Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa
File:                     346A2B4045AE11ECB857890EC4F9AE02.roa (raw, json)
Hash identifier:          YheXK0UgGEB7Z/3VeNqFrG7TEedt8nnqAV/x4ZuFjYw=
Subject key identifier:   52:EB:6C:A1:04:AD:83:55:DE:5C:34:5F:E7:98:AA:BF:4E:D1:83:0E
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       052C
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:30:18 +0000
ROA not before:           Sun 05 Oct 2025 00:26:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132491
IP address blocks:        103.73.84.0/23 maxlen: 24
                          103.73.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Oct  5 00:26:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a477aa-798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:ec:27:13:90:cc:59:4a:61:5d:7c:7e:ab:
                    ac:62:9c:5f:df:30:4f:21:6f:78:c2:2d:ef:6e:44:
                    ad:8b:bc:ae:77:c8:6c:ef:7e:d0:1b:01:de:3a:c9:
                    97:8b:57:4e:fd:c3:8c:a7:ff:df:da:fd:b6:18:82:
                    02:3e:08:70:ef:6c:0f:ac:21:c4:0e:19:60:de:c4:
                    e2:22:1b:78:78:12:d3:ec:01:fc:83:f7:a4:27:55:
                    ec:6e:f5:a6:82:9a:70:10:c2:de:01:97:06:b6:78:
                    b2:a1:b0:22:de:a8:b3:6f:5b:a6:57:99:00:c7:d5:
                    70:95:80:8d:df:cd:0c:64:75:93:07:96:c0:60:1c:
                    61:b7:ba:0c:df:6e:7f:98:14:8c:52:8c:84:9a:5e:
                    d4:bc:87:1d:d6:a5:e9:12:c4:fd:fe:95:e0:cf:11:
                    8d:5e:ef:ea:43:77:c8:98:48:d8:2a:99:36:58:3f:
                    71:39:2c:89:bb:6d:dc:90:d2:11:90:85:e7:66:90:
                    9f:52:cd:0d:e3:4e:38:bd:c7:64:40:67:01:d7:f0:
                    3c:88:19:9e:fd:25:11:a7:37:96:54:24:75:5d:3d:
                    33:bd:b1:a4:36:36:34:82:6e:4a:33:b1:ca:45:c5:
                    e6:a2:f1:bf:39:43:1f:2b:58:93:ea:6d:fd:e4:b8:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:6C:A1:04:AD:83:55:DE:5C:34:5F:E7:98:AA:BF:4E:D1:83:0E
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/346A2B4045AE11ECB857890EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:63:fc:64:b7:61:af:f7:b1:6b:c5:1e:44:52:d1:33:78:87:
         99:77:ed:43:f9:4a:7d:5f:de:c6:a2:dc:53:f9:e5:32:5a:9a:
         45:d7:88:15:47:58:4a:fc:22:a5:92:6e:dc:53:13:4b:0b:4f:
         6b:27:bc:d5:87:44:0e:bd:cf:0a:ec:88:dc:2e:6f:24:9c:ac:
         f8:51:a0:7b:48:84:4d:c6:80:aa:79:7d:b7:f0:ec:14:62:9d:
         75:da:36:04:e4:48:23:ac:b4:24:81:a2:52:28:89:f0:b9:cf:
         ec:5c:83:0b:31:d6:78:e3:af:f4:ea:61:91:95:f4:07:78:86:
         cf:ef:e9:d8:98:24:37:eb:75:48:31:0e:cb:25:a0:35:bd:25:
         44:dd:8a:9d:16:bf:30:99:b6:ee:f0:fe:bd:e1:32:a7:a4:4e:
         2a:27:93:cd:54:8d:ce:87:95:9e:7d:f3:72:10:4b:c5:ed:f4:
         07:d7:9a:a6:3c:db:80:41:ea:1c:8c:ee:2c:9b:2e:f8:8b:70:
         36:20:4d:0c:a4:b8:da:21:6a:1d:0a:df:d5:5f:64:ff:49:5a:
         97:d6:d9:bc:f2:fe:07:03:4e:f9:2c:95:62:d4:2a:c5:3d:d8:
         33:95:e4:df:8d:b2:05:ff:65:05:28:3e:da:38:f6:39:e1:57:
         be:3a:4f:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB
RDYxNjk3MUEwHhcNMjUxMDA1MDAyNjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzdhYS03OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmQHsJxOQzFlKYV18fqusYpxf3zBPIW94wi3vbkSti7yud8hs737QGwHeOsmX
i1dO/cOMp//f2v22GIICPghw72wPrCHEDhlg3sTiIht4eBLT7AH8g/ekJ1XsbvWm
gppwEMLeAZcGtniyobAi3qizb1umV5kAx9VwlYCN380MZHWTB5bAYBxht7oM325/
mBSMUoyEml7UvIcd1qXpEsT9/pXgzxGNXu/qQ3fImEjYKpk2WD9xOSyJu23ckNIR
kIXnZpCfUs0N4044vcdkQGcB1/A8iBme/SURpzeWVCR1XT0zvbGkNjY0gm5KM7HK
RcXmovG/OUMfK1iT6m395LhGqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFLrbKEE
rYNV3lw0X+eYqr9O0YMOMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1
QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQzNTcvQjg0QjEwRUM0NUE4MTFFQzhCMTQwNTU4QzRGOUFFMDIvMzQ2QTJCNDA0
NUFFMTFFQ0I4NTc4OTBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ0lUMA0GCSqGSIb3DQEBCwUAA4IBAQASY/xkt2Gv97FrxR5EUtEz
eIeZd+1D+Up9X97GotxT+eUyWppF14gVR1hK/CKlkm7cUxNLC09rJ7zVh0QOvc8K
7IjcLm8knKz4UaB7SIRNxoCqeX238OwUYp112jYE5EgjrLQkgaJSKInwuc/sXIML
MdZ446/06mGRlfQHeIbP7+nYmCQ363VIMQ7LJaA1vSVE3YqdFr8wmbbu8P694TKn
pE4qJ5PNVI3Oh5WeffNyEEvF7fQH15qmPNuAQeocjO4smy74i3A2IE0MpLjaIWod
Ct/VX2T/SVqX1tm88v4HA075LJVi1CrFPdgzleTfjbIF/2UFKD7aOPY54Ve+Ok9v
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:48 2026 by rpki-client