Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa
File:                     B35788BC2E6111E7B9FA6971C4F9AE02.roa (raw, json)
Hash identifier:          1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=
Subject key identifier:   E6:90:0F:C8:0D:28:E0:78:30:AE:2B:C8:E3:C8:4C:3A:AF:2F:74:8D
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BBF
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:29 +0000
ROA not before:           Tue 10 Feb 2026 16:13:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136151
IP address blocks:        103.81.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7103 (0x1bbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Feb 10 16:13:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4728d-27eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:fe:91:44:8e:c0:18:f9:ad:69:de:9c:18:
                    9c:5c:3c:9a:56:52:e6:1e:e0:3f:bf:1b:13:99:74:
                    d6:d9:0f:7b:4c:1c:e1:ca:1a:99:69:ee:a0:92:0f:
                    a7:ce:21:b1:ba:b8:0a:98:71:13:37:41:d4:5b:c7:
                    88:a6:27:19:0d:9c:21:3d:bc:69:eb:d9:ed:b7:8c:
                    56:fd:a3:1f:55:50:ae:19:20:a5:bf:40:7e:b3:fb:
                    90:5a:ce:46:60:15:37:ee:91:84:8d:53:f8:a9:18:
                    0d:31:1d:aa:dc:a2:b1:99:7d:58:05:09:56:58:34:
                    74:71:bd:ae:91:76:44:73:f3:26:12:19:24:c4:54:
                    47:84:11:22:a1:78:4f:a1:1b:45:32:71:c0:42:7f:
                    71:55:b9:50:27:11:c1:b1:93:4c:f4:b9:af:fd:07:
                    f2:c9:39:2c:81:d7:b6:e3:79:3e:11:09:5e:b6:1a:
                    1e:44:16:71:ff:e9:12:7d:94:ae:80:db:ad:fe:71:
                    03:56:7c:3a:4f:87:78:c9:21:89:bf:e7:55:d9:d7:
                    6b:6d:bd:ec:b3:68:b8:c9:33:66:8a:b6:60:18:11:
                    b6:4a:bc:54:66:51:3f:6a:db:a4:5f:1b:e9:d6:ef:
                    f6:70:fd:39:76:39:67:a6:94:7c:00:0d:fe:3c:11:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:0F:C8:0D:28:E0:78:30:AE:2B:C8:E3:C8:4C:3A:AF:2F:74:8D
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:ba:58:4d:d0:5d:7d:56:ba:cd:a1:fd:7e:4a:f4:1a:12:
         60:79:7c:7a:0e:cb:b9:51:2c:6b:c4:6a:9b:cf:5f:88:bf:b7:
         9e:7d:73:f5:75:0c:1d:5f:78:54:6e:d9:15:9c:d9:41:38:8a:
         76:63:cc:90:58:86:53:a4:2d:6c:0e:74:47:c9:f1:25:51:10:
         79:34:64:bf:9c:1d:65:77:c5:c0:08:c4:1d:1a:b6:ba:46:4b:
         e0:50:c3:62:db:5e:58:ba:d0:b7:98:e1:b7:e7:e5:73:db:a2:
         d8:bc:e1:55:70:03:18:24:46:39:98:b0:be:2c:18:52:b9:19:
         8f:c9:66:c3:18:8f:d4:34:e9:5a:0c:b0:ff:0d:4d:8f:d0:55:
         39:7d:3c:a4:e4:41:3f:39:be:33:84:6e:23:9e:fb:35:b8:24:
         30:f9:1a:fb:aa:dd:6a:57:d1:27:d7:34:20:f8:28:c7:79:66:
         81:63:72:20:39:06:fb:03:d9:77:4b:bc:ab:9d:da:b3:5c:db:
         ed:7d:5f:ea:4a:3b:2d:81:a6:47:4b:6b:e0:5c:3a:4d:39:0a:
         a1:58:7b:e6:af:96:67:46:93:b1:58:5e:9d:c4:c2:a0:56:b6:
         23:87:a3:b8:62:80:0a:44:40:46:0a:c2:9b:ad:60:a9:6a:b6:
         89:b6:4a:02
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICG78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2
ODYxNjc4RkQwHhcNMjYwMjEwMTYxMzUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzI4ZC0yN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4/+kUSOwBj5rWnenBicXDyaVlLmHuA/vxsTmXTW2Q97TBzhyhqZae6gkg+n
ziGxurgKmHETN0HUW8eIpicZDZwhPbxp69ntt4xW/aMfVVCuGSClv0B+s/uQWs5G
YBU37pGEjVP4qRgNMR2q3KKxmX1YBQlWWDR0cb2ukXZEc/MmEhkkxFRHhBEioXhP
oRtFMnHAQn9xVblQJxHBsZNM9Lmv/QfyyTksgde243k+EQlethoeRBZx/+kSfZSu
gNut/nEDVnw6T4d4ySGJv+dV2ddrbb3ss2i4yTNmirZgGBG2SrxUZlE/atukXxvp
1u/2cP05djlnppR8AA3+PBGymwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOaQD8gN
KOB4MK4ryOPITDqvL3SNMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF
NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzMwODMvQTBDRjA1OUEyRTYwMTFFN0I3NDczRTcwQzRGOUFFMDIvQjM1Nzg4QkMy
RTYxMTFFN0I5RkE2OTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1HPMA0GCSqGSIb3DQEBCwUAA4IBAQA+y7pYTdBdfVa6zaH9fkr0
GhJgeXx6Dsu5USxrxGqbz1+Iv7eefXP1dQwdX3hUbtkVnNlBOIp2Y8yQWIZTpC1s
DnRHyfElURB5NGS/nB1ld8XACMQdGra6RkvgUMNi215YutC3mOG35+Vz26LYvOFV
cAMYJEY5mLC+LBhSuRmPyWbDGI/UNOlaDLD/DU2P0FU5fTyk5EE/Ob4zhG4jnvs1
uCQw+Rr7qt1qV9En1zQg+CjHeWaBY3IgOQb7A9l3S7yrndqzXNvtfV/qSjstgaZH
S2vgXDpNOQqhWHvmr5ZnRpOxWF6dxMKgVrYjh6O4YoAKREBGCsKbrWCparaJtkoC
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:10 2026 by rpki-client