Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa
File:                     881750D0E04511EF8BD5FA0EC4F9AE02.roa (raw, json)
Hash identifier:          jDPjuvsCp7Ci7Mufwwcxzxz8UfNh5KPm3G/nts2ji3U=
Subject key identifier:   67:CC:AC:91:F0:D5:99:CA:48:D8:82:56:18:38:C8:56:89:6D:B4:E0
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       02AC
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:52:08 +0000
ROA not before:           Sun 07 Dec 2025 00:39:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150435
IP address blocks:        103.41.94.0/24 maxlen: 24
                          103.41.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
        Validity
            Not Before: Dec  7 00:39:37 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46eb8-effb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:29:6f:4f:b8:3f:e1:a7:b1:19:cb:4d:f2:
                    bb:5e:7f:c1:0d:83:cd:ba:67:5f:03:85:50:4f:f7:
                    22:64:55:c7:fc:12:63:d7:b8:a6:9d:79:bb:af:0d:
                    06:b7:9e:c1:ee:14:32:2c:d3:a4:a2:ee:a0:19:50:
                    d2:88:5b:82:61:67:e2:47:fb:c7:1e:6f:ae:d9:23:
                    63:9a:dd:c3:5b:ce:15:a1:9a:e8:e8:3a:a8:18:87:
                    57:f4:ea:12:28:d4:61:1e:cc:7b:9c:c5:f6:b2:f4:
                    fa:c1:bd:e9:d0:2b:b9:f6:43:bb:03:6d:3e:41:78:
                    46:de:ad:d2:0f:f5:51:39:d0:f4:63:da:29:69:1a:
                    27:4b:ef:36:cc:d6:7e:14:ff:94:99:d4:eb:8d:e6:
                    bf:8e:a1:32:26:e9:02:ff:ed:6e:c2:47:72:7c:a6:
                    c8:ab:4b:36:ad:d0:86:7c:7a:5d:d3:c8:ad:67:fe:
                    6b:0b:87:b9:9b:f6:6e:16:fd:d6:d0:d3:50:b6:01:
                    62:82:c2:9b:7d:df:9a:6d:c2:82:60:43:2c:eb:a6:
                    0e:70:d7:52:55:4b:6d:19:29:47:2f:a8:36:07:8c:
                    f3:2c:0f:4e:0c:2d:c2:b1:50:0a:6e:25:55:d8:b9:
                    03:f1:86:8a:5b:a6:67:3a:4a:b4:17:f9:02:cf:87:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:AC:91:F0:D5:99:CA:48:D8:82:56:18:38:C8:56:89:6D:B4:E0
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:f8:89:8a:27:96:4c:4f:ed:02:70:ef:33:4d:e1:b9:ff:
         e4:ff:a6:d5:21:8c:13:25:a7:53:2a:5c:cf:ea:f9:d5:73:4b:
         77:32:48:39:f2:7f:fd:ee:2b:14:95:d9:48:da:84:f5:5e:3e:
         ac:7e:78:14:89:6a:17:18:bd:b1:9a:27:d8:0d:52:30:1b:4e:
         f3:b5:6c:40:03:59:20:d2:d4:f9:9b:06:f5:83:ba:cb:e2:df:
         b7:46:f3:76:1e:7c:66:5c:b2:b2:07:c2:a6:2f:71:57:60:44:
         a2:4a:9b:97:09:db:92:bf:cb:7a:78:e0:63:6f:2f:03:c8:61:
         f4:41:ef:f2:60:f4:63:56:2b:b1:b7:7c:f4:74:77:bc:7f:f7:
         ea:3c:83:cd:db:43:e3:e7:f3:27:fb:53:99:85:7d:2c:ba:c1:
         d0:b8:a4:1c:12:98:e6:3c:2c:a5:7b:b2:66:91:6a:7f:21:aa:
         7e:a2:14:b8:0e:da:31:b7:87:ae:c4:de:10:35:8f:dd:95:16:
         61:07:6e:6f:1f:a7:d3:42:37:e2:50:02:6c:de:86:0c:e9:11:
         26:6c:61:54:85:9d:30:ea:30:e6:44:40:ae:ee:6d:1d:24:e1:
         b4:ae:d8:48:fb:48:d7:b4:79:18:fa:be:a1:2b:bb:e6:6e:28:
         60:f7:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:51 2026 by rpki-client