Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/5026F90264B211ED88A2A380C4F9AE02.roa
File:                     5026F90264B211ED88A2A380C4F9AE02.roa (raw, json)
Hash identifier:          TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=
Subject key identifier:   DE:5B:18:7B:F6:6E:15:B7:A8:BF:ED:B0:45:6C:1C:3F:A0:11:B9:F8
Certificate issuer:       /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial:       026D
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/5026F90264B211ED88A2A380C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:57:24 +0000
ROA not before:           Sat 29 Nov 2025 00:27:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150419
IP address blocks:        103.37.62.0/23 maxlen: 23
                          2400:bfe0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
        Validity
            Not Before: Nov 29 00:27:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41b94-a464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:52:78:83:b5:75:c2:d4:f4:c2:de:4a:b7:
                    bc:6f:7e:55:73:0d:dd:3c:42:bb:3b:0f:c0:90:6e:
                    11:f4:fc:15:02:bc:fc:9d:c4:76:aa:e1:43:a3:0c:
                    5f:41:a6:2c:17:1d:11:f0:5e:82:e8:09:7b:35:71:
                    c3:4a:27:aa:7d:a8:45:ff:7d:89:62:2d:a5:b9:b5:
                    1a:85:44:3e:06:42:4b:bd:71:2a:0b:21:a5:a6:b0:
                    99:8d:1e:ad:6d:ad:67:86:3e:53:c7:13:b6:81:e3:
                    14:1b:79:66:c5:90:27:c8:ff:67:67:b3:b7:59:36:
                    ee:50:2f:81:98:a4:2c:f9:a8:66:6e:50:be:89:d4:
                    1a:b4:42:34:7c:7c:75:af:8d:99:ae:bc:70:44:67:
                    88:d7:20:93:41:5b:47:d6:71:ae:eb:62:bc:72:ec:
                    8a:47:de:c2:02:e6:08:3a:4b:62:3a:c7:6f:66:9d:
                    e9:97:2b:69:8a:17:14:d4:18:30:ab:a8:b1:69:a2:
                    88:ea:17:ba:d6:9f:c9:8c:a2:6f:4a:86:25:74:fb:
                    4a:de:19:42:ed:95:75:c0:34:a8:7a:e5:a8:c5:a3:
                    31:cf:95:8b:ba:bb:67:d8:39:99:04:09:f9:58:df:
                    77:7f:d4:d0:44:da:75:bd:a2:01:73:6f:fe:ba:35:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5B:18:7B:F6:6E:15:B7:A8:BF:ED:B0:45:6C:1C:3F:A0:11:B9:F8
            X509v3 Authority Key Identifier:
                keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/5026F90264B211ED88A2A380C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.62.0/23
                IPv6:
                  2400:bfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:d5:e2:f6:e5:a8:51:22:0c:a9:b2:33:cd:65:65:72:84:
         7c:4c:91:ea:19:9c:6e:e9:7f:9e:fe:0b:f8:35:ca:fa:ed:f4:
         ef:eb:80:38:09:24:34:da:cb:e5:61:67:e3:30:46:27:ac:d6:
         57:ca:d9:8e:ca:e0:8b:33:5d:d8:51:80:05:95:8c:6a:ac:6f:
         a9:57:de:98:35:98:8f:2b:30:00:e1:0f:48:3b:a5:a3:e1:05:
         5c:29:3a:01:11:53:23:e7:d4:06:7b:12:28:38:30:65:17:f1:
         34:8e:26:7c:4a:11:42:5e:30:ed:90:88:8c:de:7f:1e:85:f3:
         d6:48:3a:91:cd:d5:f8:fb:5a:43:4e:bf:c0:40:e0:8c:d0:cf:
         cb:0a:77:09:94:2b:5e:35:e2:a9:26:b0:f5:34:7e:2f:c8:01:
         e8:2b:d1:c5:83:96:74:11:a3:98:fd:a1:71:42:bb:d4:bb:49:
         08:a6:62:e9:6c:1e:9d:2a:16:31:b6:0c:64:c6:74:73:97:63:
         7a:c6:da:30:89:0a:e9:9c:a1:fc:23:90:7f:b6:58:95:83:b6:
         b7:83:a0:ab:2d:6c:03:8e:16:a5:99:9d:97:36:7a:88:15:64:
         d7:b9:cc:90:7b:e3:9c:eb:4c:48:2b:e8:5d:18:96:a2:fa:cd:
         2c:8d:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:54 2026 by rpki-client