Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa
File:                     47A21580B6CC11EC98672826C4F9AE02.roa (raw, json)
Hash identifier:          cztq4WM+cyh6Dv8KVPvE42rjfiHW8NZMn1s0RvbxLJo=
Subject key identifier:   5A:26:87:D1:80:DE:B1:AA:7E:56:8B:82:98:43:FA:3B:B3:C2:6C:72
Certificate issuer:       /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial:       3074
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:25:50 +0000
ROA not before:           Tue 02 Sep 2025 16:02:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133382
IP address blocks:        103.79.108.0/24 maxlen: 24
                          103.79.109.0/24 maxlen: 24
                          103.241.6.0/24 maxlen: 24
                          103.241.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
                          rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12404 (0x3074)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
        Validity
            Not Before: Sep  2 16:02:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4223e-115b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:46:d7:36:54:a3:7a:2d:f2:9d:e9:38:4a:
                    48:c5:19:29:30:4f:c7:8c:1a:76:6b:bb:6f:54:fd:
                    1f:31:dd:2e:99:fc:8c:9f:63:ff:8f:29:74:c4:fc:
                    35:6b:1e:fb:f9:c7:f9:20:b8:ec:18:33:8b:05:3b:
                    b7:e5:d0:19:e6:fe:99:73:60:da:f6:75:e3:29:58:
                    a9:4a:e9:d5:c7:74:20:0f:88:c1:72:b0:da:40:d3:
                    6a:f5:69:0b:7f:21:f0:40:ae:dd:5f:d5:ae:01:8d:
                    2f:94:3c:47:1a:65:86:af:95:df:24:ae:bd:57:70:
                    94:f7:5f:77:74:2a:bf:90:95:a6:60:38:0d:01:25:
                    be:32:2a:bf:03:c6:30:3b:0e:ca:e4:e4:93:c4:83:
                    91:d1:7a:36:7d:40:e5:91:0a:0d:00:08:f1:8a:7c:
                    13:d6:57:c9:ca:5d:f5:39:86:f4:50:5a:98:61:0a:
                    8c:87:2a:af:db:97:be:9d:8b:ac:6a:f3:25:e1:89:
                    9f:04:12:b1:9e:ae:9a:a6:a1:af:52:26:2c:5e:08:
                    7f:64:aa:28:b6:ee:a7:4f:47:b0:bb:fa:9c:64:76:
                    ca:8a:3d:24:cf:a4:36:06:b8:c9:97:42:15:a8:8f:
                    7f:0c:4f:aa:13:d9:f4:d3:56:d2:8e:f4:55:da:74:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:26:87:D1:80:DE:B1:AA:7E:56:8B:82:98:43:FA:3B:B3:C2:6C:72
            X509v3 Authority Key Identifier:
                keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.108.0/23
                  103.241.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:a1:45:e9:3d:48:24:67:fa:c9:9f:9b:37:aa:dc:5a:48:
         35:77:5b:64:bc:e9:1c:4f:ef:e1:f8:df:ce:4a:f0:1d:5b:b5:
         ef:22:a5:61:bc:11:59:6f:94:59:3d:32:ae:68:5b:1c:95:f3:
         39:d3:a2:4e:b3:2d:23:59:08:59:5e:35:89:83:7e:fc:1e:d4:
         21:30:44:65:bc:b7:0b:2c:04:e9:b1:bb:14:bd:2f:20:85:cd:
         86:0a:02:f7:09:cb:a3:33:57:70:a9:9e:aa:9a:dc:8e:68:d4:
         b1:b2:a4:21:0b:60:81:87:b3:e2:1e:0d:02:c7:bc:79:bd:ea:
         be:43:76:97:81:da:7d:00:3d:7d:bc:93:4d:25:6f:dd:21:5d:
         91:f5:88:fe:12:a2:8b:89:44:cd:7b:52:36:8e:69:17:22:15:
         06:af:e1:92:8d:3e:f7:07:a0:74:00:17:0d:33:f8:9e:b1:33:
         d9:5f:d2:40:81:ec:91:63:53:cf:95:78:70:d1:00:63:76:00:
         c1:da:eb:2c:c5:6e:20:4e:28:f3:88:1c:4b:41:d5:cd:e9:57:
         c7:ba:fd:c1:70:ba:7a:13:0e:92:87:97:03:5b:7e:40:32:0d:
         fa:7b:5e:60:95:4f:b6:91:03:f0:f3:d4:38:62:85:bb:7b:7d:
         71:6c:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:57 2026 by rpki-client