Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/AB3814CEC85411EDAE5D9322C4F9AE02.roa
File:                     AB3814CEC85411EDAE5D9322C4F9AE02.roa (raw, json)
Hash identifier:          UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=
Subject key identifier:   8D:6A:D9:4E:8A:3F:BA:A0:60:35:34:9B:AB:95:57:BA:75:53:E2:A8
Certificate issuer:       /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial:       022E
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/AB3814CEC85411EDAE5D9322C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:11:44 +0000
ROA not before:           Mon 03 Nov 2025 02:46:50 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141359
IP address blocks:        103.174.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
        Validity
            Not Before: Nov  3 02:46:50 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a410e0-71c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:63:f9:79:c6:19:ba:e3:8b:f9:0a:29:36:
                    e9:c8:f6:17:58:46:6e:55:78:89:af:9f:45:5b:a2:
                    8c:f4:c3:81:8b:fe:08:3d:72:d2:d7:20:f4:e5:64:
                    6e:8b:dc:d6:cf:b3:58:10:ea:6c:eb:89:ea:55:f2:
                    3c:9c:6f:e2:7c:2a:25:90:f6:2d:84:cf:1b:12:8c:
                    67:c4:61:79:0b:06:a7:20:93:57:10:2b:b3:e0:55:
                    f2:7d:7a:73:30:70:a7:65:98:29:64:8c:0f:1c:0d:
                    21:cc:54:68:d1:0d:94:e8:72:0c:a4:2d:ec:bc:b6:
                    7e:91:c1:c4:27:9b:be:4f:ff:8b:b1:ae:ae:6b:7e:
                    90:d6:59:86:8d:61:68:a6:17:59:b2:ba:68:1d:06:
                    96:fa:05:d7:fc:33:c8:87:3b:d9:06:fc:9f:90:0b:
                    15:2a:c9:d1:67:bd:e1:88:1f:b2:47:c0:a0:2b:fb:
                    e5:8c:f8:95:22:aa:76:f0:b1:62:41:10:bf:2a:6e:
                    cf:10:ce:3d:1a:04:c8:f6:2c:17:54:c5:22:49:76:
                    10:57:6e:2e:00:1d:02:dc:2d:09:e7:a6:4a:96:57:
                    cb:3c:54:77:3c:c5:7d:da:ea:a6:e8:e8:7a:ed:f2:
                    4f:38:ef:48:92:25:80:02:5e:96:25:28:e2:9b:a9:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:D9:4E:8A:3F:BA:A0:60:35:34:9B:AB:95:57:BA:75:53:E2:A8
            X509v3 Authority Key Identifier:
                keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/AB3814CEC85411EDAE5D9322C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:bd:46:28:35:b4:92:17:c8:b4:df:de:7e:ff:55:a6:1c:
         b7:60:8d:2a:fa:99:06:8e:bd:fe:3f:9d:f5:8b:e6:16:fe:78:
         b3:c5:59:de:b9:14:18:da:dc:66:8c:1e:af:d3:98:3f:6c:0c:
         f8:5e:28:cd:e3:1f:11:62:3d:b6:6c:09:2f:0c:c8:7c:0d:04:
         cb:a5:be:43:10:78:a2:a8:2c:2f:0d:aa:55:38:41:fd:7f:aa:
         1b:fe:ff:d1:ea:7d:88:e4:ff:96:eb:4a:66:5e:6a:b0:10:ab:
         97:dd:9c:dc:67:7f:22:cc:ea:66:1d:30:3b:67:9a:47:bf:d4:
         1d:2e:73:ab:83:d4:71:fc:79:80:e8:bc:4d:b0:b2:59:16:45:
         d7:93:a3:af:65:bf:ac:a0:e2:71:65:24:0f:83:ff:c9:75:de:
         aa:39:52:91:e2:b1:f3:48:4b:a3:16:2d:61:27:0f:9c:b8:e4:
         fe:43:00:b7:c5:54:4e:77:60:40:9c:1c:1f:c6:c8:62:cb:0d:
         af:2b:ea:00:30:37:96:52:82:fe:72:0b:c7:bf:67:21:fa:f3:
         f9:ff:a5:eb:60:cb:94:de:5c:70:d1:20:97:71:c2:df:ab:eb:
         66:05:ba:e7:e9:09:65:2a:5c:a3:db:9f:1b:49:a7:7f:97:32:
         49:8e:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:38 2026 by rpki-client