Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa
File:                     2B1F36244A0F11F1A854BE8EC6833773.roa (raw, json)
Hash identifier:          DyngqRv2JTE/tyikzuGsrm5VnuqI40CmyaWN4DrKG3c=
Subject key identifier:   8D:EF:C4:D0:D5:88:BF:A3:55:E7:F3:AB:37:5B:96:C9:C6:E1:1B:95
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       02A9
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa
Signing time:             Thu 07 May 2026 12:20:44 +0000
ROA not before:           Thu 07 May 2026 12:20:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.43.172.0/24 maxlen: 24
                          103.43.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: May  7 12:20:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69fc839b-c42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:fc:58:7d:04:30:28:62:89:a0:c3:1b:bf:
                    55:b8:76:a6:3e:d7:72:50:82:af:67:f5:05:b5:23:
                    62:31:93:72:de:c8:89:bb:45:a2:b7:27:83:ee:04:
                    02:ff:7d:73:1e:98:7e:29:88:3b:68:57:90:c2:3e:
                    ba:28:94:ca:21:62:cd:c5:7e:7d:41:5e:fc:38:f2:
                    53:a0:c6:12:93:00:a1:c7:24:3c:a6:22:55:15:8b:
                    d8:f9:d8:51:cb:f1:67:3e:ed:e7:37:84:4f:e6:c2:
                    17:b0:c1:b9:bc:36:f3:d5:a3:f0:69:25:dc:74:13:
                    fc:e1:ba:2e:7d:ec:0e:ee:f9:c1:db:8a:14:fe:8f:
                    72:76:b1:00:90:be:bf:b8:f3:76:11:a7:9c:da:99:
                    71:bc:e9:e8:1a:bd:12:63:cb:34:4e:e9:b4:77:63:
                    54:ae:1a:c4:a7:6e:a3:2e:a4:36:97:33:bc:37:d1:
                    45:41:f5:ea:e3:3c:60:1f:33:c1:d3:3d:00:99:b9:
                    eb:1d:c7:ad:ad:37:26:e8:dc:81:49:be:9b:eb:24:
                    73:3d:ca:dd:9f:58:7b:25:9b:ea:cc:f2:2e:be:51:
                    26:4f:b4:e1:e7:a9:0c:0c:92:af:92:73:ed:1b:27:
                    d6:6b:61:cc:ae:d4:25:72:7c:9b:0c:07:e8:6f:18:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:C4:D0:D5:88:BF:A3:55:E7:F3:AB:37:5B:96:C9:C6:E1:1B:95
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:39:37:f9:45:86:5a:41:35:a6:92:9a:67:b0:38:13:7f:
         4e:c5:d8:0f:2d:08:60:a0:e1:fb:3a:f6:4c:57:8f:ac:d2:0d:
         87:e3:71:3c:28:b0:ad:68:fd:4b:4d:b9:5d:f1:8e:61:70:2f:
         f0:8d:7b:2f:e0:06:e0:66:ed:ac:e4:23:45:fe:88:f8:d7:e9:
         0b:0c:45:db:6b:5c:6e:3c:61:8f:9b:79:7a:e6:b7:c9:18:83:
         90:76:d3:10:63:e0:c7:9c:5a:50:8e:1f:d4:75:48:e4:e2:4d:
         f6:a1:86:1c:4e:5a:81:65:e9:77:8a:34:f0:f2:cf:b5:b8:68:
         ad:c1:7b:f3:5c:71:03:40:a5:b0:10:37:72:66:01:c7:e9:ea:
         ac:d4:b5:69:8b:3d:e3:b1:1b:7b:14:e2:c7:d3:5b:f6:c1:7e:
         b5:22:85:17:ae:0d:f0:6a:f6:78:05:9b:4f:6f:00:b8:35:8f:
         40:64:79:4a:4e:e0:70:ba:9d:e6:e9:46:dd:c7:6d:6d:f3:75:
         db:89:a5:20:2d:23:0f:b0:e0:62:b5:84:44:b5:a8:c4:f8:b6:
         34:4b:bf:13:36:0e:96:fc:94:7d:e2:8d:f1:f4:ac:60:62:8a:
         e5:4e:55:31:0d:9d:0e:ca:3e:54:78:5f:92:97:2e:1e:4b:33:
         bb:66:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:05 2026 by rpki-client