Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa
File:                     37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (raw, json)
Hash identifier:          TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=
Subject key identifier:   04:F9:A3:62:0D:AD:16:93:9B:41:64:10:71:17:F8:ED:96:7A:54:66
Certificate issuer:       /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial:       0250
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:07:17 +0000
ROA not before:           Sun 19 Oct 2025 05:07:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137941
IP address blocks:        103.250.196.0/23 maxlen: 23
                          103.250.196.0/24 maxlen: 24
                          103.250.197.0/24 maxlen: 24
                          2400:aa60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
                          rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
        Validity
            Not Before: Oct 19 05:07:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a40fd5-c1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:9c:23:df:eb:37:87:4f:3c:57:6a:85:59:
                    60:61:1a:cc:6d:ce:e0:ac:64:4a:7d:f3:f1:47:87:
                    e4:77:0b:db:a5:90:9f:29:6a:3f:e3:30:27:ab:d0:
                    59:ee:bf:4c:fe:ed:3c:cb:9b:36:56:88:47:37:43:
                    bc:cc:d5:be:7e:d2:dc:30:ee:dc:ad:a1:f0:99:07:
                    b4:c1:76:4d:f1:0e:be:46:1c:00:a4:96:91:87:69:
                    41:7c:39:d5:2f:2c:ec:4d:88:7a:d8:03:62:ec:c8:
                    4c:47:53:9c:34:d3:75:e9:3a:4a:80:32:c1:bb:87:
                    25:d4:eb:c8:fc:4d:d6:d6:48:a0:31:36:01:f7:ac:
                    db:45:c2:6e:28:71:4f:d4:1c:03:b9:b8:31:4e:47:
                    05:32:6c:26:0c:9a:64:06:61:c7:70:dc:59:9c:14:
                    ac:21:c0:fa:05:f9:ca:66:ad:3b:78:07:c4:ae:8b:
                    8e:b7:09:68:37:7b:41:19:38:0b:21:c6:ac:0b:c1:
                    d2:a7:52:72:8c:0d:20:8c:9f:8b:1b:01:6e:78:e8:
                    7c:b5:8c:a0:0c:36:d6:70:1c:c2:7f:b1:48:5a:94:
                    94:d8:61:c9:c1:c8:60:54:40:02:ef:e2:e5:af:1c:
                    e1:01:73:4e:b3:e7:77:ce:80:83:4c:05:99:a1:ca:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F9:A3:62:0D:AD:16:93:9B:41:64:10:71:17:F8:ED:96:7A:54:66
            X509v3 Authority Key Identifier:
                keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.196.0/23
                IPv6:
                  2400:aa60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:5c:8f:11:05:67:53:2d:84:67:22:26:ba:6e:44:06:82:
         ac:36:00:bc:ed:5b:77:a2:83:f7:2e:07:68:87:86:5d:08:b8:
         96:60:96:e5:85:f0:a8:99:08:52:01:06:ce:d3:f0:c6:60:16:
         08:3d:23:1e:a1:7f:bd:d6:51:85:57:11:6d:47:1b:87:e3:2a:
         ae:3e:51:ce:05:0c:10:15:7d:92:40:5e:87:64:f5:3f:65:87:
         4b:09:17:96:04:12:bc:ab:8a:3c:43:e8:2b:8b:96:88:77:4b:
         df:1e:7c:bf:17:9f:d0:d1:42:a8:eb:b5:fc:e4:d3:b3:3d:1d:
         bf:a9:75:c0:3b:52:10:cd:22:0f:b1:f1:32:b9:2b:03:8a:4a:
         88:49:ec:0e:ee:48:25:90:42:d5:2c:d8:35:45:f3:22:32:2d:
         8e:21:7d:26:fe:3e:74:21:a0:05:56:85:44:dc:78:6d:c5:df:
         bc:6a:f8:1b:b6:da:e2:cf:4c:e2:3f:fe:c8:58:83:76:6f:96:
         d6:a9:f5:bf:68:fb:d2:b9:6b:93:ed:68:5a:f2:c2:0a:20:3b:
         0f:9a:64:e0:0c:d2:2f:0d:39:fa:c8:b1:6a:7c:d5:63:da:9b:
         ce:59:8e:7c:ed:28:1e:08:8e:c3:e2:23:68:19:f6:45:ad:f4:
         42:2c:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:22 2026 by rpki-client