Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
File:                     37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json)
Hash identifier:          40R+DRWbI6AD7X69y+O2s0U8qVSzuQdPnKR80+3niV8=
Subject key identifier:   43:B5:6D:9E:BA:98:5E:FC:31:35:38:A1:F9:E4:E0:1F:F3:7E:B6:A4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0C66
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:42:22 +0000
ROA not before:           Thu 26 Jun 2025 18:43:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131270
IP address blocks:        103.68.160.0/22 maxlen: 24
                          103.232.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Jun 26 18:43:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4261e-f40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:5b:53:56:d5:8e:6b:5a:8c:2d:01:91:a2:
                    ee:17:ce:64:ec:a7:a9:6f:91:6c:82:7a:44:23:8f:
                    4e:87:49:d8:54:d6:3b:13:97:a3:c9:f5:9a:b0:d6:
                    3c:7f:22:2a:44:e4:ed:c9:04:48:46:25:6f:d0:57:
                    29:af:d8:44:f9:ba:9d:f8:27:7c:f0:23:f8:d1:c5:
                    e5:3e:88:d7:bc:7f:73:9c:a4:f4:1e:d2:9d:10:00:
                    7f:9e:28:97:e8:c4:e0:e6:1a:6e:fc:43:7c:e4:15:
                    ac:09:09:51:ae:3d:41:b0:e2:d6:c6:43:81:27:94:
                    29:e2:65:aa:77:4b:8b:f9:ae:7b:12:8a:7a:7f:ef:
                    d5:09:4e:8e:02:c2:f4:ee:71:84:25:56:83:ce:67:
                    97:33:89:26:63:4c:68:2e:e0:d9:1b:96:52:04:88:
                    c1:fd:16:3a:76:9e:f7:80:ce:82:2c:84:46:3a:c9:
                    8a:c6:b7:da:32:d4:26:3b:0b:59:fa:87:9d:03:07:
                    41:2f:88:ed:fc:0f:00:2f:7d:0d:ba:43:b1:65:16:
                    73:48:50:c9:a5:de:5f:cc:5e:d7:94:e2:ef:b1:b4:
                    7d:56:00:dd:66:d2:5b:c2:16:0e:3b:69:ac:31:65:
                    f1:61:7f:b7:d6:11:93:80:1e:08:7c:d0:bd:b2:76:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:6D:9E:BA:98:5E:FC:31:35:38:A1:F9:E4:E0:1F:F3:7E:B6:A4
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.160.0/22
                  103.232.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:93:d4:7c:35:39:39:b9:d8:4e:bc:a1:9f:86:ba:9c:8f:b8:
         fe:f5:e5:5b:d2:24:3c:c8:a1:bb:44:69:b2:25:66:e8:00:d5:
         fb:b4:7b:24:d9:37:41:db:25:49:6c:fc:9d:66:42:8d:d5:89:
         c3:61:0a:01:38:62:37:de:0b:a0:34:28:4c:98:fe:b1:4d:42:
         a3:5a:3e:be:c5:48:31:83:f9:a1:fd:0c:5d:6a:70:ad:d7:33:
         5f:82:55:c1:14:4a:b0:0f:63:02:b7:00:ff:f5:36:de:3f:86:
         90:e1:75:15:34:00:3f:d0:49:61:d7:c7:32:22:ff:f5:aa:b6:
         db:c1:05:35:f8:3b:85:7e:c9:cc:b8:6e:d3:6b:06:9c:63:7c:
         b2:59:c2:aa:52:07:17:2f:be:72:3b:52:7e:99:5e:3d:03:4c:
         2b:70:e1:2b:fd:5b:48:a5:40:c5:79:9a:09:32:de:8b:9c:8b:
         57:ad:94:f8:b2:45:93:44:8e:8c:25:60:20:e9:93:e7:10:83:
         64:50:63:ef:ec:95:e7:0a:68:38:1b:dd:6b:20:c6:e1:41:51:
         73:dd:18:cb:14:59:93:27:3f:aa:42:b8:6d:42:f8:b5:2d:bc:
         08:7c:17:23:f0:cc:ef:29:13:57:ce:8e:0f:98:55:e5:9d:f2:
         d6:b0:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:28 2026 by rpki-client