Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
File:                     2C4CD10078C011EE90D36F13C4F9AE02.roa (raw, json)
Hash identifier:          /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=
Subject key identifier:   0A:F2:32:B5:A0:5B:83:14:84:80:9D:4E:C1:B1:93:14:12:46:06:86
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01C1
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:09:29 +0000
ROA not before:           Sun 11 Jan 2026 03:22:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151967
IP address blocks:        103.65.138.0/23 maxlen: 24
                          2001:df3:8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Jan 11 03:22:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a456a9-0e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:35:83:b2:93:70:c6:85:45:4e:a3:b1:c2:
                    18:02:87:6e:4e:e9:27:ac:2a:6c:21:9d:d2:dc:37:
                    87:36:ef:f1:d9:ec:91:cf:4d:57:70:e9:0a:a4:83:
                    8e:21:ae:78:61:15:5c:89:0e:a3:0f:5d:bb:95:b3:
                    32:7d:64:62:38:e7:5e:dc:b7:9a:ed:96:13:27:01:
                    ca:ff:2a:3a:0b:60:72:60:3c:c0:49:d5:b8:0a:6e:
                    88:21:79:6a:22:3e:f4:46:bc:4b:da:8b:94:26:18:
                    d4:45:83:5a:40:49:16:91:60:dc:ca:bb:2f:59:66:
                    68:2d:00:d2:c6:07:00:70:39:c2:16:c7:c5:fa:a1:
                    ae:e2:39:0a:1f:ff:02:85:00:45:e9:3e:3b:de:e4:
                    27:71:f5:b7:75:91:f4:70:2c:10:9f:70:54:9b:ae:
                    a9:28:33:41:1b:a7:45:b0:cf:1f:b6:72:91:58:40:
                    e7:58:23:52:1a:fc:8d:46:bc:2e:01:ae:24:13:3c:
                    b1:b5:85:2a:38:fd:10:ba:a4:49:e8:e2:b8:7a:08:
                    47:f7:64:61:70:8c:eb:b6:88:b4:9c:45:12:c2:b9:
                    66:4f:d6:5f:bd:e2:37:8c:67:d3:a1:78:ee:b0:a3:
                    c7:92:67:e9:3b:fb:ef:13:03:9a:9d:aa:7e:62:75:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:32:B5:A0:5B:83:14:84:80:9D:4E:C1:B1:93:14:12:46:06:86
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.138.0/23
                IPv6:
                  2001:df3:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:2a:1d:43:d3:63:94:ed:15:fc:9d:f3:95:27:3a:6c:82:
         57:61:5e:8e:f8:5b:64:6d:15:a0:12:34:a6:f9:07:bf:56:8e:
         4e:75:54:63:8e:80:05:f4:bd:3f:99:f8:aa:6f:af:b1:62:9c:
         91:d1:96:07:f5:f8:1b:cd:bb:25:e5:65:3c:f9:43:cc:47:d3:
         47:87:e3:86:28:bc:bd:5d:55:24:a2:87:9a:e4:eb:79:34:e2:
         29:0a:81:14:db:47:50:03:64:c8:23:ed:81:b3:83:1e:d6:37:
         46:bf:ca:f7:16:e8:90:e1:25:ee:b9:46:f5:23:0a:01:eb:91:
         d8:dd:ea:1e:55:fb:04:c9:83:c2:8f:f8:5c:5a:01:46:4c:a4:
         a9:52:2d:f6:74:6f:29:57:c8:19:d9:51:99:39:98:23:ab:22:
         a5:60:d3:55:f2:99:26:ae:c0:c4:2f:64:1f:ca:37:07:f3:5e:
         27:9f:42:3f:6e:12:56:e4:9e:35:8b:89:b5:10:31:73:53:46:
         ad:0f:0d:13:d0:ec:0f:02:52:30:a9:66:d7:f5:37:51:fb:b8:
         4d:e8:ea:fe:a8:56:83:78:04:30:ee:43:a2:f2:c5:73:14:66:
         08:bc:3e:eb:d4:f0:48:fd:6a:88:2c:0e:3e:69:15:f5:6f:82:
         8c:f2:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:48:07 2026 by rpki-client