Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
File:                     AB366D1C409611EE92C55F40C4F9AE02.roa (raw, json)
Hash identifier:          Lf5S48RM+H6jGhhi+lkOyHY5YBcAJOA0fAYnMQrcmBs=
Subject key identifier:   50:85:5D:B4:50:66:5C:B6:84:11:6A:C2:A3:7B:75:82:94:C1:A9:3F
Certificate issuer:       /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial:       01DD
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:38:22 +0000
ROA not before:           Wed 11 Jun 2025 03:42:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18001
IP address blocks:        103.210.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
        Validity
            Not Before: Jun 11 03:42:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3dede-4c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:70:54:7d:a4:bf:47:1f:e9:82:b8:d7:97:
                    80:0b:ee:a5:0f:e5:95:2d:d3:c8:32:b8:f9:b0:05:
                    35:e9:5e:e3:a0:bc:dc:bc:76:58:25:75:7c:c9:e8:
                    e9:68:c6:3f:13:4b:b2:f2:10:cd:61:48:60:05:2d:
                    1c:1b:4c:86:c5:c2:7d:2d:7e:4b:77:41:c0:c0:26:
                    65:c3:c2:66:8d:0c:98:00:b0:56:4f:23:60:3d:c1:
                    0e:93:98:bd:20:14:6a:2a:a7:ae:89:e3:5d:59:f9:
                    e5:e6:af:17:f1:03:94:82:7a:90:70:7f:77:95:26:
                    1c:a7:81:3d:e5:bb:4a:be:72:38:b4:89:65:ec:5f:
                    37:79:ac:be:1c:46:4c:b7:c4:b6:a9:40:33:d9:08:
                    f9:1b:7e:48:42:7d:46:8f:82:2a:2b:30:57:41:c5:
                    6b:3b:17:7e:9c:c2:56:ee:9d:4e:0f:4c:ea:93:fe:
                    f9:52:61:69:ae:a6:77:7f:fa:70:7d:ab:7f:45:f1:
                    bc:d3:75:4f:df:f6:4e:a2:2e:ec:3b:3c:0f:f8:5b:
                    00:20:ae:5e:4e:84:d5:be:0b:a2:27:ed:27:db:69:
                    ba:10:7a:29:1a:14:9c:84:23:10:29:e6:2f:01:b5:
                    ff:04:ae:5e:6e:da:b0:c9:03:db:02:e0:5d:ca:2f:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:5D:B4:50:66:5C:B6:84:11:6A:C2:A3:7B:75:82:94:C1:A9:3F
            X509v3 Authority Key Identifier:
                keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:de:8c:14:5e:54:1a:87:de:71:df:b1:1f:73:15:84:b6:
         66:c9:60:fb:19:b7:5d:2b:40:4f:99:0f:a3:db:a2:4a:66:8d:
         fd:75:c6:4f:c4:f2:fd:61:3e:2c:09:7f:79:57:65:e7:68:7e:
         90:89:07:a4:3c:eb:0c:dd:1d:89:ce:f5:cf:22:14:04:e2:e3:
         37:78:8a:81:27:c7:07:0e:c4:2a:f3:a8:96:92:9c:f6:09:64:
         3d:1e:8e:7e:cf:02:20:98:a4:12:a5:12:83:0d:bc:77:6d:42:
         ab:e0:00:0c:1b:0f:66:73:76:90:a1:f9:68:08:96:4e:85:5c:
         35:69:a0:2e:a9:23:f0:24:98:20:56:15:08:bf:a6:6a:f7:a7:
         b2:80:d1:83:26:af:10:9c:05:6b:90:16:7f:7d:e9:ec:5f:c7:
         50:42:e3:36:5a:9d:8f:5e:02:b7:7d:68:45:4e:3c:1a:6f:95:
         c6:08:ee:32:18:99:79:e0:de:50:25:68:27:a3:40:a4:2d:5c:
         9b:24:f7:37:29:f2:fe:1b:3d:67:48:3d:d0:ea:55:35:a6:d7:
         fd:5c:c9:dc:f3:f3:36:78:f2:e7:94:3c:39:25:53:de:47:d7:
         b2:26:00:d5:a1:d5:21:f3:a6:32:f3:32:08:26:9f:08:69:1a:
         27:1e:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:32 2026 by rpki-client