Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
File:                     3F3532743C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          75CbdDwNCWQEjQ03UFogZFfSqok6CR6FUiRcyE5DSoo=
Subject key identifier:   1F:54:CE:E0:C2:13:08:FA:AA:BF:39:25:F6:62:25:5D:F0:35:DC:58
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       0546
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:57:25 +0000
ROA not before:           Fri 11 Apr 2025 00:04:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     45753
IP address blocks:        103.212.96.0/22 maxlen: 24
                          139.5.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: Apr 11 00:04:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40d85-fa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0e:a1:9d:59:e2:b5:99:80:b5:d9:9e:09:ea:
                    40:5b:86:01:49:e1:c6:e7:11:80:cf:2b:ac:92:51:
                    eb:be:34:d1:70:8c:01:c0:8d:ec:25:6e:3e:ef:2c:
                    62:22:80:a4:63:47:ec:f1:88:11:e9:ea:20:2a:3a:
                    92:97:fb:2c:4b:24:2a:bd:5c:b2:05:b1:88:e1:c3:
                    08:f3:e6:c3:30:17:dc:07:71:ce:10:66:a0:a6:7b:
                    e8:3d:7a:2f:42:0f:ed:f5:4c:c6:b5:b8:89:3f:fe:
                    37:a6:06:69:11:88:47:46:f3:78:c4:2d:3c:1e:43:
                    60:8e:af:68:a4:fd:a3:8a:0e:eb:1d:36:ea:95:0e:
                    af:c6:e6:40:66:50:3e:48:72:f5:a3:cc:60:c9:d9:
                    63:d1:74:15:ff:c1:89:f6:da:6a:ed:29:df:d6:ac:
                    f5:e9:a0:44:25:b7:24:21:f2:2d:5d:bd:7e:81:53:
                    63:e4:fa:9d:24:40:9d:ec:72:4d:31:4e:42:d8:29:
                    13:38:58:45:ad:e5:7a:4c:6f:93:66:fe:9a:74:18:
                    c2:2a:ae:03:00:63:33:09:4b:14:6d:72:3c:f7:d4:
                    fc:56:b1:52:4e:35:08:7b:fb:c2:31:1f:e5:b7:16:
                    ca:83:96:9d:a5:ff:10:84:4c:08:a9:34:e0:fa:ca:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:54:CE:E0:C2:13:08:FA:AA:BF:39:25:F6:62:25:5D:F0:35:DC:58
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/3F3532743C8311ECA86D031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.96.0/22
                  139.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:21:98:43:0f:d2:73:34:10:8c:80:13:10:fb:4e:d9:c4:
         7f:ad:cc:ab:a9:be:a9:8c:71:3d:fc:6a:a2:4e:89:6f:0a:c8:
         62:14:91:63:fd:0d:7c:c8:12:5d:2e:fc:56:ab:5c:46:10:c2:
         e3:ec:e1:3f:80:16:36:e5:09:a7:a2:66:41:52:ca:d9:b5:a2:
         40:ba:f2:a4:c1:05:41:72:52:b8:c0:26:f7:b1:f6:96:df:1f:
         51:c3:fb:e3:5d:6d:08:82:26:f9:23:11:bc:6c:83:fb:fd:0a:
         25:e0:83:2d:b4:8a:68:39:b8:8b:46:b2:bb:6f:1c:f7:7b:ee:
         9e:01:eb:00:a5:7e:2f:4e:24:c0:52:d6:71:2e:a5:a3:ef:3c:
         a6:5b:a0:67:a6:a3:61:df:d8:14:ac:9d:ec:17:9e:65:88:bc:
         73:22:aa:82:ac:51:42:32:ca:cb:e8:c0:93:91:53:b0:b7:b7:
         96:11:db:15:2e:61:ba:70:21:cf:e8:25:fa:fd:fd:45:b2:63:
         ba:e0:07:b0:9a:0a:5f:b1:8a:ef:ce:a8:1f:e1:54:9f:4e:8e:
         06:64:6e:3a:59:79:89:04:ec:c6:2d:e0:44:c9:7b:a6:f7:6b:
         9c:08:b1:10:aa:34:e4:9e:ec:86:71:93:f6:fa:25:c0:ae:34:
         d8:39:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:11 2026 by rpki-client