Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa
File:                     38702E769AF611ED8D41985BC4F9AE02.roa (raw, json)
Hash identifier:          mhkOh2zSHS1+l3qaaKFXDPoYKhGJyCSHTM8TY0dVm/4=
Subject key identifier:   A0:97:E2:F0:CD:A9:CA:5E:6F:74:99:F0:80:3A:83:C4:5E:D9:14:0F
Certificate issuer:       /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial:       024A
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:26:44 +0000
ROA not before:           Tue 25 Mar 2025 02:38:39 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134732
IP address blocks:        103.72.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
                          rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
        Validity
            Not Before: Mar 25 02:38:39 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3ea34-7b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:d3:ec:20:dc:b8:29:f9:01:b2:6b:18:ab:
                    57:97:2b:cc:4f:6e:f8:f4:ea:a9:a4:bd:af:1d:34:
                    27:a3:5e:61:cc:fa:a8:97:9c:bc:f9:cd:64:2b:a7:
                    b1:c7:22:9f:bf:d1:a9:08:a5:4f:7b:43:a0:ae:28:
                    03:6c:f8:59:9f:1c:7a:4c:3b:9b:55:58:e8:f3:ee:
                    98:0d:63:39:07:89:2d:36:c0:4f:dd:94:90:35:3c:
                    b7:ec:06:e1:b4:3c:80:da:4e:05:47:b3:d1:d8:f9:
                    1c:8d:25:3a:32:18:a2:5f:74:ed:c3:3b:38:2d:db:
                    91:51:45:88:30:f6:d9:63:57:a1:61:af:b7:fb:0a:
                    fe:04:91:6b:07:79:38:88:de:75:5d:93:4a:ec:2c:
                    29:c1:ab:30:bc:4c:ed:a9:5a:7d:6e:a0:46:c7:17:
                    58:d2:31:02:6c:41:b8:77:c9:ef:9b:56:44:1b:08:
                    14:22:59:2d:5a:a3:3c:85:9c:4f:e9:a6:da:52:77:
                    fe:bb:d6:f3:8c:15:96:53:ba:b6:cf:e3:cd:08:2a:
                    c5:ca:3a:4c:37:a7:15:00:df:22:1e:af:12:a5:5b:
                    b4:ae:f7:d5:f4:93:a0:e0:7a:08:76:e4:0e:47:7e:
                    6b:da:90:cb:7e:0f:6f:a9:ac:58:89:83:c3:54:f0:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:97:E2:F0:CD:A9:CA:5E:6F:74:99:F0:80:3A:83:C4:5E:D9:14:0F
            X509v3 Authority Key Identifier:
                keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/38702E769AF611ED8D41985BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:4d:f3:8f:52:30:17:52:d0:0a:e7:07:36:67:7a:21:14:1e:
         a6:a5:94:bf:8d:37:62:38:71:28:ce:e3:bd:5e:cb:85:2d:3e:
         bd:f7:07:5e:e4:58:79:14:41:a9:29:a0:9d:dd:ca:3e:9c:b1:
         42:a8:00:0b:b5:52:8a:43:5e:61:5c:59:af:fd:16:87:96:66:
         9d:69:c9:dc:8d:cb:1b:1f:cf:05:85:2d:c6:f9:c4:ed:cd:63:
         f9:ec:4a:a6:ca:6b:f4:55:c3:13:0d:b6:f4:23:f7:21:3a:ff:
         68:47:96:61:e8:21:76:13:55:8b:ad:8f:5f:1e:05:09:59:a7:
         1a:cf:3c:2f:4e:05:7b:75:03:f1:65:19:76:72:d5:1e:f5:bd:
         8d:85:6c:58:9f:93:ef:d9:86:62:8c:c3:60:e4:6d:03:91:d0:
         2e:85:8b:14:fa:7f:bc:a0:53:4c:e4:a7:7c:ae:d5:28:f3:92:
         58:28:53:d3:dc:79:78:0b:25:b0:ae:97:93:a7:35:f1:e4:52:
         00:f4:0b:7b:7d:c2:1d:05:7c:8b:3d:46:af:94:17:23:f6:6b:
         3e:3c:85:b6:6c:8d:6d:31:15:ef:22:05:16:95:4e:15:4d:be:
         40:57:47:b9:6d:55:db:15:86:88:50:19:b3:9f:63:a8:cc:ac:
         af:6b:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:34 2026 by rpki-client