Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
File:                     6D49440845BC11EAB591BD20C4F9AE02.roa (raw, json)
Hash identifier:          zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=
Subject key identifier:   6B:52:20:CA:FB:D3:A9:AE:5A:1E:72:14:7D:45:8B:8D:3E:D1:8D:88
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0B90
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:45:07 +0000
ROA not before:           Wed 14 Jan 2026 19:15:45 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137252
IP address blocks:        103.106.32.0/22 maxlen: 24
                          2402:3940::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2960 (0xb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Jan 14 19:15:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a450f3-5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:26:9e:83:b6:cd:ab:3d:29:23:1d:73:b7:
                    fe:17:4c:df:ca:64:9d:fc:bd:1f:6d:59:85:90:93:
                    7c:0e:f8:f0:49:1b:90:d8:45:60:18:17:8c:1f:31:
                    41:b4:ea:74:35:80:28:7f:68:a9:92:b2:bf:69:53:
                    aa:45:3e:1d:78:61:de:6d:01:fe:a0:3e:15:81:1f:
                    6e:de:19:2c:45:8d:d9:51:18:94:15:03:90:cb:04:
                    ef:fe:9e:9a:31:8e:06:8d:7b:09:48:79:3e:6b:7e:
                    59:21:7a:f3:33:50:8c:c0:b8:cb:f1:15:da:fc:a3:
                    ff:4f:91:93:0e:9f:84:23:4e:53:72:6b:68:83:da:
                    eb:a7:d4:8f:e6:7c:09:87:85:33:d3:c4:84:eb:1d:
                    00:b7:87:bf:de:cf:77:b2:08:8e:9a:2a:84:e9:b0:
                    4b:79:8f:86:fe:98:7f:e4:58:c1:46:2e:f2:0d:bd:
                    83:13:ec:1f:ca:ea:14:72:92:5b:85:fc:5a:58:75:
                    05:47:ea:09:3c:48:20:9b:bf:f1:df:f5:b2:e9:e8:
                    72:5a:a3:06:6e:bf:8c:e1:51:95:59:10:c1:9e:eb:
                    85:0d:23:5f:d3:96:fa:47:82:0e:06:3d:e3:98:12:
                    b3:4b:dd:8b:ae:6a:7e:07:1c:af:fb:8e:f9:a5:e1:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:20:CA:FB:D3:A9:AE:5A:1E:72:14:7D:45:8B:8D:3E:D1:8D:88
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.32.0/22
                IPv6:
                  2402:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:af:d3:ab:03:22:f8:fd:1f:15:57:03:b1:3b:c9:f0:16:
         5c:a8:1f:02:96:70:50:aa:38:89:6f:46:e8:b0:a4:32:63:9b:
         59:c5:d1:1c:de:00:c1:67:64:05:05:8b:96:2e:0b:20:e7:68:
         79:a6:3e:2c:d6:f1:8c:72:df:51:9d:f6:91:72:7c:29:bc:7c:
         1f:e1:05:78:cf:a4:ee:7c:bc:20:7b:eb:f9:ea:b7:d0:d8:c6:
         1e:82:27:f7:8d:ea:41:d0:92:42:1c:01:4f:5d:55:b3:30:a6:
         d5:b3:c6:10:8b:77:f8:54:d1:26:81:a1:0c:e0:2d:ef:07:a9:
         6f:b8:9d:42:10:f2:49:38:50:f5:1a:dc:eb:6b:a0:3e:ff:83:
         d4:fb:10:af:bd:66:b9:c4:ed:da:f2:c4:04:a9:40:7e:ed:0b:
         7a:8b:b2:51:c7:bb:16:c7:2a:b0:2e:5f:be:5c:43:98:43:47:
         42:8c:84:71:50:05:cc:92:3a:41:84:b0:10:ba:c4:a5:46:e8:
         73:e3:42:3b:ca:16:00:16:ea:ab:21:ea:20:b9:e2:b1:02:b9:
         43:3d:4f:9c:34:8b:55:e3:37:71:16:c7:60:68:72:e6:03:2a:
         40:41:72:dd:20:07:bb:8d:bf:a9:36:a7:44:96:e3:dc:1a:d3:
         f2:ce:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:51 2026 by rpki-client