Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa
File:                     3576B330ABFA11F0A2E07C6AC4F9AE02.roa (raw, json)
Hash identifier:          0w3HfHH7UREiRpb2xtmCSCZqE3QWtDjCuYCvHhtDjnw=
Subject key identifier:   FA:56:A0:50:96:7D:1E:10:AD:B6:CF:41:E2:38:B8:4D:C5:6A:CD:52
Certificate issuer:       /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial:       07C0
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:24 +0000
ROA not before:           Mon 26 Jan 2026 21:17:56 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134455
IP address blocks:        103.160.92.0/24 maxlen: 24
                          103.160.93.0/24 maxlen: 24
                          2406:e7c0::/32 maxlen: 32
                          2406:e7c0:1000::/36 maxlen: 36
                          2406:e7c0:c000::/36 maxlen: 36
                          2406:e7c0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
                          rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
        Validity
            Not Before: Jan 26 21:17:56 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4814c-22d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:f7:08:72:3a:8c:5c:4b:b6:a2:1f:a4:81:
                    34:0f:0a:ba:d5:a1:22:78:52:34:7f:91:4c:97:16:
                    ae:18:6a:55:55:a6:70:26:0e:5c:5c:29:3b:6c:99:
                    60:06:f2:b3:80:7a:a0:85:48:da:e9:e6:52:b1:38:
                    25:9e:f4:d9:08:3f:b7:02:d1:ee:f1:d0:d7:91:1d:
                    dd:f5:eb:a7:a2:0b:30:e2:0a:8d:d7:14:c4:49:e8:
                    98:58:75:b3:be:4b:9e:e2:e7:81:3b:af:dc:84:e2:
                    84:59:c3:01:b6:2e:1e:b6:23:1a:a3:ab:6f:f7:d0:
                    ae:f7:f2:31:90:5f:57:82:7d:46:9e:47:47:50:2a:
                    fe:e8:38:8f:7f:ad:55:f1:00:98:77:c1:a4:ff:fe:
                    46:3e:cd:a5:6d:d7:ec:71:99:57:cd:70:31:8a:51:
                    9d:eb:13:19:7a:52:0b:0c:93:89:1a:da:33:47:53:
                    b7:dd:59:c0:e6:64:23:de:f3:68:ef:bf:72:bd:9f:
                    90:43:a4:25:c0:c8:5c:d5:42:df:03:17:0a:7c:38:
                    a7:38:34:79:d1:96:f0:c1:16:3a:00:06:6a:07:cf:
                    1b:c4:9f:c6:28:cd:eb:ea:84:a9:2e:be:c9:9b:a6:
                    7e:eb:79:09:99:da:ab:0a:bb:7e:da:06:35:6b:18:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:56:A0:50:96:7D:1E:10:AD:B6:CF:41:E2:38:B8:4D:C5:6A:CD:52
            X509v3 Authority Key Identifier:
                keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.92.0/23
                IPv6:
                  2406:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:44:fa:89:be:b5:8a:66:86:cb:ba:2f:80:d2:87:c0:8f:
         44:9c:56:fb:7f:dc:71:43:3a:ca:88:4f:22:32:83:be:bc:51:
         7e:16:9c:18:7d:b2:ed:2d:57:9d:ee:12:12:9b:a1:08:96:0f:
         d4:f9:57:33:7a:de:78:84:f0:b5:db:d0:cb:b7:e3:11:02:8f:
         57:4c:1f:5d:3a:3b:5a:43:92:47:28:d2:89:4c:26:14:53:23:
         50:67:54:26:9a:ac:10:03:94:3b:92:5c:b2:91:fe:6f:11:e5:
         37:97:ae:d0:7c:42:a9:f6:61:df:c5:0d:37:48:fa:17:51:18:
         e3:d3:23:ba:4f:ac:64:b4:6a:ac:3a:1d:c8:69:a0:73:40:cb:
         99:56:70:e0:1c:66:b3:a3:3f:2d:f3:cb:9c:0d:00:c8:33:e0:
         ea:f0:22:ba:b9:fd:3a:52:57:a5:16:6c:13:22:ab:8b:e2:6f:
         f3:d9:3b:c1:7d:4a:f1:76:42:88:4c:ca:9f:07:35:af:89:c5:
         a9:6f:9e:26:d0:5f:00:64:3d:0b:a7:ac:db:0f:c5:a2:c1:7d:
         70:4d:1a:64:cc:58:e9:a6:89:64:b3:eb:3d:7c:50:81:3f:63:
         f7:97:4c:37:17:4c:58:2c:fd:47:0e:ae:c5:0a:2d:16:bf:c8:
         bc:a6:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:38 2026 by rpki-client