Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa
File:                     3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (raw, json)
Hash identifier:          607WTIqC4PIUwpaUGmTN6xifKoIF7YfDRmmrGwuTkFA=
Subject key identifier:   64:77:4F:2A:47:38:07:77:1D:EF:F5:84:43:78:EC:D3:A9:25:12:78
Certificate issuer:       /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial:       0460
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:01:01 +0000
ROA not before:           Fri 25 Jul 2025 01:07:26 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149504
IP address blocks:        103.181.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
        Validity
            Not Before: Jul 25 01:07:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40e5c-aaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:e5:a8:f0:a4:4a:37:de:90:02:b0:ec:79:
                    2d:03:b5:f6:a2:25:0b:26:f7:19:01:b7:cb:88:e2:
                    8a:2c:9e:fd:32:18:33:2c:3d:83:5a:0c:84:69:07:
                    5b:27:00:ed:ac:5a:ab:60:00:61:df:99:b6:8e:9e:
                    17:a9:14:37:73:4e:73:5e:fd:d1:11:90:a9:35:82:
                    59:c0:3b:3c:0b:64:76:7d:e3:42:79:79:e9:dc:de:
                    85:29:9d:51:26:18:ec:b2:ff:3e:ad:c0:d4:6a:dd:
                    ad:b4:a8:37:0b:2d:37:b7:1e:42:ac:05:3f:c8:aa:
                    af:00:cb:ae:66:7f:bc:23:85:4b:84:d4:db:8d:7e:
                    a7:6c:a4:04:e8:10:74:38:67:a1:2e:53:da:50:d6:
                    81:80:86:68:77:df:e7:bf:04:02:b7:5e:22:67:ec:
                    aa:ea:8f:6e:72:42:51:26:4c:58:db:f2:2b:ed:0b:
                    a2:50:ed:12:90:ec:6e:28:d5:06:23:8f:4a:52:a1:
                    9e:bc:77:57:61:c3:44:ac:0a:8d:af:dc:dc:ef:32:
                    4a:4c:06:d1:72:52:8f:cd:cc:f9:c3:f9:e1:2e:40:
                    80:c7:2b:47:03:e0:32:8c:ef:7c:d0:b8:e6:49:21:
                    9a:60:b2:34:bc:2e:8a:39:38:46:1d:ad:27:f2:c6:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:77:4F:2A:47:38:07:77:1D:EF:F5:84:43:78:EC:D3:A9:25:12:78
            X509v3 Authority Key Identifier:
                keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:04:34:55:74:3d:87:e1:7e:2b:cf:c9:61:d3:c9:52:3b:
         00:a1:25:0c:a5:0e:d4:c8:b5:72:ea:b2:a6:a2:bd:15:78:3c:
         59:40:b8:db:63:11:d4:e7:7c:d9:f3:ba:46:a7:bf:74:83:78:
         be:d2:5d:04:aa:98:aa:ad:7b:3d:e6:7b:10:09:2a:5a:2e:49:
         36:2c:03:5d:29:e8:06:8d:eb:6d:8d:2e:64:1c:4b:79:7d:05:
         ce:2f:bf:ba:eb:92:f9:95:a9:a7:a7:5c:e2:53:d1:4e:31:4b:
         0e:da:7f:15:c9:1a:08:b3:ab:ba:ef:08:71:4f:a9:78:d5:0e:
         ec:68:ee:ed:37:4e:e4:6c:4c:7a:f0:f0:d8:65:e0:cf:c3:03:
         42:a6:4f:15:f6:2f:50:03:a4:3b:11:fb:f9:25:77:09:32:46:
         11:c5:16:ba:5d:01:23:bd:eb:bb:9b:60:e2:e4:2e:0a:31:78:
         b5:09:fe:2f:46:a8:37:19:40:28:23:0f:93:48:07:7f:13:4a:
         23:88:9f:5d:ad:d2:98:8f:c7:01:f3:fe:a1:e5:a5:58:96:3f:
         8a:4b:47:d9:94:0d:22:3c:2a:0d:c2:d2:5d:55:40:76:51:2a:
         ca:f3:97:63:fe:54:2d:e2:80:ca:6d:1d:9c:9b:ff:10:f8:f3:
         8f:dd:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:42 2026 by rpki-client