Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
File:                     131D50EC03B511F1B33AD351023D8C67.roa (raw, json)
Hash identifier:          4DVRGZxyRZyMC2zYs9Lj4r2TkOADE/WYrSah7tqHjmA=
Subject key identifier:   3F:C0:09:3E:32:D1:8E:85:FE:4C:77:38:AE:D1:C4:C0:BA:2A:06:3D
Certificate issuer:       /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial:       12
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
Signing time:             Mon 02 Mar 2026 11:29:16 +0000
ROA not before:           Fri 06 Feb 2026 23:39:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136268
IP address blocks:        103.85.216.0/24 maxlen: 24
                          103.85.217.0/24 maxlen: 24
                          103.85.218.0/24 maxlen: 24
                          103.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
                          rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
        Validity
            Not Before: Feb  6 23:39:27 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5748b-de64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:4e:09:58:c3:2b:a3:c7:91:17:c5:3c:56:
                    e3:49:9a:00:e6:b6:87:c7:70:f5:57:49:3d:8b:3d:
                    a2:02:38:de:5b:17:6f:98:96:86:cc:c3:4d:f5:5e:
                    b7:b2:b8:69:34:c0:ba:ab:f5:b8:85:93:e0:c6:06:
                    9e:c4:65:d7:74:dd:4c:25:5c:a6:b8:4a:d7:cc:17:
                    84:34:86:17:d0:01:02:55:8c:f3:7c:33:fc:1d:87:
                    7e:df:48:e3:aa:8f:61:54:84:85:cd:db:ed:9d:78:
                    b7:27:12:7f:95:de:bf:e2:8e:d0:45:05:69:14:3c:
                    87:7f:a0:73:07:c0:54:c9:a5:eb:57:db:b5:9c:dc:
                    7c:f6:5f:a4:97:61:b8:6d:da:68:29:9e:c6:23:64:
                    54:fc:21:9c:e3:ea:9c:d4:58:10:d8:f3:d2:63:1d:
                    2c:74:d5:b5:97:63:74:b9:cc:39:83:b1:bd:fa:f1:
                    72:3a:13:91:e3:23:70:b2:ef:07:3a:01:27:1c:26:
                    55:b5:3a:23:1e:c9:e0:c3:db:a2:07:54:5d:d3:1b:
                    68:b7:2e:e3:d0:12:05:04:9e:83:e0:26:31:fb:18:
                    d7:d0:d8:9f:f0:a7:5c:e5:05:68:92:a2:b3:8a:3c:
                    9c:76:d8:9e:a4:76:bc:1a:f2:27:8d:34:fb:c6:53:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:09:3E:32:D1:8E:85:FE:4C:77:38:AE:D1:C4:C0:BA:2A:06:3D
            X509v3 Authority Key Identifier:
                keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:a2:38:a0:3e:f9:f4:38:d8:eb:39:09:9f:26:6b:9a:e2:
         f6:9b:11:53:5a:d4:9c:ac:a2:60:c5:25:88:fd:d0:7b:a5:63:
         5d:10:86:be:84:fe:7d:53:e3:57:4d:6e:b0:64:14:3f:0c:32:
         80:c1:d0:73:ec:b9:26:f4:24:9d:9c:0e:37:40:05:99:68:7d:
         c8:9c:21:e2:da:06:30:f2:5a:ce:cd:14:82:19:a4:79:41:96:
         ea:1b:c6:ee:a6:0d:a4:1b:c3:f6:10:b8:ed:4d:23:97:22:32:
         d5:27:0e:69:ee:88:d8:a2:5c:13:7e:d3:c0:5f:c9:c0:dc:e5:
         7b:e5:41:ca:42:28:de:26:98:4b:7d:3f:be:fb:92:ed:e5:e0:
         e2:f4:61:db:0a:ff:12:c5:c6:70:3a:cc:73:bb:90:82:80:db:
         2e:63:57:a2:55:78:2b:da:a3:bd:df:8e:6a:34:f8:1f:b2:20:
         9a:0f:81:88:9e:97:34:26:5f:ad:0b:6e:09:7c:9d:f4:5f:f6:
         be:f1:b1:19:bb:e5:3d:10:d8:6d:88:c1:96:22:df:b5:9c:41:
         b7:c1:03:9b:d5:39:42:bf:60:69:b3:48:e9:db:7c:c3:7f:d7:
         f4:d6:bf:35:c6:12:17:cc:1f:77:59:3e:35:e0:11:d4:ab:54:
         d5:c2:0d:1d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OTY5MDExMC8GA1UEBRMoNjk5RjU1NDREMDc4QTkwQUY1QUE2MDQxMkUxQUQzRjFG
QkRFNENENjAeFw0yNjAyMDYyMzM5MjdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU3NDhiLWRlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC71E4JWMMro8eRF8U8VuNJmgDmtofHcPVXST2LPaICON5bF2+YlobMw031Xrey
uGk0wLqr9biFk+DGBp7EZdd03UwlXKa4StfMF4Q0hhfQAQJVjPN8M/wdh37fSOOq
j2FUhIXN2+2deLcnEn+V3r/ijtBFBWkUPId/oHMHwFTJpetX27Wc3Hz2X6SXYbht
2mgpnsYjZFT8IZzj6pzUWBDY89JjHSx01bWXY3S5zDmDsb368XI6E5HjI3Cy7wc6
ASccJlW1OiMeyeDD26IHVF3TG2i3LuPQEgUEnoPgJjH7GNfQ2J/wp1zlBWiSorOK
PJx22J6kdrwa8ieNNPvGU87vAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUP8AJPjLR
joX+THc4rtHEwLoqBj0wHwYDVR0jBBgwFoAUaZ9VRNB4qQr1qmBBLhrT8fveTNYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NjkwL0E2Njk0QjNDMDNC
MzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFyMXFtQkJMaHJUOGZ2ZVRO
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYVo5VlJOQjRxUXIxcW1CQkxoclQ4ZnZlVE5ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTY5MC9BNjY5NEIzQzAzQjMxMUYxQkVENzkxRjI0MTNEOEM2Ny8xMzFENTBFQzAz
QjUxMUYxQjMzQUQzNTEwMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnVdgwDQYJKoZIhvcNAQELBQADggEBAFeaojigPvn0ONjrOQmfJmua
4vabEVNa1JysomDFJYj90HulY10Qhr6E/n1T41dNbrBkFD8MMoDB0HPsuSb0JJ2c
DjdABZlofcicIeLaBjDyWs7NFIIZpHlBluobxu6mDaQbw/YQuO1NI5ciMtUnDmnu
iNiiXBN+08BfycDc5XvlQcpCKN4mmEt9P777ku3l4OL0YdsK/xLFxnA6zHO7kIKA
2y5jV6JVeCvao73fjmo0+B+yIJoPgYielzQmX60Lbgl8nfRf9r7xsRm75T0Q2G2I
wZYi37WcQbfBA5vVOUK/YGmzSOnbfMN/1/TWvzXGEhfMH3dZPjXgEdSrVNXCDR0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:30 2026 by rpki-client