Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa
File:                     B08503D8F8AA11EE91684140C4F9AE02.roa (raw, json)
Hash identifier:          ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=
Subject key identifier:   F7:A3:A7:84:26:A4:D7:B3:28:78:41:F9:E8:7B:AD:E8:D9:50:3B:F6
Certificate issuer:       /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
Certificate serial:       01D0
Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:03:47 +0000
ROA not before:           Mon 03 Nov 2025 03:48:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     10143
IP address blocks:        103.65.140.0/24 maxlen: 24
                          202.27.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl
                          rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
        Validity
            Not Before: Nov  3 03:48:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43933-93b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:fc:ea:b1:4f:f1:0b:b9:c1:57:37:02:84:
                    42:f1:77:43:a8:5a:2e:12:4c:b6:70:7c:12:51:43:
                    dd:04:60:01:0a:75:22:a4:e1:56:9f:50:26:d5:51:
                    a7:60:1e:bd:08:9f:2b:4e:a8:96:83:77:cc:22:93:
                    6e:65:1c:0c:dc:e3:1c:ca:ee:02:b2:40:c6:35:04:
                    15:39:81:51:a8:5f:59:fa:57:56:79:78:3f:44:c7:
                    81:bd:e0:bc:f1:3a:9d:42:8d:8b:72:c8:11:fb:8b:
                    a6:90:80:e2:4d:21:f6:19:96:5d:62:5f:ea:73:43:
                    b9:61:af:f4:fb:07:42:60:e1:48:26:a6:d5:82:8e:
                    77:d0:3d:df:44:77:ad:50:99:ec:98:f6:8b:f5:b3:
                    45:9a:54:8c:ff:34:60:0c:f9:3d:3b:00:d0:ff:c4:
                    d2:38:78:78:76:5d:2a:34:ac:9e:60:51:91:a3:e5:
                    ff:18:9b:8f:68:a9:56:c4:f3:d5:43:2f:45:f0:2d:
                    fd:f0:4e:9e:94:31:43:1f:51:dc:b3:85:55:9b:f7:
                    d2:d6:4a:10:56:28:4c:f7:3f:f3:cd:95:9c:24:03:
                    97:71:a9:2f:cf:48:4a:e9:08:e6:39:8a:8c:54:f1:
                    b2:b4:1d:e4:2b:9a:e9:ee:2b:61:e1:5b:62:be:68:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:A7:84:26:A4:D7:B3:28:78:41:F9:E8:7B:AD:E8:D9:50:3B:F6
            X509v3 Authority Key Identifier:
                keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.140.0/24
                  202.27.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ae:61:46:a5:da:3c:25:2d:da:ac:5c:4f:e9:15:9c:47:2d:
         1c:1a:5d:a1:14:76:d5:cd:77:03:41:0c:c6:cb:0c:92:13:34:
         80:58:4a:c8:15:c4:08:0b:11:b6:a9:42:01:56:e8:42:f6:ab:
         fe:66:52:40:0a:54:dc:e1:ac:c8:0a:a4:be:3f:4b:f5:b4:6c:
         99:30:79:ea:cb:53:41:57:e2:dc:08:ee:4e:6f:0b:ec:e1:93:
         b6:66:c8:3b:e5:90:99:c3:14:ec:50:6c:28:af:3c:1d:25:a5:
         19:01:20:ef:05:5c:ea:71:ea:4e:9e:37:42:e6:0d:1c:30:cc:
         05:24:37:0d:eb:8b:ec:75:3c:ba:d4:ba:f9:db:55:30:fc:dc:
         69:31:7b:56:87:0b:dd:1d:67:09:8b:3c:12:07:37:04:7f:e5:
         f9:3e:fe:0e:e8:d6:93:f8:be:47:a7:ad:8b:31:0a:5c:98:2f:
         62:fd:52:2f:9f:7b:a6:02:ee:10:7c:b9:e1:a7:f8:38:37:04:
         49:7a:97:94:fe:21:0e:4e:da:98:60:56:18:e8:5c:fb:19:30:
         04:32:d1:ac:d1:48:e3:6b:de:c0:0f:a6:cb:43:17:66:63:20:
         c9:23:48:70:92:f3:7c:8b:0e:60:87:f4:f1:96:7d:91:60:da:
         b4:b9:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:01 2026 by rpki-client