Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa
File:                     AD532D26090211EAAD8D5786C4F9AE02.roa (raw, json)
Hash identifier:          k9g8nzceHdPoOK0fhj6CfdrThrPXw9qWDxl/CdnKp0g=
Subject key identifier:   EA:07:B1:E1:97:62:E4:8C:CC:FF:CD:F8:C2:F7:5A:C9:4F:7D:CB:0C
Certificate issuer:       /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial:       0CC9
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:40:33 +0000
ROA not before:           Thu 14 Aug 2025 18:58:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63826
IP address blocks:        103.40.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
                          rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3273 (0xcc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
        Validity
            Not Before: Aug 14 18:58:38 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a425b1-073f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:4d:66:37:79:9f:b0:a3:32:bc:46:c6:46:
                    c2:cf:dd:43:90:bf:64:86:43:38:5e:2d:d6:8f:68:
                    34:cc:a4:72:95:88:26:53:37:97:fd:0d:aa:07:d0:
                    00:f0:f3:b0:cc:cc:79:80:fa:ca:b2:ba:6e:24:cb:
                    a1:73:79:30:0c:78:b2:e0:69:f8:ea:87:25:4c:7b:
                    5b:7c:0f:25:9e:c7:95:24:63:34:53:79:c2:fa:13:
                    e8:f9:1b:d4:11:08:4f:65:7e:1b:8e:89:89:db:8e:
                    15:94:31:47:c1:73:f8:52:ad:ef:3a:c2:5c:c8:e2:
                    6a:14:07:c6:47:97:e1:ff:00:84:79:76:f2:ed:7f:
                    33:33:69:9e:54:85:12:9d:59:e6:b2:9c:38:ed:aa:
                    3a:1c:04:58:61:32:9b:00:16:e0:2c:9f:e6:bf:05:
                    88:72:12:01:a9:ed:c0:91:15:36:94:81:c3:8a:d5:
                    97:bd:5c:f2:36:b5:77:ff:29:3d:d8:7b:04:e6:25:
                    57:b0:7e:64:de:7e:00:94:b3:2e:02:b4:0b:a2:0f:
                    3d:27:69:cd:0c:59:0f:b9:1d:43:aa:42:de:30:01:
                    e8:1c:f5:fb:17:17:6f:4e:20:40:b6:92:71:0a:6a:
                    54:81:33:71:19:bb:a5:c9:c4:82:d6:03:1f:ce:ba:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:B1:E1:97:62:E4:8C:CC:FF:CD:F8:C2:F7:5A:C9:4F:7D:CB:0C
            X509v3 Authority Key Identifier:
                keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:7b:fa:b3:20:ae:79:b0:d3:0c:cc:b0:4a:f3:4b:56:70:
         66:30:5f:9e:cf:fd:42:27:2a:45:27:a6:07:84:53:75:fc:77:
         b3:f3:b4:9a:be:a1:b8:5a:0c:34:03:4e:02:f2:4a:f1:e1:7c:
         51:a2:ea:7d:db:91:ca:f6:d3:41:8a:b4:56:7f:c9:ad:a7:66:
         ea:80:79:5f:83:ec:2b:6b:0b:51:d8:79:ba:b6:2a:02:65:5c:
         92:01:74:f0:df:63:8f:90:68:73:89:88:3c:79:c4:78:70:33:
         3c:67:c6:89:ec:76:e0:43:dc:eb:b3:ca:52:1a:e5:49:d4:11:
         1d:39:00:c0:45:6f:68:1e:c0:68:85:20:cc:7a:4e:b9:11:26:
         64:ad:86:80:36:bd:db:cc:cb:7e:77:ed:f2:66:5d:93:1f:5b:
         7c:4d:d4:0b:b0:d9:64:1d:e0:9a:98:15:01:e0:6f:f0:4e:a7:
         aa:84:56:8c:59:b2:a3:b0:d5:84:86:4a:2b:ab:fa:7f:ec:d1:
         a7:01:1f:c7:02:c1:ba:c3:4f:5f:d9:79:31:25:5b:c4:34:b3:
         ca:ed:87:cc:47:5a:fe:b0:88:5e:6e:06:b4:b9:2f:2d:aa:cf:
         4f:e7:51:90:94:eb:32:4c:de:5c:76:c0:1a:ca:60:66:98:b3:
         6a:d7:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:13 2026 by rpki-client