Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa
File:                     D0A31DDC8E6011EC93F6710FC4F9AE02.roa (raw, json)
Hash identifier:          ZHsuT3YFJqQwpMUTOsVFNaOirtmacroaZkjFqhqZbvs=
Subject key identifier:   E6:C9:80:24:5D:08:2F:4D:4E:10:14:F7:3E:1E:C4:29:17:31:93:4D
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       06D0
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:35:57 +0000
ROA not before:           Sun 22 Feb 2026 22:19:05 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     63969
IP address blocks:        103.106.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: Feb 22 22:19:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46aec-5913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:90:31:72:61:5b:3f:78:fb:55:03:e3:9e:
                    12:0e:93:7d:f8:04:60:af:5f:ed:0a:3f:92:28:8f:
                    95:2b:38:87:c8:d0:90:2f:ed:cd:de:d5:d6:af:57:
                    7f:fb:30:e3:80:53:3f:22:f7:cf:68:05:a3:73:0b:
                    93:32:68:92:e0:4c:35:01:fa:39:2f:c4:09:0f:06:
                    62:fd:31:41:37:5d:fe:6c:57:22:96:e8:97:93:de:
                    2f:75:9d:69:78:36:01:4e:d4:ff:2e:6d:59:6d:d7:
                    15:d8:b3:d3:ff:4f:e4:0b:9d:d9:1e:ab:76:e3:15:
                    15:95:08:e9:5e:21:30:20:79:21:71:fc:00:60:07:
                    70:5c:b8:9a:28:1d:76:91:ae:53:58:9b:b9:45:cd:
                    52:ad:16:c4:a5:a9:67:2c:51:fd:db:c9:67:4b:74:
                    c6:2f:80:56:6d:4a:2f:b6:92:d7:f1:0c:8d:4c:47:
                    c8:1a:78:af:1c:c2:ab:79:aa:29:32:d6:43:91:33:
                    02:a7:25:f6:14:4e:65:ce:47:b1:df:08:d2:a3:6b:
                    fd:3a:1f:60:e7:32:1e:54:da:94:7a:e7:de:08:61:
                    89:44:07:56:49:0a:c0:2f:02:8f:02:a6:aa:f8:a2:
                    60:bd:1b:f4:e7:ec:60:19:1d:72:13:2d:16:d7:aa:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C9:80:24:5D:08:2F:4D:4E:10:14:F7:3E:1E:C4:29:17:31:93:4D
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:e8:7b:51:57:76:1a:f1:b3:f0:1b:6d:b1:07:f8:0b:8f:
         63:d8:c1:5f:f5:4f:ca:b6:e2:35:49:1a:79:03:3c:bf:56:39:
         1b:0b:df:39:f7:53:85:b6:f7:02:01:3c:99:ff:2b:a0:28:b0:
         ef:66:58:c4:f6:ec:5c:63:b5:f2:d9:82:07:9e:ef:ce:8a:c4:
         5d:87:cb:25:62:e3:0d:1a:05:0a:5d:e3:17:c1:3c:2e:82:ca:
         a4:91:8c:e7:43:3b:85:98:e3:d4:68:44:b3:bb:86:f7:40:d2:
         d4:83:65:c9:c7:24:f0:06:a3:95:73:dc:06:15:0f:55:94:87:
         3c:f4:01:6e:fc:46:26:27:b0:50:0c:c7:ab:6c:78:92:51:df:
         f5:d0:a7:3f:19:fc:db:a6:03:21:3d:7a:9e:95:86:94:b5:ea:
         3f:6c:95:71:69:fb:68:9e:85:6c:ca:69:eb:95:6a:a7:cc:6f:
         83:42:00:79:df:39:a7:f0:6a:17:1c:e1:d0:ea:42:a2:24:7a:
         a0:6e:e1:bd:a1:48:19:77:f0:e3:88:70:8a:fa:c6:80:19:57:
         73:a3:04:8f:b1:c9:30:05:b2:53:58:04:94:82:ba:bb:4d:3f:
         c9:36:ee:29:7f:3d:f8:51:c0:4c:1e:0f:51:5a:0b:5a:a4:0a:
         6a:51:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:57 2026 by rpki-client