Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
File:                     F3A41ADEC0E411EFA19F644CC4F9AE02.roa (raw, json)
Hash identifier:          qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=
Subject key identifier:   5B:AC:BE:6B:FB:F6:17:43:C1:17:A3:BA:E7:CA:2D:94:AD:67:B5:A2
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3696
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:19 +0000
ROA not before:           Sun 28 Sep 2025 13:35:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45800
IP address blocks:        58.181.147.0/24 maxlen: 24
                          203.155.54.0/24 maxlen: 24
                          203.209.82.0/24 maxlen: 24
                          203.209.99.0/24 maxlen: 24
                          2405:a000:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13974 (0x3696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Sep 28 13:35:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489f3-c843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:6f:82:c7:24:8b:d5:f2:a6:e3:08:f7:59:
                    10:08:ec:34:56:b7:c9:a6:c3:a8:d6:cd:57:6a:97:
                    68:b0:71:ab:bc:a0:6c:87:cb:92:e5:20:32:44:20:
                    9a:0b:c8:4a:a2:b7:29:32:80:cc:8a:50:0c:3c:0e:
                    08:87:26:37:b7:47:3b:b2:f2:99:af:58:93:8f:e4:
                    65:6d:f2:2b:55:0a:f6:cf:97:50:aa:6c:3a:90:bd:
                    9d:db:28:1c:bd:ea:0a:b4:88:36:48:ab:77:cd:09:
                    a4:4a:18:ff:99:e2:63:c7:12:e0:68:31:9a:a2:b1:
                    f4:84:37:c2:f8:35:ed:19:03:d1:a6:03:09:07:ae:
                    94:e1:13:28:79:d9:56:b4:31:4d:37:7a:83:b0:8b:
                    d8:55:02:e5:5c:dd:70:c5:96:0a:e5:a1:33:dd:1d:
                    27:bc:7b:bf:49:6e:1b:e1:7f:44:29:50:e8:49:e6:
                    0e:c0:8e:20:c9:74:6d:f7:8b:af:75:eb:53:57:e0:
                    21:85:28:2a:f8:7a:0f:66:74:24:13:b9:fc:ce:9e:
                    3d:39:4f:7d:43:07:73:ae:13:73:2b:7d:c6:7f:89:
                    ef:6e:af:0c:ad:6c:27:88:ae:90:24:20:9c:8e:c0:
                    d5:74:39:b6:b0:20:18:44:2b:af:b5:d0:6f:88:b6:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:BE:6B:FB:F6:17:43:C1:17:A3:BA:E7:CA:2D:94:AD:67:B5:A2
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.147.0/24
                  203.155.54.0/24
                  203.209.82.0/24
                  203.209.99.0/24
                IPv6:
                  2405:a000:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:09:6e:3b:68:95:4f:d5:41:ba:ff:8f:f2:8b:8f:9c:c6:
         b6:33:f6:18:54:56:22:72:7e:5a:0a:31:4d:6b:10:71:ae:c5:
         5a:66:74:02:3b:de:99:4c:76:ef:d3:ee:41:a5:d1:9c:ab:60:
         e7:a6:54:6e:4e:70:4d:9f:da:fb:2a:f1:9a:de:70:c8:65:e7:
         c9:c9:1e:70:e1:66:a0:6e:6d:8c:a7:8a:5d:87:1c:ec:3d:36:
         14:23:4c:9e:51:99:ff:0c:2d:fc:c5:77:34:8a:f5:84:71:15:
         13:8d:f2:d7:5b:6a:8a:ba:5e:95:a2:08:15:a6:3a:af:80:c0:
         44:96:65:18:5c:3b:68:bf:c0:1f:d8:d7:7c:98:79:b2:e3:ba:
         da:0e:84:6d:5f:a3:67:87:e3:21:12:bb:76:ad:66:0c:e8:e4:
         51:14:9b:b9:d2:00:11:59:8d:ab:e2:23:98:b4:b7:f3:66:f2:
         c3:60:a0:2b:3e:7b:d8:49:6d:8f:b2:07:61:12:5c:59:89:a3:
         d0:dd:ee:45:bb:2d:8f:43:ec:05:51:05:82:5d:b7:a9:f2:bf:
         14:16:2c:e9:48:49:45:75:cb:25:bb:36:d3:0d:43:03:7f:47:
         32:3f:4d:a7:fc:c8:50:a8:71:80:10:cd:01:b0:21:8b:e0:91:
         35:a6:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:50 2026 by rpki-client