Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
File:                     0665D2328D1A11EB80593760C4F9AE02.roa (raw, json)
Hash identifier:          4BP9RA5edvRIYEOJDfl9qmd/eccUjRwBS2/hmKl9/us=
Subject key identifier:   A9:ED:04:04:4D:13:5C:17:3A:CB:01:72:F2:A5:D6:B4:8F:D4:2A:8E
Certificate issuer:       /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial:       06E1
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:44:53 +0000
ROA not before:           Sun 04 May 2025 22:33:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132372
IP address blocks:        103.27.255.0/24 maxlen: 24
                          103.164.203.0/24 maxlen: 24
                          2001:df2:3bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
        Validity
            Not Before: May  4 22:33:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fc85-cba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:4c:6f:9e:20:18:93:24:b5:0d:54:36:23:
                    18:4e:72:b9:5e:1e:e5:c9:23:de:75:25:95:f3:b2:
                    85:10:f5:f6:85:8a:0e:ca:84:5e:7b:7a:6b:58:7d:
                    50:a0:bd:ce:1d:7c:c8:52:35:ff:aa:5b:ae:c3:bc:
                    8a:0e:b3:df:22:9c:b4:b4:ac:ec:6b:70:5e:2c:b5:
                    35:4e:00:34:35:c4:e6:16:44:f8:20:90:58:1c:db:
                    31:4d:58:e4:c5:02:8f:78:eb:17:5a:b9:1e:55:60:
                    83:34:f2:0e:7e:b8:a9:c3:06:33:16:6f:b3:9c:4d:
                    5b:9f:21:7f:2a:62:72:55:8a:3a:56:d5:89:d8:98:
                    f4:92:0b:72:70:9a:f6:bc:33:22:35:99:af:03:92:
                    ee:69:64:9b:c9:73:02:d3:ee:c8:14:dc:aa:c0:cb:
                    5c:73:c9:9e:6c:8d:37:6c:a1:ee:03:28:47:7c:c3:
                    dc:6f:b6:74:41:e8:27:53:d3:e0:30:97:cb:c2:cf:
                    27:6f:56:38:1a:65:ba:16:66:47:71:94:c7:fc:6b:
                    64:92:08:bc:2f:18:6d:f4:e3:1d:45:ea:c9:57:e1:
                    90:09:15:60:cd:28:4b:49:8e:41:f6:c3:b4:83:ea:
                    aa:57:6d:e6:35:ef:10:7f:0c:45:0e:bb:dc:46:cb:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:04:04:4D:13:5C:17:3A:CB:01:72:F2:A5:D6:B4:8F:D4:2A:8E
            X509v3 Authority Key Identifier:
                keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.255.0/24
                  103.164.203.0/24
                IPv6:
                  2001:df2:3bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:83:43:a4:3e:ba:19:57:bf:c3:d9:0b:ee:d3:99:92:d7:
         fe:93:1b:3c:c2:ab:e4:ea:ed:1c:56:1a:8d:de:8f:67:30:f5:
         27:2c:5a:4a:58:7d:99:cb:b6:6a:10:3a:b4:ed:08:e1:1d:99:
         4e:c7:09:66:01:17:94:67:94:dc:0b:ed:92:61:f0:1a:68:85:
         08:f3:22:40:a2:1f:8d:ba:74:a2:4a:0b:38:b8:68:40:79:09:
         8d:04:9b:6b:2e:82:d6:e8:49:9c:c9:49:93:8f:bd:2a:c4:9f:
         79:21:9c:ec:a0:2d:71:23:ae:ee:83:2a:7d:e9:61:98:56:fe:
         c1:b0:2c:3c:1b:93:cd:82:30:99:61:b2:83:76:17:c8:cf:f3:
         7f:03:2e:07:d2:0c:83:b4:87:f3:14:39:68:c7:dd:73:4f:14:
         ad:e0:42:07:ae:45:55:ba:24:cb:f7:22:64:83:bd:bc:b5:c0:
         b3:f6:7d:2d:57:b2:38:f4:2e:df:be:ab:54:50:41:15:38:bb:
         0b:df:d5:f3:2c:23:9b:c1:eb:9e:b1:4c:53:6d:1b:d5:bc:84:
         51:e8:e1:25:9e:c4:1d:d4:ce:2b:f3:fa:d1:19:30:9d:22:fc:
         51:16:5e:a1:65:f1:d8:b5:c2:d0:23:60:76:6e:8f:ec:f2:95:
         e1:9b:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:42 2026 by rpki-client