Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
File:                     1F642722FE4811EF9909DE6BC4F9AE02.roa (raw, json)
Hash identifier:          pFqkF1zmQvdIJM8db/lZ4fhptMY52NI16qAgj/QHF5w=
Subject key identifier:   F0:4B:36:70:C5:BA:BC:4B:07:64:62:29:0F:B3:75:01:E9:DB:58:20
Certificate issuer:       /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial:       06F4
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:12:23 +0000
ROA not before:           Fri 08 Aug 2025 23:35:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150675
IP address blocks:        103.249.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
                          rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
        Validity
            Not Before: Aug  8 23:35:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47377-b45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:84:27:87:ea:fb:c4:0e:dc:cc:1f:11:5a:
                    74:19:73:9b:7f:c1:af:7e:c7:51:94:52:6f:f5:eb:
                    2f:d2:b9:68:60:3f:d1:de:d3:1f:85:5a:eb:6c:23:
                    44:60:a9:64:d0:0b:f5:b2:e5:5c:1f:d8:f2:1e:41:
                    08:25:35:0e:e6:09:1b:32:3c:f5:55:b7:81:96:5c:
                    97:76:53:54:90:8e:8d:1c:5a:d9:9f:3f:9d:c2:81:
                    cd:4f:79:13:0f:23:fe:f2:fd:88:42:13:66:13:28:
                    60:a8:bf:f5:84:6d:50:06:54:76:48:b4:ea:c0:4f:
                    66:04:e5:a0:6a:c6:1b:a5:4c:ac:c4:49:5e:cf:ca:
                    7a:01:28:1f:06:1b:eb:b2:91:5c:d0:ba:68:f0:02:
                    8e:b2:f0:1e:b9:86:05:3f:7f:71:d8:3a:77:52:37:
                    75:99:64:2f:c2:58:f7:4e:8b:72:3b:99:84:7f:ce:
                    64:18:5b:47:d1:80:24:30:5a:84:8e:3f:46:d9:6e:
                    73:ab:7b:6e:64:f9:21:cb:7d:ad:f9:e8:cf:a5:fd:
                    8c:5b:71:23:b3:83:73:1b:9c:30:6f:d0:23:1c:6c:
                    f4:d2:27:2e:d0:e8:3d:d0:01:85:da:69:be:0c:db:
                    90:0e:69:7e:24:66:dd:44:af:43:89:26:a5:cd:d3:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:36:70:C5:BA:BC:4B:07:64:62:29:0F:B3:75:01:E9:DB:58:20
            X509v3 Authority Key Identifier:
                keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:c4:f5:49:b2:ad:ea:9c:93:44:19:5f:ef:92:c8:a5:bb:
         5b:61:f2:4c:13:7b:f9:88:73:e4:d6:44:cb:1d:d2:ef:e5:e1:
         25:4f:be:4f:d3:bc:aa:bd:57:4f:b7:86:2a:65:14:7a:aa:83:
         20:3e:01:9c:8f:9f:bc:b4:09:ad:99:99:32:03:0a:8d:9d:5f:
         30:24:6a:3e:0c:50:d7:d9:25:24:b8:9e:22:55:43:3c:df:c8:
         a3:0c:35:96:56:92:86:39:de:6b:12:21:e5:9d:a0:63:5b:88:
         d8:29:97:00:8c:d0:6f:7f:86:d9:0f:05:d4:90:da:8f:dd:b7:
         86:61:f5:4f:a6:7c:b9:40:88:20:d4:22:04:ec:81:2c:c9:84:
         21:54:be:81:01:1b:88:99:b1:b2:b3:5e:f9:cb:a9:21:f3:ea:
         5d:f8:51:d6:3c:1b:7f:b1:17:44:56:de:13:3f:39:30:3f:95:
         93:6b:c5:13:07:c4:33:6f:08:10:25:c3:93:22:1b:de:c8:a3:
         bc:c2:55:3e:9d:d2:c8:0c:9f:55:61:f6:0a:2b:84:46:5d:73:
         fd:fd:43:fd:56:db:18:1e:25:d3:37:90:e8:48:c0:f3:26:99:
         8f:f1:91:32:80:d6:12:25:54:75:d6:92:56:6f:1e:13:14:a1:
         bf:29:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:27 2026 by rpki-client