Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
File:                     B67BE8ECC13C11EE80101E73C4F9AE02.roa (raw, json)
Hash identifier:          D1vhl2U+GTs7S58NrDOZYoFTVHvoZzXZcGup4JZ+gcc=
Subject key identifier:   E6:3C:C3:12:E9:3A:E9:22:77:68:4F:89:9D:78:FD:C9:28:43:9B:71
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       0A51
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:39:57 +0000
ROA not before:           Sat 04 Oct 2025 20:20:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141342
IP address blocks:        103.72.0.0/24 maxlen: 24
                          103.72.1.0/24 maxlen: 24
                          103.72.2.0/24 maxlen: 24
                          103.72.3.0/24 maxlen: 24
                          103.194.92.0/24 maxlen: 24
                          103.194.93.0/24 maxlen: 24
                          103.194.94.0/24 maxlen: 24
                          103.194.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Oct  4 20:20:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45dcd-d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:a8:c6:9d:db:3b:78:fc:1b:d1:14:02:71:
                    8e:65:9c:a9:ba:45:7f:20:a2:d2:fe:90:4a:2e:57:
                    08:2a:68:04:2f:46:20:99:c7:86:e6:b4:a6:f8:5d:
                    7b:ea:09:32:69:e4:f2:20:b5:e3:17:4c:c9:65:c9:
                    6c:aa:cf:5b:63:1e:10:11:91:45:a9:e2:08:b5:f8:
                    f6:31:88:d7:d7:d8:d7:7e:25:a5:0e:46:4d:21:09:
                    78:00:2e:80:61:b4:5a:92:d4:27:2e:55:46:10:e6:
                    97:d0:83:9a:e5:6e:c4:e0:e2:ec:51:76:e4:4c:6a:
                    46:f4:ca:d4:a7:ef:d6:fe:73:0a:2d:8e:95:7e:37:
                    f3:c4:b0:82:d0:70:cc:1d:e5:24:f0:69:67:45:a3:
                    8a:1e:ef:32:d4:37:cb:c7:aa:86:6f:b1:92:8b:1e:
                    5f:17:15:1e:26:12:68:32:2c:44:c0:12:fd:f5:28:
                    8f:82:dd:c1:85:5b:18:c8:f3:3b:39:3e:a1:42:80:
                    e5:ea:99:41:58:ce:bc:2d:1e:b3:37:61:01:e9:71:
                    a7:0a:bf:34:46:23:5d:f2:84:13:d8:5e:31:56:f8:
                    94:28:db:32:77:a8:40:a2:da:23:60:19:7b:56:32:
                    23:34:70:f0:fc:8e:f4:f3:3d:fb:dc:5f:9f:df:e2:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:C3:12:E9:3A:E9:22:77:68:4F:89:9D:78:FD:C9:28:43:9B:71
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.0.0/22
                  103.194.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:3a:82:4a:d4:05:59:e2:64:60:6d:ee:bb:a3:a2:19:93:0d:
         3a:87:f3:d4:5b:ac:b8:3b:24:c7:29:a7:91:7b:f1:c5:45:85:
         fc:3a:b9:35:05:14:0b:57:41:99:bb:8d:32:6e:11:68:95:62:
         7a:32:09:54:9c:f5:f2:7e:91:af:cb:82:ba:74:8d:66:0f:fe:
         30:59:03:44:45:d2:6d:dc:6a:8a:47:e6:98:f8:cc:53:b8:c0:
         64:1e:ce:6c:3b:4d:e3:ff:5a:c9:35:07:5c:71:e0:13:f8:01:
         07:b1:70:a2:4e:07:86:bd:c1:d1:90:ee:9f:21:8b:98:a0:3b:
         2c:de:19:53:68:18:92:79:fa:cf:1b:54:c3:1d:bd:e9:ad:0a:
         fd:55:df:54:22:de:fc:18:12:1b:4f:d5:8c:b0:b7:5d:7f:dc:
         3f:9b:4a:0f:b2:77:de:d4:88:9d:e2:24:dc:51:61:92:68:81:
         30:81:6c:b5:2b:0a:b7:32:28:62:40:76:ba:f3:4b:05:62:95:
         fc:e7:64:92:a0:83:1e:4a:bd:cf:c4:8b:90:4a:4c:68:5f:90:
         20:dd:28:6d:2f:c9:70:81:8d:57:38:81:a6:ab:98:f9:30:01:
         e6:ee:48:40:76:6a:55:57:50:8d:04:2f:2d:be:9b:8e:62:5c:
         0c:54:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:54 2026 by rpki-client