Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
File:                     40565FA23C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          tLjCQlI7Nt4pCiyekgwVx4n0ETrIFxx2K/3Ou8miGZI=
Subject key identifier:   29:0E:3D:98:F9:FC:45:C8:A5:7A:86:CE:60:9E:98:EE:A0:CF:6C:77
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       0547
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:57:26 +0000
ROA not before:           Fri 11 Apr 2025 00:04:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9744
IP address blocks:        103.212.96.0/22 maxlen: 24
                          139.5.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: Apr 11 00:04:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40d86-05e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:33:af:4a:fa:f2:32:66:21:a3:d7:c8:88:
                    8c:0c:fa:57:39:b3:aa:6e:f9:1d:1e:df:c2:ba:f3:
                    d4:8d:40:1e:be:63:94:ca:2a:68:22:e2:3a:e4:fd:
                    b0:3e:0b:a3:d6:5e:96:81:58:55:8e:64:26:49:5e:
                    8c:85:3b:6c:63:95:a5:02:dc:df:1f:ae:d0:f2:5f:
                    7b:c9:f1:5c:c5:54:fd:59:1a:d2:d0:27:97:eb:e2:
                    d6:9c:3b:2c:73:05:94:a5:a3:ab:47:4d:2e:b3:40:
                    df:1a:8a:69:d8:00:a9:fd:fe:b4:84:15:57:ca:14:
                    ba:59:c6:32:52:39:43:de:b2:dd:cd:ca:1d:df:89:
                    9a:25:27:21:ef:4a:94:c0:62:0a:79:1f:f7:4b:3d:
                    61:26:92:05:ea:cf:8f:17:50:c4:57:4e:1f:6e:05:
                    33:6f:bb:e9:36:b7:fa:ef:b9:64:86:d7:29:9c:d4:
                    f7:ad:a4:05:9c:72:5f:87:f7:7f:9d:85:41:b5:ba:
                    b0:55:a0:e6:86:0a:7e:91:e0:c2:28:49:3d:0c:91:
                    2c:41:c2:35:04:e2:a7:db:e7:57:bb:03:d6:77:92:
                    ce:4a:df:38:57:f0:6f:65:d4:8e:92:b1:34:b4:35:
                    b7:25:8a:7f:9e:78:7f:15:04:c8:9c:f8:9e:9c:14:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0E:3D:98:F9:FC:45:C8:A5:7A:86:CE:60:9E:98:EE:A0:CF:6C:77
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.96.0/22
                  139.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:8f:da:85:4a:a6:aa:e0:76:40:6a:cb:c9:5a:3f:66:3f:
         a3:1d:f6:8a:2d:2b:f9:cf:8e:ac:67:ef:4f:d0:43:ce:11:79:
         7b:e2:24:e3:0d:a9:c5:de:42:27:aa:fc:34:e6:99:8d:02:91:
         6f:35:97:7e:02:3e:8f:d5:7c:d7:cd:a4:13:da:65:2a:9c:cb:
         ee:e0:cb:c6:cb:b0:8e:9f:9a:a2:cc:bb:55:d6:d9:92:bd:86:
         9f:7c:90:e0:48:ec:4d:f2:3b:f0:2e:cc:74:96:6d:ac:ce:cb:
         a3:60:be:c8:1e:63:2f:97:16:09:41:32:26:1a:a9:84:be:c9:
         e4:e5:05:fc:f1:59:44:fe:44:04:81:c0:ea:5e:17:cf:d2:bb:
         79:08:5a:7b:b1:ec:7d:ad:95:79:3f:cb:f8:d7:c9:ff:2d:b8:
         f6:17:8f:8d:7b:60:39:c5:76:0d:84:7d:89:dc:b3:93:b7:39:
         20:49:17:e4:48:90:42:c6:70:f0:d4:f7:85:61:0e:f0:29:92:
         06:39:42:69:4a:a2:51:e3:da:4c:8c:75:a5:2b:f5:9a:33:22:
         ba:0b:a0:5f:29:20:6a:a3:88:b3:14:bb:d8:ba:e1:ad:b1:74:
         ad:12:1a:d3:ee:42:c8:50:70:3e:8b:36:7e:23:82:39:cc:2c:
         4e:4a:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:56 2026 by rpki-client