Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa
File:                     7E50DB58DE1E11EF96BAF829C4F9AE02.roa (raw, json)
Hash identifier:          c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=
Subject key identifier:   07:2B:C7:D6:37:71:69:FE:75:50:87:60:5E:90:2E:24:DE:A8:12:1A
Certificate issuer:       /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial:       3539
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:58:04 +0000
ROA not before:           Sat 04 Oct 2025 14:40:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153397
IP address blocks:        103.80.41.0/24 maxlen: 24
                          103.80.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
                          rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13625 (0x3539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
        Validity
            Not Before: Oct  4 14:40:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4701c-3bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:e4:e1:4c:cf:6c:23:a4:75:ae:85:d9:95:
                    eb:3e:62:09:0c:b1:2e:47:dc:1a:c9:41:fc:7d:d8:
                    f5:3e:e8:5c:e9:08:f6:d9:6f:03:f8:5f:a1:63:e7:
                    6e:99:f7:22:d8:f5:4e:59:50:0e:3b:2b:07:79:4a:
                    18:28:be:30:dc:d7:bb:25:4e:ba:4c:27:34:fb:68:
                    0b:28:83:52:75:cd:93:aa:97:34:b8:06:11:a6:ad:
                    96:a0:f1:b0:c5:00:4d:71:49:c2:85:12:02:34:9d:
                    f1:40:68:11:94:f3:b0:ac:17:fd:ba:fb:eb:03:ab:
                    0a:25:fd:34:e9:50:c3:be:d9:d2:da:cb:56:a1:07:
                    76:c3:fe:96:0a:7c:13:68:9e:41:89:f5:05:86:4d:
                    66:06:c8:17:c5:85:1f:db:be:28:d3:b3:8e:cd:a4:
                    b3:f0:d7:21:cc:fa:b4:3b:49:5d:0d:40:c6:dd:cc:
                    80:93:d2:b9:7a:24:06:99:8a:26:4c:7c:1b:51:b4:
                    db:3e:d1:ce:b4:e9:84:34:e1:3a:09:f0:17:30:81:
                    90:e8:78:e5:5a:7f:b5:4c:6f:d7:bb:ef:aa:9f:9e:
                    ea:61:d4:85:63:5f:e7:92:c9:f2:15:b8:ef:44:af:
                    82:53:15:fb:04:f0:0a:95:49:b0:ef:c7:0d:f5:10:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2B:C7:D6:37:71:69:FE:75:50:87:60:5E:90:2E:24:DE:A8:12:1A
            X509v3 Authority Key Identifier:
                keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.41.0-103.80.42.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:88:38:54:69:96:80:14:07:83:ee:68:82:92:45:35:ec:52:
         d7:39:f3:c8:ea:a9:45:18:15:a6:ac:ab:54:96:40:de:26:21:
         a2:50:55:e4:03:6c:4b:94:9a:64:28:ef:0e:76:3b:df:f6:4f:
         c0:dd:3b:59:17:e9:17:66:46:f3:04:b0:2f:69:5b:df:d7:50:
         c1:d1:bc:24:73:b2:45:4d:a0:64:3d:f4:06:eb:5f:54:f1:30:
         85:ec:c1:e2:35:46:97:b6:58:eb:59:71:7c:48:9f:9f:e1:b7:
         20:43:21:87:f6:2e:98:2f:26:22:33:c8:4e:07:39:1a:54:f0:
         11:d1:cb:c1:9c:fc:e6:51:e2:d5:82:90:06:9d:e5:82:41:45:
         c8:91:e2:3e:e7:b9:69:47:69:f1:d4:28:51:fd:1a:1a:19:54:
         02:7b:14:17:3e:fa:d2:4f:ba:4d:03:f0:1f:96:b7:dc:1e:17:
         1d:38:98:74:ad:1a:18:ec:db:23:7d:66:cd:a9:11:a8:c2:93:
         18:06:9a:45:8e:b2:8f:04:5e:01:35:75:50:b6:2d:b9:76:96:
         71:ee:bb:75:77:a0:a4:3a:0b:87:5b:7d:ef:0b:ea:ed:2d:24:
         66:a7:21:c8:1d:a4:94:0c:fc:0c:e3:2c:08:9d:83:53:d4:20:
         58:63:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:59 2026 by rpki-client