10:12:a8:4c:87:1f:a4:42:c0:a3:31:76:53:
         e3:87:8b:2f:70:5c:79:aa:01:a0:61:79:74:f9:7e:dd:43:ae:
         da:38:d9:52:44:5d:1b:20:f0:43:18:04:4e:25:1b:fa:63:47:
         5c:5a:57:64:8f:84:c2:9c:c7:52:e1:88:47:b4:90:56:62:a3:
         b1:c9:86:9d:1f:f8:6b:5d:ae:d5:98:fb:6c:88:b5:31:6e:c6:
         ac:9a:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:29 2026 by rpki-client