Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa
File:                     3728DA229A8611EFA824F73BC4F9AE02.roa (raw, json)
Hash identifier:          WAW2CdRHZenQ2VR6CRuIZWRm9VyTgjzkK5cSEcBqoHI=
Subject key identifier:   F4:63:22:7E:C3:23:EB:40:4F:5A:44:1C:C9:4B:E8:12:32:9B:CB:25
Certificate issuer:       /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial:       02B2
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:39 +0000
ROA not before:           Sat 17 May 2025 02:19:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139041
IP address blocks:        103.138.226.0/24 maxlen: 24
                          103.138.227.0/24 maxlen: 24
                          2401:1c20::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
        Validity
            Not Before: May 17 02:19:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e9b7-714d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:de:d3:f9:b8:c9:aa:df:56:16:73:8e:fb:
                    c8:99:a3:61:6a:c8:bb:2a:ec:ff:92:93:d6:ac:d5:
                    94:f3:77:5b:ca:fd:a5:fe:63:c4:89:5a:44:81:12:
                    75:48:1d:30:b1:8a:eb:bb:48:f3:bb:c5:26:70:26:
                    1c:9a:44:86:52:1f:ea:c1:30:68:d2:6d:83:67:4b:
                    1d:4d:2d:ca:e0:14:9c:d6:e9:b6:32:1a:da:25:f8:
                    83:ae:90:b1:66:fc:c0:a3:01:2d:93:19:6c:ac:5b:
                    c1:00:67:ae:6b:6f:34:8c:ef:c6:99:19:c7:78:ad:
                    91:10:dd:fd:99:f6:fd:55:df:9b:26:65:fa:f6:9f:
                    4e:91:e2:8f:0d:e7:16:31:70:eb:4f:fc:af:eb:1e:
                    13:36:0e:c0:75:79:c0:b4:a8:d0:99:43:10:77:7e:
                    04:4a:93:69:2f:db:3c:dc:10:6f:e7:f8:9f:0c:b8:
                    7a:aa:b2:59:88:c6:44:fc:be:5a:b9:4a:7b:7c:95:
                    38:1f:fe:71:3e:5b:c8:dc:c8:20:63:51:ed:35:81:
                    30:e0:f8:11:65:e8:34:f2:25:2c:bb:a3:94:a2:39:
                    97:47:c2:53:a8:0b:f2:4c:35:a7:bf:14:29:93:e4:
                    b7:52:4f:87:73:14:a2:97:ac:b6:4e:bb:ef:5f:54:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:22:7E:C3:23:EB:40:4F:5A:44:1C:C9:4B:E8:12:32:9B:CB:25
            X509v3 Authority Key Identifier:
                keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/3728DA229A8611EFA824F73BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.226.0/23
                IPv6:
                  2401:1c20::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:ac:4d:6c:c6:11:83:3f:54:66:e5:fd:f8:c6:aa:68:cc:
         d7:dd:fa:b2:48:86:d7:d3:2a:0f:82:d8:fd:31:cf:50:de:4c:
         5c:08:f7:8d:db:25:93:0e:37:0e:f2:47:09:b3:af:15:f1:7f:
         50:6d:5b:c1:c2:6a:30:c2:4d:ab:67:6e:3d:b0:8d:13:28:d5:
         3d:52:9d:48:87:73:6b:ab:a5:01:44:d2:e5:d1:e0:3e:cd:5c:
         be:dd:05:03:77:b3:b0:ab:24:6e:1b:f9:c7:42:12:5b:00:3a:
         98:81:85:68:7d:6c:e8:5e:43:21:4a:e1:e0:d2:74:d2:34:ae:
         92:78:7f:eb:9e:cb:82:19:31:01:63:e2:4f:45:f6:3b:ea:61:
         88:66:51:5d:09:40:44:6d:67:95:47:d0:11:b7:9a:a3:82:ec:
         3d:7b:20:e9:35:3e:7d:86:06:01:65:36:e6:ce:8f:be:54:a4:
         a7:82:c1:f2:77:4c:52:c1:ec:a6:92:1f:9b:ea:ca:74:64:a7:
         22:3b:11:c1:7b:bd:bb:bb:0c:41:9e:b9:16:db:c5:2a:7c:bf:
         22:70:20:87:87:a9:c2:98:5c:64:d1:96:24:c6:be:bb:74:73:
         c8:98:ca:71:7a:24:ea:5d:1f:57:4f:06:ce:27:1a:5d:13:52:
         a2:e5:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:22 2026 by rpki-client