Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa
File:                     3AB3F80E578611EA8CC3B124C4F9AE02.roa (raw, json)
Hash identifier:          C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=
Subject key identifier:   FF:B8:3E:EC:80:51:A0:03:62:7E:D8:1F:4A:14:D8:86:C2:0B:9E:32
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       29A1
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:41:10 +0000
ROA not before:           Sat 20 Dec 2025 16:12:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.43.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10657 (0x29a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Dec 20 16:12:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46c26-cb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:3d:26:64:89:ca:7d:58:a4:51:df:be:40:
                    2e:46:cb:e1:c9:4f:2e:fd:52:68:3e:c8:5d:26:b7:
                    70:3b:e2:5f:36:c8:18:35:5c:cb:82:e9:70:bd:ac:
                    4b:1c:23:ae:78:9e:30:77:17:4d:26:ed:fd:3d:44:
                    30:23:9c:b9:63:bd:75:e0:6e:33:a9:d8:4f:33:55:
                    22:71:7f:87:ab:29:25:3a:86:6f:a1:22:5a:21:2f:
                    5d:d4:92:fc:86:09:33:56:4e:f6:8c:51:ac:85:a5:
                    a5:b1:21:0d:72:ab:c1:95:e2:8f:6d:9c:fd:b0:1e:
                    4d:b2:e3:c1:cf:e8:89:49:c3:24:af:48:77:dc:1a:
                    41:c8:d8:b9:27:02:32:54:30:43:d2:a7:cf:ad:59:
                    c6:8b:ce:92:cd:e0:dc:67:e4:ed:aa:58:d9:71:5a:
                    f9:33:46:14:32:fc:74:b1:74:8d:b9:83:5e:30:7e:
                    06:ce:12:da:c4:59:6b:2c:46:17:99:d2:ae:d5:16:
                    f0:9e:4d:42:f5:e5:9a:5d:8a:c3:bb:4f:3e:c7:55:
                    f1:5d:8a:ac:18:4e:c3:24:26:8e:ba:74:9c:ac:60:
                    e4:06:12:d5:e6:5b:fa:e8:95:33:39:43:5c:88:b2:
                    66:ca:03:43:7a:d9:d9:73:f7:c1:24:61:c2:76:27:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:3E:EC:80:51:A0:03:62:7E:D8:1F:4A:14:D8:86:C2:0B:9E:32
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:c4:5e:ae:e0:f5:35:1c:20:ae:b3:44:91:a8:e6:6e:19:
         b2:20:1b:1d:84:a2:83:5c:f8:22:20:ae:16:2f:93:71:61:9b:
         79:4a:e9:10:4e:63:91:d2:19:91:22:14:55:2e:4c:45:7b:b0:
         ea:be:de:cb:b9:48:f0:55:54:38:0e:39:f5:5a:f4:47:b8:c1:
         0a:1e:39:1f:d8:bf:90:ce:64:38:3c:3e:ff:49:8d:65:d8:ac:
         c9:12:5e:77:0d:31:34:4d:89:f3:15:62:eb:2a:ff:5c:28:13:
         27:d9:10:ec:a0:c5:dd:c1:d0:85:ce:a1:7b:95:3b:91:68:16:
         bb:bd:47:d9:36:96:8c:6a:2a:64:62:4c:fc:c1:7c:b8:91:9d:
         b1:3c:1f:9c:52:45:f9:46:c0:af:a7:1a:a0:59:48:0c:d0:20:
         3c:a7:f1:cf:31:6b:6d:f4:8f:35:b9:0f:52:1e:9e:88:83:7f:
         ef:7d:a3:00:0a:5e:66:a8:d6:17:b1:b8:18:2e:3f:a9:04:c2:
         d6:af:f6:f2:f7:be:b3:c9:63:43:54:27:62:50:40:5c:c7:40:
         4f:e9:10:eb:00:12:00:09:fc:a6:16:23:38:4f:8a:97:5c:41:
         68:63:87:e5:77:7e:b0:38:4a:da:10:bb:fc:ee:c2:94:08:4a:
         a1:d2:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:33 2026 by rpki-client