Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/358556D2D98F11EDA9A38028C4F9AE02.roa
File:                     358556D2D98F11EDA9A38028C4F9AE02.roa (raw, json)
Hash identifier:          /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=
Subject key identifier:   3F:CB:22:C3:82:79:C8:5F:D5:B6:40:4B:16:32:7D:78:DC:72:99:5E
Certificate issuer:       /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial:       0236
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/358556D2D98F11EDA9A38028C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:13:07 +0000
ROA not before:           Thu 03 Apr 2025 03:30:50 +0000
ROA not after:            Sat 01 Jul 2028 00:00:00 +0000
asID:                     45162
IP address blocks:        103.194.68.0/24 maxlen: 24
                          203.149.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
                          rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
        Validity
            Not Before: Apr  3 03:30:50 2025 GMT
            Not After : Jul  1 00:00:00 2028 GMT
        Subject: CN=69a41132-d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:43:88:07:f2:fa:54:f8:c7:97:ec:02:95:
                    75:02:88:42:af:46:a7:8b:21:54:83:a1:ff:34:04:
                    6a:18:53:fe:1f:6c:7f:db:f9:c7:3c:63:54:1e:80:
                    a3:6e:4c:b2:69:6a:f6:f1:1a:10:07:18:40:94:5f:
                    45:c3:0f:2d:4d:74:ef:16:e3:5f:a4:0b:69:3e:ad:
                    57:c5:ac:20:2a:70:3b:96:5a:ae:28:24:52:ad:8a:
                    29:35:d0:51:9c:92:3f:7c:b1:11:e4:1b:c5:a4:43:
                    51:c7:84:9c:4b:77:60:1d:d4:34:de:79:ed:06:50:
                    dc:bd:43:77:f7:b1:a6:83:da:8b:f9:8a:a4:89:23:
                    a9:90:8b:10:74:3f:85:f7:ff:63:73:76:f1:92:6c:
                    eb:fd:18:5d:ae:15:d2:ac:c1:d7:20:65:dc:3d:39:
                    40:d1:aa:86:75:f8:ae:2e:70:ac:0b:fe:eb:ad:c1:
                    13:3c:e8:22:2e:05:72:02:57:df:7d:f4:69:9f:f8:
                    5b:e6:0e:75:e9:0f:fc:51:e9:8e:5d:9e:a3:67:5a:
                    24:88:04:8f:75:08:f3:ce:e1:b2:bb:ac:23:5e:b3:
                    f4:ce:64:30:21:89:84:1a:15:32:4d:d0:bf:bb:87:
                    25:3c:a2:a5:eb:14:ab:e9:a0:b7:73:b1:ac:95:d4:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CB:22:C3:82:79:C8:5F:D5:B6:40:4B:16:32:7D:78:DC:72:99:5E
            X509v3 Authority Key Identifier:
                keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/358556D2D98F11EDA9A38028C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.68.0/24
                  203.149.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:13:b6:e7:67:ec:81:07:d8:83:6f:a4:42:1d:84:f2:7c:
         be:af:d2:be:48:e1:e4:ca:c1:97:02:42:89:69:e9:36:e0:d1:
         5b:6a:04:c0:a9:43:13:7d:2d:2c:26:50:6b:d2:56:9e:60:45:
         94:54:f7:9e:0f:41:80:37:4f:f0:5b:39:a0:81:07:a8:15:26:
         df:b6:54:6b:43:78:c0:8e:47:93:04:a4:63:a6:57:43:1c:fe:
         54:45:c4:75:ea:38:9d:24:32:98:21:85:65:cc:20:aa:d6:74:
         3d:63:b1:25:72:74:17:96:79:33:2d:bc:0d:a2:f5:aa:80:23:
         a8:10:17:bf:01:cc:f7:8f:79:36:7f:96:5e:a9:f0:c5:f7:be:
         03:07:21:a7:5b:cf:c2:48:80:f9:50:e9:c7:e1:81:44:0c:72:
         a2:50:65:d8:e8:4e:3d:aa:53:24:80:14:b0:5a:e7:77:39:37:
         85:cf:aa:97:b9:09:3b:c8:89:57:98:89:5b:c7:20:c2:28:55:
         b0:7a:cf:72:41:16:73:9b:c0:95:87:72:c3:3d:bd:a9:74:ed:
         80:45:9c:13:1a:55:0b:7e:95:5b:7b:90:bc:b6:28:ea:49:42:
         89:97:dc:f2:96:cc:87:fb:e1:30:5e:64:c8:0f:98:6f:44:d0:
         77:3a:db:ad
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx
RkMwMUYyNTYwHhcNMjUwNDAzMDMzMDUwWhcNMjgwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTEzMi1kNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGpDiAfy+lT4x5fsApV1AohCr0aniyFUg6H/NARqGFP+H2x/2/nHPGNUHoCj
bkyyaWr28RoQBxhAlF9Fww8tTXTvFuNfpAtpPq1XxawgKnA7llquKCRSrYopNdBR
nJI/fLER5BvFpENRx4ScS3dgHdQ03nntBlDcvUN397Gmg9qL+YqkiSOpkIsQdD+F
9/9jc3bxkmzr/RhdrhXSrMHXIGXcPTlA0aqGdfiuLnCsC/7rrcETPOgiLgVyAlff
ffRpn/hb5g516Q/8UemOXZ6jZ1okiASPdQjzzuGyu6wjXrP0zmQwIYmEGhUyTdC/
u4clPKKl6xSr6aC3c7GsldTNhQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFD/LIsOC
echf1bZASxYyfXjccpleMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4
RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTM0REUvQTk0MUQ1RTJEOEU0MTFFRDkyRUEzNjIwQzRGOUFFMDIvMzU4NTU2RDJE
OThGMTFFREE5QTM4MDI4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ8JEAwQAy5VYMA0GCSqGSIb3DQEBCwUAA4IBAQATaxO252fsgQfY
g2+kQh2E8ny+r9K+SOHkysGXAkKJaek24NFbagTAqUMTfS0sJlBr0laeYEWUVPee
D0GAN0/wWzmggQeoFSbftlRrQ3jAjkeTBKRjpldDHP5URcR16jidJDKYIYVlzCCq
1nQ9Y7ElcnQXlnkzLbwNovWqgCOoEBe/Acz3j3k2f5ZeqfDF974DByGnW8/CSID5
UOnH4YFEDHKiUGXY6E49qlMkgBSwWud3OTeFz6qXuQk7yIlXmIlbxyDCKFWwes9y
QRZzm8CVh3LDPb2pdO2ARZwTGlULfpVbe5C8tijqSUKJl9zylsyH++EwXmTID5hv
RNB3Otut
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:39 2026 by rpki-client