Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
File:                     0C2902B4FC3D11ECAD619C35C4F9AE02.roa (raw, json)
Hash identifier:          0G8y890AV8+X2YlEAcmnQRZ33GxT1e5vDg0b+sSexQ8=
Subject key identifier:   06:32:36:8B:40:CE:67:78:01:C8:BF:FB:B7:F9:8C:4A:FC:D9:36:E6
Certificate issuer:       /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial:       0334
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:02:58 +0000
ROA not before:           Tue 17 Jun 2025 01:37:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137853
IP address blocks:        103.115.172.0/22 maxlen: 24
                          2402:eb40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
                          rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
        Validity
            Not Before: Jun 17 01:37:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a400c2-10c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:a8:9a:b9:e5:86:0e:a0:88:38:87:33:d0:
                    12:5e:e1:81:47:de:35:79:4e:46:68:2b:f8:a1:ea:
                    e0:c4:08:4a:cb:90:57:83:e1:83:47:26:db:15:c2:
                    70:b7:8e:9d:13:d6:1f:14:4f:b2:d1:ed:41:62:49:
                    6c:59:ec:24:d2:93:58:33:ce:c3:e1:93:10:23:0d:
                    00:85:b2:66:15:3a:66:c6:9d:1c:98:03:34:ac:93:
                    30:13:0e:88:44:e9:26:11:e5:ed:0f:0a:07:ea:f1:
                    c3:6e:c9:53:c5:d0:45:63:ba:93:bb:dc:c3:7e:1e:
                    69:f0:12:66:cc:4e:35:c2:45:c4:cd:5b:99:9d:66:
                    55:33:64:cf:c4:21:ba:16:25:4e:c2:7c:36:5a:a0:
                    a8:20:4f:20:f0:53:0d:3f:79:aa:b6:9c:52:d5:4a:
                    8e:83:e5:ce:7b:af:e8:d0:40:a9:db:63:8b:d4:34:
                    22:ec:85:b4:68:9a:9c:f9:9b:f4:0c:a9:0f:2f:aa:
                    92:b6:44:a2:6b:8d:76:62:63:ec:84:ef:b5:ac:b6:
                    23:a9:88:83:61:cb:b0:1d:ab:33:90:f9:47:05:b9:
                    00:9f:a3:73:84:e9:8b:ef:40:34:16:62:dd:59:8f:
                    71:1c:0a:b9:9e:12:c6:e6:7d:5a:43:db:00:c0:a9:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:32:36:8B:40:CE:67:78:01:C8:BF:FB:B7:F9:8C:4A:FC:D9:36:E6
            X509v3 Authority Key Identifier:
                keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.172.0/22
                IPv6:
                  2402:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:82:82:2f:c8:60:c6:42:43:98:f8:78:f0:1b:d8:f5:fd:e7:
         14:a0:22:ef:28:e2:98:92:bb:3f:6b:5f:ec:47:cc:5e:ae:a2:
         28:96:c3:9d:95:73:be:63:98:e4:7a:58:9c:3c:58:8d:70:91:
         da:30:ab:2e:90:6e:20:bd:ba:03:7d:f4:ed:7d:b6:23:89:d2:
         59:b3:1d:d7:3a:c2:88:d1:89:6a:6e:fd:21:cc:9c:b4:12:a1:
         55:3e:be:87:df:5b:87:13:0b:43:1d:4a:ad:32:48:da:00:f3:
         15:9c:b7:4e:f2:e1:48:5e:e6:6b:c9:fe:e9:00:e0:7e:18:67:
         32:19:13:68:e8:ef:1e:cd:b5:36:e2:a2:eb:03:e2:b0:41:c4:
         71:7b:06:f8:c0:d2:d7:3a:4b:6c:41:93:0d:85:cb:66:cf:bc:
         60:11:ff:83:aa:01:c3:f6:33:ef:df:99:40:c4:36:05:e4:30:
         39:42:90:47:31:8c:23:bd:75:56:e0:17:de:a1:ac:a8:b5:ef:
         98:b6:db:61:a8:0b:ba:19:bf:03:bc:86:80:9e:2d:5d:a0:19:
         0c:38:1f:47:44:1f:cf:3e:80:20:c1:8e:e3:ac:01:1b:2a:16:
         84:9c:cc:a0:f4:a7:eb:a1:11:9d:51:51:d9:1d:a8:ec:d3:35:
         ec:ca:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:30 2026 by rpki-client