Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa
File:                     35525B92845611EFB053C341C4F9AE02.roa (raw, json)
Hash identifier:          nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=
Subject key identifier:   B4:41:33:42:A0:89:9E:19:F0:BE:3C:DF:9D:C4:98:7F:64:A1:C9:9C
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       010D
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:53:57 +0000
ROA not before:           Fri 23 May 2025 06:29:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140133
IP address blocks:        103.13.72.0/24 maxlen: 24
                          103.13.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: May 23 06:29:45 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e285-9402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:f4:52:72:87:db:1b:4b:fe:aa:02:84:53:
                    5f:bd:9a:1e:9b:b1:e7:41:af:69:b2:f0:38:6a:a0:
                    3f:ed:a9:a5:0f:5d:5c:b5:f1:e5:19:e2:cd:1d:b3:
                    33:57:1b:65:65:fa:e4:28:37:13:11:0f:ff:91:aa:
                    d1:ad:f8:0a:ae:f8:8e:82:9d:02:3e:d5:77:59:fc:
                    02:48:86:87:55:3b:6d:ea:70:b3:74:69:79:80:86:
                    e4:44:ae:a7:d2:f2:95:4d:e9:f9:ab:55:20:db:f9:
                    47:08:ac:44:f3:70:40:65:b4:d5:18:e8:db:63:00:
                    8b:ee:56:90:6e:39:4b:b5:ac:21:68:66:52:95:4a:
                    8f:fb:8b:29:52:14:d4:b9:6a:61:9c:19:e4:2b:5e:
                    68:ef:22:02:f7:fb:63:ed:c6:6d:df:7c:87:67:71:
                    5a:eb:a2:6b:a1:9a:d6:ca:e4:7e:c3:3f:c6:73:9c:
                    5c:71:d3:14:fc:e5:6b:e7:ff:4c:3b:50:02:4a:92:
                    b6:17:21:cd:14:a3:ad:f5:a7:78:55:01:3e:a1:a6:
                    e5:05:36:3a:dc:0b:b4:42:07:ac:4e:94:ea:00:fc:
                    30:37:0f:5c:bc:b6:d6:ed:34:99:36:81:23:21:eb:
                    cd:6d:f1:65:46:23:c9:da:7e:c5:94:bf:cc:41:37:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:33:42:A0:89:9E:19:F0:BE:3C:DF:9D:C4:98:7F:64:A1:C9:9C
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35525B92845611EFB053C341C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:5d:7d:21:f6:01:e6:a8:6e:d2:c0:ef:08:48:a5:ec:f1:
         e7:d1:3c:b1:49:a1:23:c6:67:4e:da:03:ab:a9:d2:23:07:e3:
         4e:a2:a6:97:c1:d1:a8:ff:1a:dc:73:5c:70:3c:09:d9:63:cb:
         31:00:ea:12:a6:f8:d6:b1:03:b0:0d:25:eb:fd:6d:4d:ec:8e:
         81:77:4c:11:cb:29:ca:4f:e8:fd:7c:aa:8c:ea:71:de:83:0e:
         01:55:29:68:1f:8d:6f:12:73:ca:80:71:2c:06:a4:84:10:63:
         31:78:7c:ba:cc:6b:4d:e0:d1:7c:b1:87:9c:0a:64:ee:02:8c:
         5f:27:f6:21:b6:48:75:35:a4:93:3e:89:dc:d1:6f:c5:5b:ec:
         d4:97:dd:39:a0:97:36:51:3e:6d:c4:0d:59:1e:32:0a:48:d5:
         db:7e:aa:44:7c:89:2e:02:83:ca:60:0a:75:6b:3c:54:8c:6d:
         06:92:40:7f:32:f3:2b:d1:fe:39:8a:21:d8:5f:df:e9:8a:4e:
         1f:be:4e:eb:0a:35:b4:dc:9c:58:f1:d3:7f:27:62:9e:23:1e:
         fd:66:94:b1:f4:ac:ff:f6:52:ec:ce:da:78:80:6c:fa:6b:33:
         37:4a:83:db:d9:fb:0a:b4:c8:89:f6:5b:76:92:6a:cd:97:b4:
         e7:c9:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:22 2026 by rpki-client