Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/F2948C58F06D11ED9055A212C4F9AE02.roa
File:                     F2948C58F06D11ED9055A212C4F9AE02.roa (raw, json)
Hash identifier:          NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=
Subject key identifier:   5C:4B:A7:7C:67:D4:03:13:2E:29:97:CC:98:FF:71:1C:61:6E:72:F7
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       021A
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/F2948C58F06D11ED9055A212C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:07 +0000
ROA not before:           Fri 13 Feb 2026 02:22:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.147.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Feb 13 02:22:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a43857-32a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:fc:d0:73:19:97:22:b7:1d:38:ac:c6:02:
                    3e:58:f4:9e:16:eb:3b:5a:4e:5b:bf:08:d6:5c:e0:
                    97:32:a7:23:a3:dc:8d:d3:48:85:b4:7c:e3:f9:59:
                    bc:5a:c5:7a:db:5a:70:bc:91:a5:f8:8c:a3:a5:42:
                    0e:ba:47:94:cd:d7:95:43:05:bb:af:91:64:ab:f0:
                    af:47:c0:43:f6:6d:74:43:95:5e:2f:8c:f8:fe:77:
                    14:ed:0f:83:e2:c6:16:b3:fb:60:54:44:61:df:9c:
                    b7:dd:b0:fb:97:cb:7e:1b:ec:a6:e0:20:f1:ee:48:
                    09:29:40:29:6e:18:5e:01:2e:83:6c:46:86:2b:b5:
                    71:1f:06:e5:a4:f5:a9:bf:5a:d0:4c:30:ff:bb:8b:
                    50:ae:72:37:e8:35:ec:99:fe:19:a1:69:26:0a:f2:
                    f9:7f:da:fc:eb:3f:28:00:d1:0f:46:26:01:cd:25:
                    5c:b0:d9:81:3f:8d:63:5b:58:5b:60:e1:a6:49:c7:
                    55:08:56:6f:c4:43:ee:36:b2:90:28:a5:eb:d7:08:
                    3f:28:f7:ea:34:8d:50:be:74:75:ec:ab:de:93:e9:
                    4e:fc:99:53:45:9d:7a:e1:64:5b:6e:fa:d7:18:c8:
                    81:14:5d:d3:9d:ce:fb:58:d1:f5:39:a6:9d:65:c3:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:A7:7C:67:D4:03:13:2E:29:97:CC:98:FF:71:1C:61:6E:72:F7
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/F2948C58F06D11ED9055A212C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:c3:f7:29:8f:2a:15:11:4c:e5:40:ca:1d:8d:21:86:3f:2e:
         e4:4b:65:d9:c5:09:6d:46:81:ad:fa:09:02:0f:b5:b4:1c:3b:
         98:e8:85:a0:13:87:5d:db:89:51:09:60:8d:a7:7f:3c:8f:af:
         67:2a:e6:5f:f4:ba:7f:32:86:80:7b:aa:3d:0a:5f:09:74:95:
         77:85:cd:eb:8c:1f:0f:89:ec:c1:f4:8d:d1:64:46:71:c8:b7:
         f8:f0:cc:b8:a5:c2:dc:68:3f:31:69:39:44:32:3b:80:81:9b:
         91:7c:85:9a:6b:f5:8e:ac:d0:d6:dc:e8:80:c9:9f:f1:91:6e:
         ff:4f:9b:c8:0f:34:f3:d1:b1:67:6e:b2:79:2f:63:b7:b7:50:
         cd:a8:78:7e:1e:1a:e2:10:9d:2b:da:68:e6:18:10:4b:a5:be:
         09:db:f3:88:01:07:72:fd:dd:45:b0:52:db:49:2f:8f:e0:b7:
         1a:f2:a7:96:67:b9:c8:3d:ed:63:47:53:9a:30:b4:b6:93:44:
         ce:ec:b4:5a:7c:9c:96:94:0d:96:22:5c:ab:84:66:8d:e6:4e:
         6b:ba:21:d1:b9:21:05:54:31:2a:09:d4:77:57:c8:e7:8e:4d:
         0e:d0:63:36:18:74:c1:df:98:fe:f0:ed:36:41:c6:2e:e2:f3:
         09:0c:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:39 2026 by rpki-client