Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa
File:                     63B4F05E482611E7ABDEF831C4F9AE02.roa (raw, json)
Hash identifier:          2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=
Subject key identifier:   53:0B:FF:4D:43:10:38:98:FB:26:4E:F8:B3:CB:4C:BF:57:E9:2F:FB
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B1A
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:29:23 +0000
ROA not before:           Wed 06 Aug 2025 16:54:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133530
IP address blocks:        103.233.242.0/24 maxlen: 24
                          2401:1d80::/48 maxlen: 48
                          2401:1d80:1::/48 maxlen: 48
                          2401:1d80:2::/48 maxlen: 48
                          2401:1d80:4::/48 maxlen: 48
                          2401:1d80:1003::/48 maxlen: 48
                          2401:1d80:1010::/48 maxlen: 48
                          2401:1d80:1018::/48 maxlen: 48
                          2401:1d80:2001::/48 maxlen: 48
                          2401:1d80:2010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6938 (0x1b1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Aug  6 16:54:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45b53-d76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:bd:d6:a1:82:dc:11:66:7e:f0:99:94:b3:
                    24:6f:55:9b:3a:21:93:fd:10:e5:56:55:89:41:90:
                    93:3a:bc:c7:d6:bb:01:d5:d3:1b:65:e0:fe:73:7f:
                    81:28:17:0b:07:65:04:45:8d:a0:ee:31:37:b8:57:
                    6b:71:eb:83:0e:1e:73:b9:3b:e9:3d:7e:7f:51:59:
                    d0:9a:96:bf:6d:87:4b:d3:26:2a:1e:18:af:3c:bb:
                    39:2e:d1:99:ab:5e:ba:e3:5d:da:50:a2:67:b0:a6:
                    a1:c5:70:ba:85:f3:96:fc:29:8e:41:ec:62:cc:ca:
                    6b:3c:9a:21:d0:0f:c2:97:60:be:93:a4:e0:d9:6e:
                    7b:11:2c:89:77:9f:9f:95:97:00:38:62:70:2b:40:
                    bd:d3:cf:09:a1:c4:6b:25:ee:df:3c:69:3f:2a:84:
                    4f:d0:de:37:4f:5d:28:01:03:ec:19:23:88:d3:d8:
                    e7:b7:25:39:bf:9c:23:42:4f:e5:16:5e:74:d4:95:
                    10:39:cb:c6:88:69:07:7d:4b:5a:30:22:e6:ec:60:
                    1f:f2:31:de:50:da:26:aa:2a:86:2f:85:59:74:25:
                    00:41:48:a9:3b:96:72:92:15:9f:f4:68:8d:f7:d1:
                    73:33:cc:e1:a9:35:25:54:31:0e:dd:3c:63:1d:e3:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:FF:4D:43:10:38:98:FB:26:4E:F8:B3:CB:4C:BF:57:E9:2F:FB
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.242.0/24
                IPv6:
                  2401:1d80::-2401:1d80:2:ffff:ffff:ffff:ffff:ffff
                  2401:1d80:4::/48
                  2401:1d80:1003::/48
                  2401:1d80:1010::/48
                  2401:1d80:1018::/48
                  2401:1d80:2001::/48
                  2401:1d80:2010::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:38:e8:61:b2:c0:49:4a:ef:51:e4:4e:55:87:82:3b:ba:
         a7:df:97:f7:a5:5d:3a:14:17:77:24:cd:8c:f1:ca:42:b4:5b:
         74:22:d8:f7:35:7a:89:d0:18:da:18:e5:b3:dd:00:5d:be:ad:
         46:f1:51:25:86:1c:84:c5:e1:94:f4:ee:f5:f4:d9:2f:3d:8b:
         23:00:44:e2:96:3e:94:ad:88:1e:07:44:0a:cc:99:e6:ae:e7:
         ad:6c:44:8b:11:53:29:25:57:b3:55:8b:74:a9:e9:72:a7:72:
         a2:d9:a4:c2:83:f0:89:2e:68:40:ad:ce:fe:b8:f5:d9:1e:ce:
         32:12:d6:e7:c9:d5:30:89:24:1a:56:c4:5f:1a:e7:39:cb:46:
         d5:d1:ba:9c:3d:0a:0c:9d:31:f4:b4:ef:38:b9:40:75:d1:ff:
         66:55:8f:9d:85:a9:7e:ad:45:15:81:18:58:ab:26:dd:c8:1d:
         5e:89:6a:3a:33:b7:5a:88:e8:f1:fd:28:71:74:4d:33:96:94:
         af:19:cb:02:a4:83:ea:56:c4:c5:a8:a8:9d:90:dd:9b:bb:71:
         49:41:31:2f:fb:b1:55:54:24:ff:b7:5f:61:e3:50:7c:3d:f8:
         98:f7:ed:f9:c2:c6:11:5f:b4:36:0b:87:b9:16:3d:f1:92:d9:
         c9:4d:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:37 2026 by rpki-client