Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
File:                     57B53F64DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=
Subject key identifier:   E2:A3:B6:92:6A:42:4D:96:C3:8A:F6:21:8C:FC:3A:3E:5A:37:F8:49
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       04D8
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:29 +0000
ROA not before:           Sat 07 Feb 2026 00:20:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136526
IP address blocks:        103.80.132.0/22 maxlen: 22
                          103.80.132.0/24 maxlen: 24
                          103.80.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Feb  7 00:20:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483a9-7d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:ac:be:75:94:e2:85:75:15:db:11:6d:fa:
                    f2:88:00:b5:d4:fd:57:cd:bc:d4:4e:76:e3:8d:d2:
                    04:3c:3b:7a:c1:29:2e:86:b7:cf:81:e6:12:9d:20:
                    b8:01:a7:39:c0:43:17:e2:0a:da:13:70:8e:11:e4:
                    f5:62:b8:38:d4:cb:e5:d8:37:6e:f3:b5:39:59:82:
                    93:93:ed:23:b9:2f:34:ef:9a:dc:76:a0:69:d9:82:
                    fb:5d:c7:c9:53:3f:a4:0d:58:62:17:ef:c6:8e:45:
                    69:29:b9:48:23:b3:e3:24:fa:1a:d1:b7:66:63:71:
                    62:e6:56:40:74:1e:29:1e:f4:7d:35:e7:86:8f:02:
                    e3:3a:2b:09:40:f9:56:17:57:7d:7e:4d:a6:77:92:
                    54:f1:27:a2:0c:5c:73:ae:5a:8e:28:87:93:d8:93:
                    41:e8:af:20:8f:3e:e4:b2:18:1f:50:0e:40:89:54:
                    a1:db:e8:63:af:1d:54:89:75:f2:2a:0a:6d:eb:bc:
                    82:cf:81:ce:13:46:e0:4c:78:01:8c:44:28:91:e2:
                    fd:67:93:cd:e7:c0:79:ec:5d:8d:08:1d:be:e7:b4:
                    0c:23:6c:8c:99:3a:07:91:cd:53:80:54:e9:c4:d0:
                    de:6e:b8:fa:9e:04:5e:1f:4e:f4:33:f5:d2:73:49:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:B6:92:6A:42:4D:96:C3:8A:F6:21:8C:FC:3A:3E:5A:37:F8:49
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:79:b5:6c:35:be:66:3e:e7:9d:e5:93:45:d4:3f:90:39:
         1a:5b:0c:47:ad:31:d1:c7:cd:24:9e:de:35:89:0a:98:e8:ba:
         04:21:f8:fd:13:7a:e4:7e:67:54:6d:fb:e8:fb:56:97:53:db:
         c4:6c:57:51:8c:da:a3:92:52:5f:05:7b:32:e2:6d:73:47:82:
         65:c4:04:33:85:c5:ec:d0:43:63:e3:63:83:a4:3e:2b:12:cb:
         92:23:75:45:1e:7b:92:19:3f:ca:75:1f:8d:ed:be:0a:27:f3:
         b2:c8:13:a4:71:99:5f:19:bf:6b:1e:54:d4:d2:7f:ae:2a:1b:
         c1:b1:da:5e:e6:d5:59:8c:f1:9f:8d:25:52:af:21:fe:79:34:
         f3:3c:59:ed:81:a1:e8:31:90:0a:b4:79:cd:99:b5:bf:d1:b9:
         ef:50:bb:86:39:f3:db:2e:db:74:ab:46:5e:71:6d:f8:2e:78:
         f1:ee:d2:a3:9e:14:a6:e4:56:d5:49:ab:ba:9e:3a:dc:56:54:
         ed:1a:d1:01:f7:42:22:a8:88:44:d0:47:7f:08:00:f8:b1:bc:
         ea:b9:9e:06:43:e5:c9:59:de:e8:cd:03:e0:dc:73:b3:44:af:
         2d:b6:45:c3:82:10:17:ff:9e:3f:39:51:e1:99:e4:a5:4d:93:
         4c:5a:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:24 2026 by rpki-client