Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa
File:                     A9906244B66611ECAF76DA4CC4F9AE02.roa (raw, json)
Hash identifier:          FKnTP9sIRlwzNOVjIzWeUAaLIjQhiB2MOeVMrVthOl0=
Subject key identifier:   28:30:85:11:98:16:78:59:79:F4:C9:7D:FD:5A:89:68:FB:FA:99:C4
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       03F5
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:45 +0000
ROA not before:           Fri 27 Jun 2025 00:56:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.73.115.0/24 maxlen: 24
                          103.232.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jun 27 00:56:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42a6d-445d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bd:7c:3a:6f:ab:c8:e2:e6:81:59:24:42:49:
                    d4:d9:a6:cb:8d:24:f7:35:b4:5d:6c:8f:b2:02:bc:
                    f1:1b:a3:32:7d:33:f8:64:9c:e3:b5:c2:86:51:6d:
                    16:95:1c:e2:52:02:aa:71:aa:f4:6c:42:84:af:23:
                    99:db:51:7f:6b:8e:28:ef:0a:24:5c:a2:0c:0b:2e:
                    58:20:13:96:ac:11:3e:6d:0d:f0:2a:26:cd:5f:f5:
                    9b:bf:bf:81:a7:b2:95:1b:96:96:cb:e8:86:b6:5b:
                    cd:4f:1e:b4:c0:c3:6f:86:84:02:09:3a:39:2c:ba:
                    1e:83:84:e6:ef:ae:1f:ff:6f:8c:59:6f:23:34:4b:
                    ec:d5:f4:67:25:27:f0:7d:f1:92:65:c7:3a:8a:ee:
                    73:c2:8b:55:e7:7f:8e:36:d8:2b:27:ca:dd:f6:13:
                    5e:55:16:81:e9:e4:e5:c7:27:bd:4d:d8:ad:9e:22:
                    30:53:ee:32:0e:a7:79:1f:97:46:c7:a8:8e:7f:01:
                    90:fc:24:85:7c:e9:0e:df:46:89:81:88:87:49:12:
                    d1:73:13:d6:fc:18:64:80:77:3f:43:7b:ea:97:fb:
                    0f:61:3e:31:c0:bd:1b:d3:6e:26:fc:f3:c8:c4:3e:
                    c6:5d:9d:62:c1:48:70:f2:81:13:36:66:2b:22:0b:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:85:11:98:16:78:59:79:F4:C9:7D:FD:5A:89:68:FB:FA:99:C4
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.115.0/24
                  103.232.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:be:fa:84:f4:45:ce:ec:69:51:ca:95:bb:f7:bb:c1:d9:09:
         26:65:8f:fa:b6:f5:32:69:6d:0c:08:6f:68:0b:e6:63:35:3f:
         09:07:dd:05:1e:09:02:b3:36:bb:82:ba:fb:60:32:d5:2c:9c:
         df:6f:1a:46:36:f7:de:25:a0:a9:04:a1:57:57:f0:65:4e:65:
         ea:56:2e:3e:b1:ac:3d:e8:71:0c:3f:41:b2:18:eb:75:71:d1:
         d3:85:52:d4:6c:aa:df:94:14:b9:28:62:37:9a:08:63:57:b9:
         5c:da:a5:28:40:ef:16:e0:3b:a2:10:f1:33:6c:c1:7e:1f:7d:
         7e:9e:b6:2b:18:14:1b:27:d1:e8:09:33:f9:85:ef:05:3d:b6:
         95:95:d2:21:73:2c:50:43:5b:f2:a1:1d:57:73:a3:d5:04:18:
         2f:55:a8:5e:b0:c4:2e:56:e9:5d:6d:a4:3d:6c:bb:58:3c:67:
         d6:c8:1a:bb:5d:6d:6a:fb:1d:de:99:37:22:08:19:60:1f:25:
         b7:89:f8:0e:aa:01:25:e0:75:f6:5c:c1:80:23:22:a7:a4:6b:
         a3:06:c6:53:d9:cf:6d:58:92:34:25:0f:f4:fd:bf:86:6d:8a:
         34:e2:44:b2:40:3a:a8:9f:84:bf:09:f1:89:e9:88:7b:b5:d0:
         b6:f5:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:56 2026 by rpki-client