Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
File:                     2E0A645AD3B211EF83FA102FC4F9AE02.roa (raw, json)
Hash identifier:          rjfw/Fq7cBwJIknrXXq5h9Qu3gV67+AYz4XFFev3tuc=
Subject key identifier:   F1:7C:63:CB:A6:C3:03:E9:D9:E4:D5:AE:36:3C:40:33:B7:43:69:0B
Certificate issuer:       /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial:       1755
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
Signing time:             Thu 26 Feb 2026 17:14:16 +0000
ROA not before:           Thu 26 Feb 2026 17:14:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     35634
IP address blocks:        103.63.188.0/24 maxlen: 24
                          2001:df3:e000::/48 maxlen: 48
                          2402:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
                          rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5973 (0x1755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912DD, serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
        Validity
            Not Before: Feb 26 17:14:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a07f68-1528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:c5:39:25:22:84:21:d4:29:12:51:08:64:
                    5c:2b:42:e0:83:be:df:7b:eb:78:e5:ef:de:37:12:
                    ec:ef:d9:17:b8:69:3b:33:d8:3f:6f:6b:50:53:e2:
                    6a:11:21:c3:fa:12:54:17:2f:59:e9:dc:33:88:5a:
                    5f:f5:e6:91:54:df:67:6e:c7:10:98:eb:26:52:36:
                    0d:da:a5:05:b9:5e:99:bd:75:39:fb:df:06:11:dd:
                    75:75:1b:b0:c7:43:d7:24:89:1f:b2:95:a2:20:2f:
                    42:4f:d3:7c:9e:f1:68:59:ec:36:81:aa:ad:fd:0c:
                    cb:0c:2b:ed:07:08:eb:c2:0a:e6:c8:13:d4:7b:33:
                    fc:03:fd:27:85:5d:ee:05:6e:ba:03:f3:5d:b5:11:
                    ad:2c:98:bb:05:f8:f7:ed:69:23:d7:f8:ff:bf:3e:
                    e2:5b:aa:4a:9a:66:2a:d7:28:0d:34:f3:e9:5c:36:
                    14:f8:4a:86:51:b1:2c:eb:b2:57:b5:f8:f3:fd:53:
                    90:8f:a2:a2:88:d1:c5:b9:7f:c8:66:7a:e4:63:3b:
                    42:13:d1:51:f4:55:21:0c:e3:6e:b8:0a:a6:80:6d:
                    72:0d:0f:b1:f9:5c:fd:d0:ce:bc:76:bd:7c:68:21:
                    c9:f0:d7:3b:52:f4:a7:5c:63:81:22:15:b3:65:2a:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7C:63:CB:A6:C3:03:E9:D9:E4:D5:AE:36:3C:40:33:B7:43:69:0B
            X509v3 Authority Key Identifier:
                keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.188.0/24
                IPv6:
                  2001:df3:e000::/48
                  2402:8d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:92:97:5f:05:3e:89:76:5b:ca:82:28:1f:83:48:6e:6e:7a:
         94:8a:7d:16:a9:12:65:f1:17:54:c5:a6:15:7c:5e:8c:20:53:
         90:fa:c2:23:42:69:e8:39:24:7e:0c:c2:09:ca:79:10:67:47:
         dc:37:8e:8d:5f:26:bc:8b:68:f3:7f:49:00:72:ea:54:0a:7e:
         31:f4:1f:00:c7:18:1d:50:ba:83:87:4f:0f:bb:7b:f0:b9:93:
         59:c8:61:c2:42:91:0d:e7:76:dc:7f:96:ab:81:ef:a4:fc:18:
         d9:1c:7d:89:31:c3:41:a5:09:84:77:e9:0e:34:8d:b3:cb:f3:
         c4:cc:56:58:81:80:fe:a1:1b:9d:03:17:24:4c:65:e9:ca:5e:
         26:5c:1a:54:33:1f:7d:2f:70:14:bd:2c:10:9a:77:75:dc:23:
         aa:59:fd:f2:24:b3:f2:6a:38:ba:b4:50:4d:8b:f2:2a:aa:b5:
         6e:39:bc:ad:00:20:38:7f:c1:10:fd:cd:c9:d3:05:3b:24:64:
         85:9c:78:06:cb:2d:de:03:76:e9:3d:96:33:5b:0e:49:32:b1:
         03:8f:d0:82:6f:94:f3:73:24:77:41:5a:43:a8:d5:0d:f8:b6:
         85:29:51:5c:e5:a5:e3:c1:04:48:64:ea:2e:d3:97:94:bb:d2:
         0a:33:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:36 2026 by rpki-client