Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
File:                     3CED465E8E0811EE8450D961C4F9AE02.roa (raw, json)
Hash identifier:          lItS9IhoLUedBvAXuWgl/Rf34kmfafMEcysHbipPcpE=
Subject key identifier:   85:B0:EF:0C:AF:A7:34:2A:F3:CF:A3:68:32:AE:9D:E0:BB:1A:E8:C2
Certificate issuer:       /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial:       01BE
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:39:44 +0000
ROA not before:           Wed 23 Jul 2025 04:40:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149849
IP address blocks:        103.188.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
        Validity
            Not Before: Jul 23 04:40:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3ed40-01fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:3e:53:54:70:6a:32:93:7f:be:6b:75:d6:
                    5e:8f:b4:16:24:79:ff:c9:27:fc:03:c3:bf:2c:6d:
                    10:9e:77:ca:97:a3:8d:36:63:cf:54:65:22:2c:da:
                    c2:da:42:b6:f7:7b:74:bb:20:5a:b1:8b:4a:0d:e0:
                    04:0d:14:08:80:dc:e6:12:4d:84:d5:ec:a4:af:27:
                    6d:06:36:87:a4:24:e3:a4:38:4a:24:81:cf:7a:bf:
                    2f:6c:94:88:e4:cb:bf:3e:6d:a5:d7:95:a4:22:2f:
                    87:3e:ee:33:f9:32:28:96:aa:dc:92:e2:c2:4a:71:
                    b5:3a:a3:09:6c:5f:84:7e:d2:41:8d:02:46:5c:82:
                    fd:c0:cd:3d:32:76:cf:b6:62:b6:d2:9c:59:37:d6:
                    cd:0d:35:93:3a:69:52:d1:d1:12:7e:41:02:d8:8c:
                    55:10:01:89:86:ee:4b:4c:ee:b3:57:c9:71:89:52:
                    3b:29:e1:c3:07:0c:ef:cd:71:f7:45:8a:90:f5:44:
                    63:67:61:68:a8:da:f8:4b:db:f9:09:5b:8c:56:28:
                    c4:93:db:5e:74:a3:50:ec:36:16:77:4c:de:9a:fd:
                    1d:18:a4:d6:09:8f:9a:48:b2:98:4b:60:5c:26:40:
                    4d:8d:40:23:16:21:b0:25:99:03:67:32:19:a7:28:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:EF:0C:AF:A7:34:2A:F3:CF:A3:68:32:AE:9D:E0:BB:1A:E8:C2
            X509v3 Authority Key Identifier:
                keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:62:ec:40:f4:82:92:6e:19:8d:2f:f6:9a:70:41:4e:90:a9:
         1b:73:f5:aa:d5:a4:39:36:71:56:71:0e:7d:85:30:e4:72:b6:
         b3:43:11:c6:e6:8d:c1:de:67:c6:5c:41:71:a9:f8:e7:f7:5f:
         e7:9f:f3:c6:0a:35:42:0f:a5:80:59:74:92:e7:9d:3a:0c:81:
         7f:cc:ea:5c:53:67:66:9c:50:9c:0a:79:5e:6f:4e:65:49:a1:
         09:95:16:c1:3e:73:a3:02:55:2e:ea:e3:36:22:b2:12:e9:75:
         5d:54:13:3b:2f:c2:0e:ed:55:b0:08:b6:5c:62:66:f3:16:25:
         20:35:a5:91:bf:40:91:c7:c7:00:6c:af:34:9b:70:2c:f6:75:
         53:fb:00:4d:5f:b6:a5:e5:3b:fd:4a:25:3d:f4:cb:b4:a5:81:
         9d:03:38:e8:ea:61:44:3a:24:79:7d:9d:bd:12:97:e0:17:ca:
         f5:df:83:ed:5d:a1:d7:2b:36:d8:a6:9e:b0:63:1c:52:de:50:
         d4:8b:4a:1b:9c:8a:95:95:ea:32:4d:62:b8:80:be:22:aa:98:
         e2:46:68:62:b8:48:78:80:35:f8:28:32:e9:4d:af:a0:1d:cd:
         ea:55:2d:46:59:eb:ee:58:9a:39:3f:7b:12:c3:74:1b:3f:de:
         7d:86:2a:17
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz
QURBNEZFMTAwHhcNMjUwNzIzMDQ0MDM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWQ0MC0wMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugg+U1RwajKTf75rddZej7QWJHn/ySf8A8O/LG0QnnfKl6ONNmPPVGUiLNrC
2kK293t0uyBasYtKDeAEDRQIgNzmEk2E1eykrydtBjaHpCTjpDhKJIHPer8vbJSI
5Mu/Pm2l15WkIi+HPu4z+TIolqrckuLCSnG1OqMJbF+EftJBjQJGXIL9wM09MnbP
tmK20pxZN9bNDTWTOmlS0dESfkEC2IxVEAGJhu5LTO6zV8lxiVI7KeHDBwzvzXH3
RYqQ9URjZ2FoqNr4S9v5CVuMVijEk9tedKNQ7DYWd0zemv0dGKTWCY+aSLKYS2Bc
JkBNjUAjFiGwJZkDZzIZpyggnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIWw7wyv
pzQq88+jaDKuneC7GujCMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx
NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYzMDYvMTcxNzkyMEU3MTZCMTFFRUIxNjczMjc3QzRGOUFFMDIvM0NFRDQ2NUU4
RTA4MTFFRTg0NTBEOTYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7xYMA0GCSqGSIb3DQEBCwUAA4IBAQCZYuxA9IKSbhmNL/aacEFO
kKkbc/Wq1aQ5NnFWcQ59hTDkcrazQxHG5o3B3mfGXEFxqfjn91/nn/PGCjVCD6WA
WXSS5506DIF/zOpcU2dmnFCcCnleb05lSaEJlRbBPnOjAlUu6uM2IrIS6XVdVBM7
L8IO7VWwCLZcYmbzFiUgNaWRv0CRx8cAbK80m3As9nVT+wBNX7al5Tv9SiU99Mu0
pYGdAzjo6mFEOiR5fZ29EpfgF8r134PtXaHXKzbYpp6wYxxS3lDUi0obnIqVleoy
TWK4gL4iqpjiRmhiuEh4gDX4KDLpTa+gHc3qVS1GWevuWJo5P3sSw3QbP959hioX
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:06 2026 by rpki-client