Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa
File:                     56F161A6E4E911EEBC24E249C4F9AE02.roa (raw, json)
Hash identifier:          z/b7i8bugbJfMnPzMbcPCKt6lu9pPtbu5hUl0vugU0w=
Subject key identifier:   02:7E:F9:B5:3D:B5:19:01:E0:8F:BF:AD:08:5D:ED:BE:87:4C:3C:00
Certificate issuer:       /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial:       1445
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:15:09 +0000
ROA not before:           Tue 10 Feb 2026 17:14:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     10204
IP address blocks:        103.229.32.0/22 maxlen: 24
                          203.115.192.0/18 maxlen: 18
                          203.115.192.0/19 maxlen: 24
                          203.115.224.0/19 maxlen: 23
                          203.115.224.0/20 maxlen: 24
                          203.115.240.0/23 maxlen: 24
                          203.115.242.0/24 maxlen: 24
                          203.115.244.0/22 maxlen: 24
                          203.115.248.0/21 maxlen: 24
                          2001:c18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5189 (0x1445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
        Validity
            Not Before: Feb 10 17:14:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4822d-5b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:56:b0:65:80:ba:e6:58:e3:aa:05:b0:c0:
                    34:b8:fc:10:3d:34:af:eb:0a:28:b1:4e:2b:29:9a:
                    39:14:92:cb:94:33:5a:08:d5:92:86:e3:6c:77:a4:
                    93:50:7f:72:09:24:1f:72:4e:97:91:1e:cb:51:9c:
                    42:5b:18:5e:c0:f0:4c:eb:d5:c0:3e:26:de:d5:e2:
                    36:7d:6d:9d:ef:a6:07:38:b5:cd:42:e2:d6:3a:93:
                    21:90:26:26:71:09:a8:9a:8c:f5:3e:88:ff:d3:66:
                    d3:b4:84:e7:73:f9:9a:0e:78:43:13:66:96:95:51:
                    63:6f:e7:09:b5:47:f4:9d:fa:eb:0c:82:2d:8d:d4:
                    0b:2e:38:06:e4:2e:09:0a:db:1d:93:7e:c5:f8:9f:
                    1c:05:8d:ea:fd:77:b4:71:48:60:e7:6f:55:31:58:
                    fc:52:45:9a:29:6c:7c:14:82:f0:33:f7:16:46:a5:
                    3b:c0:13:f6:1e:29:b0:a7:8c:41:d6:47:8f:b1:02:
                    6c:fb:bd:65:da:c7:05:54:d0:a5:55:48:06:b9:ec:
                    0f:33:33:f9:a2:c5:aa:93:a7:5e:14:51:8b:e2:82:
                    c2:23:c8:c2:bc:3e:47:44:5c:d9:41:f0:4a:5d:e2:
                    e9:ad:ed:ce:96:49:0d:5c:4a:5d:86:92:5d:4f:c4:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7E:F9:B5:3D:B5:19:01:E0:8F:BF:AD:08:5D:ED:BE:87:4C:3C:00
            X509v3 Authority Key Identifier:
                keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.32.0/22
                  203.115.192.0/18
                IPv6:
                  2001:c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:8e:92:9e:e9:bb:00:c9:67:a9:19:eb:c7:95:e9:97:d5:
         d4:82:b1:46:22:66:82:db:dd:81:42:6c:f1:fc:f9:df:59:70:
         cf:98:ba:90:23:20:c7:57:16:cd:8e:b0:50:31:80:cf:75:0e:
         a3:66:fc:e4:92:bc:44:22:fb:5d:21:ee:c4:5f:70:4d:98:d9:
         f6:bd:18:a8:20:a4:64:6c:19:fc:1d:21:36:fb:e2:24:20:92:
         d5:94:ea:3c:8d:1a:76:1a:dc:17:8a:19:1d:fe:83:c4:37:b4:
         c5:85:8c:fb:73:15:8e:ac:55:8f:76:33:cc:67:c5:c5:c3:00:
         e4:c1:6f:ad:87:89:bc:52:38:0f:dd:0c:e9:73:0f:08:07:56:
         81:e4:c1:cc:fc:d8:14:a4:ba:18:ac:0e:b1:8c:83:b6:01:c6:
         af:dd:bb:3e:74:41:42:16:9e:41:5f:a9:ac:89:20:0c:0d:c0:
         4d:87:48:0e:3a:d4:b9:d6:8c:94:01:a4:e4:ed:1b:bd:5d:a8:
         e4:69:4a:d2:d8:78:23:7c:06:d5:2f:b3:a9:01:f7:c2:99:61:
         50:42:19:b7:14:d0:84:ba:93:77:27:70:b9:ab:f9:fa:df:46:
         a4:69:f8:04:10:69:db:52:78:c9:4a:0a:92:2e:41:f5:4c:f2:
         4d:14:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:31 2026 by rpki-client