Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa
File:                     AB6C302EB5F311EDA0148B2DC4F9AE02.roa (raw, json)
Hash identifier:          bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=
Subject key identifier:   27:50:27:89:37:F8:7B:27:16:1A:21:68:E7:26:02:91:39:85:7A:D1
Certificate issuer:       /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial:       0239
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:10:16 +0000
ROA not before:           Sun 15 Feb 2026 02:22:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134597
IP address blocks:        103.55.242.0/24 maxlen: 24
                          103.55.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
                          rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
        Validity
            Not Before: Feb 15 02:22:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41088-0cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:05:e9:09:b9:86:fc:b7:49:cb:86:1d:b8:92:
                    5c:9b:f4:e4:07:65:50:0f:1b:e7:41:8f:03:a6:c6:
                    9d:d5:2f:c5:66:89:94:ae:c7:55:48:c8:d1:22:7d:
                    9e:52:a1:e5:30:03:a9:67:b0:fb:c4:dd:e3:c0:13:
                    11:fa:55:ac:bf:b0:a0:66:d2:ac:b1:d3:03:67:3d:
                    6a:0e:9c:3f:c4:59:dc:3f:67:86:fd:57:00:07:1f:
                    47:ac:c1:70:5a:8e:41:29:56:3a:80:48:0f:42:12:
                    4c:d9:fa:4e:80:14:51:d5:e8:7b:4b:f5:8f:f0:23:
                    37:35:d2:fd:13:bc:2e:03:a7:a3:49:69:59:10:f1:
                    fa:2a:5a:75:fd:ac:2f:57:b2:d7:02:b7:fb:42:05:
                    7d:5a:f4:69:e4:13:3d:5f:63:60:91:a6:93:11:7e:
                    9e:74:48:80:03:bb:5e:93:eb:c2:87:87:45:3d:62:
                    46:98:f9:58:c1:3f:d7:09:97:cf:45:03:2e:f8:6e:
                    37:26:da:b3:1b:da:2d:21:b6:de:80:aa:2d:25:ed:
                    d2:dd:95:e7:e1:32:10:95:87:dd:ef:dd:24:a7:f2:
                    fa:c5:6a:39:46:a2:c9:43:44:cc:0b:ea:08:07:fd:
                    e7:f1:2d:54:5e:89:8b:08:91:5d:37:a2:7c:d9:19:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:27:89:37:F8:7B:27:16:1A:21:68:E7:26:02:91:39:85:7A:D1
            X509v3 Authority Key Identifier:
                keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:2e:cb:72:57:da:c8:87:91:a8:ec:23:09:a6:ff:7d:c3:
         be:d6:34:1c:b6:f1:c8:31:5a:c2:f4:69:ab:1f:ec:9d:37:78:
         fb:28:b4:b2:8f:a7:d7:5e:07:a6:a6:a8:fe:15:a9:92:8d:1c:
         de:d3:bb:77:27:ea:a7:02:23:4a:f3:b4:c7:5f:5d:ba:fe:7c:
         57:be:3f:55:9f:65:6c:67:7c:c6:7a:9d:f8:90:5b:b8:03:9d:
         f8:7e:c5:b2:4e:e9:11:12:78:1d:47:4f:b9:e8:60:dd:40:57:
         5a:8e:e7:b6:5f:c9:e1:26:c8:1f:8c:1a:52:f5:c7:ac:35:20:
         ba:bb:bb:05:5b:17:78:49:6f:ca:cc:45:c9:15:4d:1a:b1:1f:
         74:47:20:f4:57:a3:88:fa:4b:20:9a:d2:52:d9:ff:6b:b6:61:
         09:62:70:f2:0c:a1:da:f6:c2:16:e7:00:c5:59:7e:42:24:e2:
         bb:1b:74:c8:3d:7d:8d:0e:d1:5e:69:1d:40:4c:e6:d5:56:4d:
         d9:4a:8d:8d:ea:5a:fc:ec:b9:e7:ee:ee:36:d3:e4:12:5e:81:
         1d:93:b3:ec:d7:f8:1c:f7:5a:26:bc:dc:02:43:14:b8:18:89:
         3b:d7:93:ba:e3:d6:4d:14:11:9c:58:da:ea:fb:aa:b4:60:e1:
         95:68:ad:a2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5
MEY4NURERkUwHhcNMjYwMjE1MDIyMjUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTA4OC0wY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/QXpCbmG/LdJy4YduJJcm/TkB2VQDxvnQY8Dpsad1S/FZomUrsdVSMjRIn2e
UqHlMAOpZ7D7xN3jwBMR+lWsv7CgZtKssdMDZz1qDpw/xFncP2eG/VcABx9HrMFw
Wo5BKVY6gEgPQhJM2fpOgBRR1eh7S/WP8CM3NdL9E7wuA6ejSWlZEPH6Klp1/awv
V7LXArf7QgV9WvRp5BM9X2NgkaaTEX6edEiAA7tek+vCh4dFPWJGmPlYwT/XCZfP
RQMu+G43JtqzG9otIbbegKotJe3S3ZXn4TIQlYfd790kp/L6xWo5RqLJQ0TMC+oI
B/3n8S1UXomLCJFdN6J82RmHhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCdQJ4k3
+HsnFhohaOcmApE5hXrRMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1
RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMzQjMvQkRGRTE4Q0NCNUYwMTFFREE3RDBFRjdDQzRGOUFFMDIvQUI2QzMwMkVC
NUYzMTFFREEwMTQ4QjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZzfyMA0GCSqGSIb3DQEBCwUAA4IBAQAQjS7LclfayIeRqOwjCab/
fcO+1jQctvHIMVrC9GmrH+ydN3j7KLSyj6fXXgempqj+FamSjRze07t3J+qnAiNK
87THX126/nxXvj9Vn2VsZ3zGep34kFu4A534fsWyTukREngdR0+56GDdQFdajue2
X8nhJsgfjBpS9cesNSC6u7sFWxd4SW/KzEXJFU0asR90RyD0V6OI+ksgmtJS2f9r
tmEJYnDyDKHa9sIW5wDFWX5CJOK7G3TIPX2NDtFeaR1ATObVVk3ZSo2N6lr87Lnn
7u420+QSXoEdk7Ps1/gc91omvNwCQxS4GIk715O649ZNFBGcWNrq+6q0YOGVaK2i
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:53 2026 by rpki-client