Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
File:                     E56B8AFEAB1411F0B1936926C4F9AE02.roa (raw, json)
Hash identifier:          KsmwgAL/gukfCTPlRMQRH678LbHq90naclkR64QeMKk=
Subject key identifier:   9F:8E:0D:6B:24:08:CA:03:72:9E:D3:5A:C2:E6:7F:28:FA:C0:58:F6
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       4C
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:13:57 +0000
ROA not before:           Fri 17 Oct 2025 04:56:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55486
IP address blocks:        103.125.204.0/22 maxlen: 22
                          182.54.224.0/22 maxlen: 22
                          182.54.224.0/24 maxlen: 24
                          182.54.225.0/24 maxlen: 24
                          182.54.226.0/24 maxlen: 24
                          182.54.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: Oct 17 04:56:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3d925-8f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:b1:b3:38:c2:c8:66:bd:8e:70:b4:e9:70:
                    fc:54:3d:4b:28:1f:a6:b7:0d:7e:5a:06:c5:4f:33:
                    a7:43:35:63:cb:41:47:11:65:55:c3:aa:8a:ab:ab:
                    c8:30:ac:21:45:91:91:55:15:41:c1:66:31:c0:85:
                    b9:3e:54:14:4e:10:f6:02:e6:87:12:73:47:97:9d:
                    46:2f:9d:d5:82:dc:74:fa:4e:24:fc:ae:70:04:f2:
                    73:cf:75:81:3c:d0:3c:d9:22:43:fd:2d:c3:11:fa:
                    36:37:b2:11:ff:28:cc:98:25:60:d8:e7:4c:3f:b2:
                    7e:11:c8:46:66:69:db:ee:3a:1a:76:72:72:1d:5c:
                    72:92:20:43:19:ef:13:42:8b:8f:ff:43:e8:63:19:
                    91:14:fa:79:b6:48:f1:27:85:22:a2:54:e6:5d:35:
                    90:8a:1a:63:be:a7:3b:30:3f:92:a2:f5:92:a0:ce:
                    64:7a:a7:eb:c0:e6:51:44:54:7b:c2:3d:e2:dd:22:
                    1a:7f:96:e6:88:a4:5f:e3:dd:03:52:0c:2e:20:00:
                    e3:d5:b8:5e:d0:f1:a9:a5:56:1e:01:ed:02:88:b0:
                    89:db:3a:60:47:9f:42:74:01:22:63:91:b7:51:c2:
                    ce:bc:05:1a:1f:2e:d5:6f:e1:d6:1d:c5:55:a6:27:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:0D:6B:24:08:CA:03:72:9E:D3:5A:C2:E6:7F:28:FA:C0:58:F6
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.204.0/22
                  182.54.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:78:d9:79:56:93:31:77:51:18:21:bc:34:dc:fa:e5:10:98:
         2d:c8:bf:33:28:b1:54:b4:6b:b1:7e:7b:27:7b:35:f9:ca:6b:
         d5:e7:d2:0e:47:75:3f:b6:22:69:17:c8:13:5e:28:b7:c6:a6:
         f0:d4:5d:bf:4d:09:9c:29:eb:af:d7:ed:69:1f:36:47:ee:dc:
         6e:06:d6:88:ff:b7:89:c2:f2:04:1c:40:de:21:87:86:6d:a1:
         5a:3a:c6:7b:8d:72:9a:da:ce:d7:a5:a1:a5:fd:66:82:86:d9:
         4c:fb:c0:f9:84:d6:eb:71:cd:d5:3b:60:78:f2:26:e2:7e:56:
         be:92:53:6d:63:24:34:44:f5:34:ea:69:be:96:60:85:b1:cf:
         73:ae:21:f0:57:b7:16:ab:12:67:d8:95:23:3e:a2:71:98:e4:
         a9:6c:52:b1:6a:ca:e0:a4:45:61:c2:1c:2b:8a:34:c2:1d:cf:
         a7:8c:54:15:14:0d:5f:1e:0d:d9:a0:13:28:fd:0f:7c:c8:94:
         10:d1:ba:9a:4a:7c:af:6f:2e:22:7b:01:45:72:5a:13:19:bc:
         7b:af:db:66:d5:85:71:bd:a0:4d:b8:34:db:25:cb:a4:5f:e6:
         79:c3:6e:d2:92:9c:60:1a:9b:54:f8:ce:cd:23:38:b7:b1:e2:
         e7:cc:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:06 2026 by rpki-client