Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/3B6578C47F4211F084F6C541C4F9AE02.roa
File:                     3B6578C47F4211F084F6C541C4F9AE02.roa (raw, json)
Hash identifier:          6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=
Subject key identifier:   35:19:BC:45:7B:21:BF:15:53:81:BF:0F:B0:81:B2:EA:86:82:0C:9B
Certificate issuer:       /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial:       0288
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/3B6578C47F4211F084F6C541C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:05:49 +0000
ROA not before:           Thu 05 Feb 2026 12:21:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38264
IP address blocks:        103.52.34.0/24 maxlen: 24
                          103.52.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
        Validity
            Not Before: Feb  5 12:21:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a455cc-fcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:98:70:ff:ba:f6:29:79:98:4c:09:f3:60:
                    9d:a4:de:23:84:5a:50:68:fe:4a:8e:b6:1d:8c:a4:
                    3f:31:75:ff:84:65:52:ab:74:81:19:9c:30:4f:b8:
                    d7:22:e0:57:dc:79:95:c6:47:a4:1d:87:83:3f:86:
                    df:e6:26:ac:2a:c8:9e:1f:b7:13:1b:15:18:7e:50:
                    4a:03:59:c8:19:e9:cc:62:53:18:5c:63:3f:f8:7c:
                    6d:42:52:e4:ea:5f:bd:ff:a7:84:62:c7:8b:74:f6:
                    a7:97:4c:10:9f:a5:88:f3:b1:94:33:7a:b6:ec:ee:
                    0c:63:df:a3:e5:fe:03:b1:57:38:3f:5f:b7:0d:bc:
                    82:4d:09:17:53:4d:10:2b:5e:c1:10:b3:11:dc:10:
                    e1:1a:0c:da:0b:28:25:27:85:b2:78:f0:c3:7e:d7:
                    f6:5f:67:8b:85:6a:20:c8:15:b5:00:12:3b:55:e9:
                    c9:05:7a:59:54:dc:ca:d2:06:d7:ad:9d:91:3a:3c:
                    36:02:e8:73:72:78:46:e0:83:60:24:63:29:c7:00:
                    5b:51:96:ab:c8:d2:da:ef:1d:f6:b6:9b:d5:1f:c8:
                    4f:bf:e1:65:ad:19:9b:7d:8b:cb:fb:8b:2a:89:5b:
                    d5:f9:a6:4a:51:01:24:50:7c:9d:be:9f:1e:d3:0f:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:BC:45:7B:21:BF:15:53:81:BF:0F:B0:81:B2:EA:86:82:0C:9B
            X509v3 Authority Key Identifier:
                keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/3B6578C47F4211F084F6C541C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:12:bd:7b:f4:72:8c:2b:2f:60:82:6b:b2:06:ce:82:28:c4:
         2e:5b:cd:d4:a8:a5:e9:06:c4:d5:db:89:f1:6d:80:46:56:ac:
         33:28:28:bf:63:90:89:a6:bb:14:41:e4:68:21:ce:bf:de:64:
         e0:cf:7a:e9:91:09:95:85:c2:eb:17:4e:31:9d:93:c2:b7:63:
         0c:59:bb:32:2f:59:0e:c5:ea:b9:3f:89:94:f7:04:32:4a:b0:
         d8:fe:c7:59:50:79:67:b1:26:c5:e9:0b:7c:76:e3:18:bb:e2:
         44:66:e1:a1:3d:e1:a9:87:e2:53:eb:80:00:90:4f:5a:0d:76:
         47:bc:86:a5:70:58:de:7c:b8:7f:83:19:17:3a:52:ed:c0:88:
         d7:ee:6e:61:e6:e9:33:88:d4:8e:89:52:08:98:7d:bb:a5:3c:
         9c:70:7d:1d:ff:14:3d:e0:23:65:42:05:a5:99:31:fc:ba:7b:
         68:78:42:fa:9b:0e:36:84:d4:2b:e1:e9:14:1c:24:ed:ef:26:
         85:42:43:71:d9:5a:cf:8d:3a:c0:6b:16:c7:b2:92:97:8e:ad:
         c5:8c:81:43:1a:4d:d6:74:19:da:fd:2a:dd:82:b8:b6:51:ad:
         d6:b1:0c:12:8d:b4:f0:d6:e5:44:f5:0f:b0:a5:58:4d:54:cd:
         92:da:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:36 2026 by rpki-client