Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
File:                     4821776AD9A211F092913C6268D3641D.roa (raw, json)
Hash identifier:          Sy1HvppFOycihdTszz/358rIRt69yzzeT9izOzy0CC4=
Subject key identifier:   60:E6:B5:86:8B:21:6E:C0:D8:D1:D9:EB:B7:F1:06:FA:F3:82:8B:31
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       3529
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
Signing time:             Sun 01 Mar 2026 17:07:22 +0000
ROA not before:           Mon 15 Dec 2025 10:39:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     64050
IP address blocks:        103.1.41.0/24 maxlen: 24
                          121.127.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13609 (0x3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Dec 15 10:39:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47249-b702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8f:0f:b2:79:f7:4c:78:77:0e:da:57:a5:19:
                    26:fe:94:fc:2a:1d:6b:f9:8e:f1:f7:79:9c:fa:78:
                    ae:d3:3f:56:45:31:04:31:a6:6b:d8:24:8b:9f:a9:
                    8f:fa:64:e8:d7:33:24:f4:dd:3f:e9:f6:9c:90:c7:
                    f2:63:5e:d6:87:b9:85:77:3f:e8:2f:e3:94:5d:30:
                    0b:18:bc:55:88:e1:9a:76:6e:b2:9c:d5:8f:c9:77:
                    e7:42:2e:c2:bf:98:a1:83:6b:cc:7e:9d:f1:b9:7b:
                    c1:15:bb:65:20:7f:b5:81:0c:34:dd:5c:d4:6b:b3:
                    a5:52:06:d4:58:83:93:c7:c8:16:a7:e3:f8:28:8f:
                    df:b5:c2:b0:28:ab:5d:7a:fe:00:ba:c8:90:12:c4:
                    d4:1d:ca:de:03:fa:8b:6c:ca:0e:e8:58:0f:72:19:
                    f8:b4:bd:e1:af:ca:d2:32:e0:22:6d:15:29:88:69:
                    e7:65:86:67:cf:47:70:2c:47:79:93:7a:92:19:84:
                    77:a4:b8:56:16:24:b9:80:c7:bc:5c:3e:11:31:79:
                    72:aa:b3:39:3e:71:8f:59:3e:47:8d:c1:44:96:18:
                    4b:5e:fc:dd:78:44:fa:98:74:ff:0e:b7:85:b3:cf:
                    3d:11:cb:4e:4b:4e:17:89:cd:0d:2a:8a:c4:e3:f4:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E6:B5:86:8B:21:6E:C0:D8:D1:D9:EB:B7:F1:06:FA:F3:82:8B:31
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.41.0/24
                  121.127.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:11:3a:3c:67:f3:a5:0e:91:2c:f5:90:1c:62:4d:51:9f:
         99:b4:eb:1b:bb:86:b8:6f:05:fc:07:2a:ee:c0:87:01:08:5f:
         c4:97:0f:65:6d:3c:97:98:df:9c:c0:69:3a:b7:81:c4:43:a1:
         82:ce:09:e3:2f:50:95:b0:2b:0d:31:8b:a6:d2:14:87:76:a4:
         71:e8:67:49:ba:89:f8:45:33:b4:57:92:7a:9b:ea:4f:b4:e1:
         2c:c0:42:ea:43:d6:d7:c6:cb:dc:12:6f:40:64:bd:ca:be:b3:
         cc:ce:e4:5d:70:a2:15:f0:97:82:9c:44:b5:06:86:b5:bb:bd:
         c9:08:21:28:f9:b6:43:bd:f8:fa:48:70:f3:a3:4c:26:85:73:
         e6:e3:e5:57:69:bd:6e:a1:fb:de:52:2a:09:db:19:93:14:2e:
         5f:2d:4d:a6:a7:eb:f8:09:e8:20:ad:0d:6c:1a:4e:2d:55:01:
         ca:d3:5e:63:91:e5:a4:70:6f:54:e6:8f:bb:dd:47:dd:34:d0:
         85:81:79:8d:1a:3b:ba:63:c1:f8:a1:ef:1c:bf:63:1f:ec:22:
         c7:8f:86:42:e2:29:d9:04:69:ab:f6:79:f1:27:0a:e8:d9:8f:
         3b:9a:01:89:db:41:b2:c2:19:66:c3:91:18:04:e3:91:09:14:
         f8:7f:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:28 2026 by rpki-client