Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa
File:                     AC9A49A6B79811EF9C8DF330C4F9AE02.roa (raw, json)
Hash identifier:          TlPZUMDag0+nbHWC7VeEq/uQgXojgN3hKUwwE1rmyAE=
Subject key identifier:   25:90:62:61:87:57:68:AE:96:EC:12:9C:EA:5E:86:87:D0:2E:78:2E
Certificate issuer:       /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial:       01F4
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:03:11 +0000
ROA not before:           Fri 31 Oct 2025 03:48:06 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38562
IP address blocks:        103.203.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
                          rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
        Validity
            Not Before: Oct 31 03:48:06 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4390f-08e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:2c:3c:c5:3d:24:a5:29:6c:9f:82:56:a3:
                    94:c6:ce:45:59:cc:96:da:1d:a5:ee:1f:e2:bb:a5:
                    14:49:4f:15:51:5e:e0:47:b8:ef:85:4a:47:7b:61:
                    5b:a5:58:65:66:cc:08:fa:b9:d7:0f:27:3a:71:11:
                    13:56:25:83:54:d6:2e:d0:33:6c:94:a3:9a:bb:f9:
                    0e:c4:04:ce:43:17:01:2c:e9:cc:12:b2:cc:13:50:
                    88:a1:36:f5:f6:92:d6:c6:9e:c2:0e:a2:ef:cf:04:
                    10:ff:a2:13:ab:72:6c:e4:78:d2:e4:98:64:d4:26:
                    69:b9:e2:58:80:52:2c:5a:23:1d:da:c9:76:8b:d4:
                    c1:c9:00:45:06:d1:81:d7:75:80:c0:98:29:74:6b:
                    27:95:c5:57:35:7e:4b:08:82:6f:de:0b:f4:b6:bc:
                    cd:cf:95:55:fa:a5:f4:9d:36:27:fa:e4:4b:23:ab:
                    93:d2:d7:7b:79:d9:92:e1:ed:c8:cf:ed:e9:0c:73:
                    48:ce:16:fa:5d:86:e4:a4:90:38:c2:10:17:bc:1a:
                    e8:18:4a:ce:74:ba:1b:36:df:da:13:08:9a:ba:33:
                    1b:6a:c4:ac:91:8e:09:57:2f:c9:e3:81:1b:ca:be:
                    67:81:47:5a:c7:46:31:21:78:e6:ba:ab:24:c1:92:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:90:62:61:87:57:68:AE:96:EC:12:9C:EA:5E:86:87:D0:2E:78:2E
            X509v3 Authority Key Identifier:
                keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:62:7b:3a:a4:5b:ed:eb:ab:7a:c2:e8:ca:d6:64:b5:95:
         5e:32:af:12:ac:1a:13:4d:78:34:12:9d:50:b8:b9:b2:1c:15:
         d9:8d:54:a3:e2:a3:ee:07:39:ba:eb:7a:5e:28:9a:33:07:40:
         0c:d2:79:58:57:5e:80:f7:54:0c:bd:4f:be:c3:9d:0c:40:e0:
         70:db:ea:2c:ea:51:59:82:52:51:7f:a4:df:9f:ba:d5:7a:91:
         9a:c1:dd:58:27:5e:75:b5:e5:9b:dd:38:44:d9:08:b4:c5:22:
         e7:ad:f3:28:66:5c:7d:c1:1b:11:c4:0b:a8:3d:43:ec:75:8b:
         06:51:dc:48:35:24:3e:9e:7e:f3:80:b0:44:01:b2:97:bd:6e:
         1f:81:86:b8:27:61:0a:ce:a7:d5:76:10:c0:b8:b2:2f:18:7a:
         f1:66:94:18:51:9c:0a:39:96:ab:6b:f0:1a:3f:26:34:93:c9:
         64:f2:ac:83:77:cd:87:ae:11:1e:a3:bc:47:69:56:2c:0e:77:
         19:fd:5a:18:4b:84:b8:2d:b3:48:55:9b:3e:68:5c:ac:1c:61:
         15:3b:07:fa:ce:86:ce:f8:9b:be:1d:0e:3f:50:0c:2b:71:1b:
         5c:5c:f4:d5:0d:70:8e:b6:8f:7a:1e:bf:76:1b:b7:cb:34:2e:
         3d:8c:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:10 2026 by rpki-client