Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/35A46D4E1A5611EE93742844C4F9AE02.roa
File:                     35A46D4E1A5611EE93742844C4F9AE02.roa (raw, json)
Hash identifier:          ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=
Subject key identifier:   FC:1D:26:8D:45:94:EB:C4:60:04:13:BC:B4:60:84:59:0C:40:4A:2C
Certificate issuer:       /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial:       0215
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/35A46D4E1A5611EE93742844C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:15:30 +0000
ROA not before:           Mon 19 Jan 2026 02:22:17 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142647
IP address blocks:        103.66.148.0/24 maxlen: 24
                          103.66.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
        Validity
            Not Before: Jan 19 02:22:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a51cf2-5c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:50:e2:4a:d0:e0:7a:4b:c9:73:8f:db:ae:
                    3c:46:47:e5:c5:b2:d8:1e:33:f4:91:96:5d:07:f7:
                    44:fa:48:fc:c3:34:6c:74:22:5c:a1:6f:ac:f8:26:
                    62:23:2d:ca:9c:d5:96:78:85:e6:70:0c:79:9d:a6:
                    a8:9b:e2:89:13:20:62:2c:e3:fc:a1:54:4f:4f:0f:
                    e7:70:45:6c:5c:23:42:8c:b1:8c:d8:4e:b6:4c:da:
                    70:e3:3a:5a:24:f8:c3:21:37:ef:dd:04:80:ac:84:
                    29:c1:e9:88:26:1e:e6:27:b8:8b:ad:d0:6b:b6:34:
                    60:ca:77:fd:25:d3:bb:16:27:47:6f:44:7e:96:d8:
                    fc:9c:58:31:a8:62:68:79:1d:68:f5:11:7d:1b:b7:
                    89:46:5a:8e:d2:5c:df:ba:08:df:ca:75:11:f1:c3:
                    6e:75:e4:62:f3:ee:84:44:26:6f:48:15:cd:17:54:
                    11:be:43:98:83:47:bb:c0:25:66:48:b7:c5:12:31:
                    01:cf:06:11:23:9b:2e:a4:84:2c:ca:6c:c3:87:76:
                    68:d2:df:54:7b:5c:93:11:29:53:17:23:55:52:a4:
                    9d:af:13:84:0e:44:28:96:31:c4:c4:ad:f8:99:27:
                    36:64:b5:8e:a3:d7:8d:d0:19:83:a1:69:66:1c:30:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1D:26:8D:45:94:EB:C4:60:04:13:BC:B4:60:84:59:0C:40:4A:2C
            X509v3 Authority Key Identifier:
                keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/35A46D4E1A5611EE93742844C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:74:e4:55:d4:90:df:76:22:ec:2b:37:af:3d:7d:cc:01:d7:
         f8:97:23:c9:8a:0e:dd:dc:34:b2:0f:d0:73:59:b8:6d:7f:ee:
         7d:c0:0e:10:a8:88:0d:ce:5b:74:07:9c:36:63:83:ec:54:01:
         dc:ed:b2:09:4c:0d:55:e0:7a:47:9e:a5:42:a5:12:bc:78:2c:
         2d:9e:1a:eb:44:a8:01:81:52:59:51:e6:31:ea:36:7b:f9:42:
         ce:1a:9b:cd:2c:8e:43:e8:29:49:52:a9:64:05:db:8a:46:60:
         22:dc:bd:bc:96:36:c0:ff:87:e9:04:f0:1d:74:41:45:53:67:
         cf:0f:7f:bc:55:e1:8d:57:20:5f:c1:af:d5:b1:fc:8e:d9:09:
         f3:ba:d4:f5:05:62:7e:c8:2d:7d:88:1d:4d:ea:1a:b0:16:d8:
         98:93:1d:a8:d2:f9:94:5c:46:39:3e:83:fe:b3:3b:2a:e4:cb:
         b2:85:5a:f5:02:74:02:26:8a:1b:99:d7:39:4f:b1:d6:ff:a4:
         35:cc:66:d5:0f:6f:68:ad:0d:d0:fc:7b:d9:e0:0f:85:1c:58:
         7d:35:a5:44:e3:26:a0:f9:8d:1b:23:70:8d:46:04:c2:d2:e0:
         3d:3f:af:3e:90:b2:86:72:08:83:b5:3c:6b:0b:81:24:da:dd:
         d4:96:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:18 2026 by rpki-client