Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa
File:                     3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (raw, json)
Hash identifier:          d8mLmgUF2aWhjGdbOosr/9V2K6VccuOLmlyqKU6V+78=
Subject key identifier:   E7:59:77:40:8A:7C:5E:42:A6:DB:22:59:E1:87:AB:63:00:37:DD:81
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A79
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:29:46 +0000
ROA not before:           Wed 20 Aug 2025 16:54:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139719
IP address blocks:        103.115.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Aug 20 16:54:35 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45b6a-8657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:e4:46:61:ea:58:ac:73:e7:79:85:d6:bc:
                    63:d0:88:96:c7:1f:3f:7e:57:2e:4d:95:7a:17:95:
                    5f:e8:2f:bd:8a:6f:e9:19:a3:60:0b:18:0c:e5:c3:
                    b5:78:47:3b:48:02:f3:57:b7:e5:b8:14:80:6b:21:
                    40:8e:d4:9e:25:16:77:e1:91:f5:27:5c:6d:7c:b4:
                    df:47:c7:88:19:4a:12:1c:c8:e5:3f:b6:fd:54:0e:
                    b9:2f:8a:89:48:9c:6d:44:f6:f7:54:0f:fa:29:29:
                    97:00:1d:f3:0a:7f:50:b5:24:d8:d8:d7:2f:60:82:
                    02:a3:ae:74:0a:d5:4d:2f:03:26:65:71:b6:48:73:
                    e0:e2:ef:92:a4:c0:b6:65:0c:5e:09:91:a4:0f:a1:
                    3b:ba:73:14:b0:1b:93:75:d4:53:91:68:77:2b:03:
                    f5:84:f0:cc:d6:2a:bf:67:83:b7:b0:7b:1a:ec:74:
                    5f:d9:f5:cd:fc:58:c8:68:91:db:23:f0:b7:0e:f4:
                    ad:23:c7:c0:02:f1:37:f2:4c:fb:73:0f:8a:6a:51:
                    c9:9f:b6:1b:70:90:e0:aa:8e:9e:f2:7b:cb:38:c3:
                    fa:43:dd:d5:a9:70:46:c9:5d:c8:b9:bb:5d:a0:b1:
                    32:0f:29:c6:ba:88:f8:d8:39:f3:01:f9:a5:81:35:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:59:77:40:8A:7C:5E:42:A6:DB:22:59:E1:87:AB:63:00:37:DD:81
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:14:fa:cc:66:16:a3:1d:f8:d0:c6:d8:af:b9:15:3c:c5:89:
         58:86:06:56:3a:4d:e6:9e:64:f1:ad:62:23:d8:87:43:c9:7d:
         f8:85:57:78:ab:e0:a4:0a:ec:80:44:aa:f5:8e:1c:3c:f3:fe:
         57:63:1f:53:59:7f:3a:53:6f:13:ef:26:00:35:39:89:c1:4a:
         91:5c:9f:03:0a:8a:81:eb:aa:f9:2b:70:0e:b2:70:a8:23:47:
         bc:7c:96:2d:fb:21:4b:aa:df:28:24:3c:85:42:0e:da:fe:82:
         d0:27:a7:69:30:aa:96:f2:0e:db:02:bc:73:80:28:be:fb:53:
         66:0d:5d:cf:45:b0:55:ad:45:56:21:9e:3b:4d:be:5e:94:b0:
         b5:fa:11:c7:84:b8:13:a8:0e:12:84:7a:04:3c:5c:0f:36:fa:
         9b:cb:47:5e:98:62:05:93:76:2c:1b:e0:b9:c4:74:bc:50:49:
         c9:4e:21:00:b2:26:bf:87:70:ba:9b:c8:8d:db:c6:d2:0e:f6:
         1e:3b:a6:7a:65:c4:06:96:81:a4:83:cf:b7:45:5c:2e:a3:85:
         72:33:e6:f4:10:fd:b2:7b:52:68:6a:18:5b:3b:b4:5d:ce:70:
         60:0c:92:d1:22:6b:25:42:65:04:31:c4:dd:12:da:7d:47:5c:
         ef:72:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:10 2026 by rpki-client