Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/12331DA8098111F0B807472DC4F9AE02.roa
File:                     12331DA8098111F0B807472DC4F9AE02.roa (raw, json)
Hash identifier:          UHApmas+hTdDUlF2H9mpnUy31ic+ROSnLqaHdClEfoo=
Subject key identifier:   43:FC:CB:79:F0:B2:2B:D2:1D:B3:C8:B9:F1:02:F5:D0:3B:07:EF:AC
Certificate issuer:       /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial:       01AB
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/12331DA8098111F0B807472DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:40 +0000
ROA not before:           Mon 29 Dec 2025 03:23:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150446
IP address blocks:        103.42.62.0/24 maxlen: 24
                          103.42.63.0/24 maxlen: 24
                          2401:ede0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
                          rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
        Validity
            Not Before: Dec 29 03:23:30 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43a1c-66d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:f2:53:1a:6e:27:e3:45:91:a7:fe:90:9d:
                    01:ad:a7:dd:87:01:1a:94:43:49:94:d6:79:47:b5:
                    3d:e4:dd:4a:c1:b0:78:ba:ae:fb:9f:f8:f1:61:4d:
                    ad:84:f4:f2:e0:22:63:f9:97:ec:f6:1d:96:f1:30:
                    3f:a3:fb:6f:28:67:6a:f1:6c:37:e4:6b:cc:d9:ce:
                    c8:3a:de:84:8e:eb:5d:df:62:8d:cd:84:ad:3f:9f:
                    55:5a:29:c2:99:52:2a:20:02:af:89:bf:1a:a6:04:
                    8a:df:55:21:30:7a:49:2f:50:3b:55:05:1c:0e:40:
                    fb:76:d9:4d:1c:41:e6:d2:46:db:0d:24:27:bb:5c:
                    98:a4:e3:a0:3b:15:e0:dd:e4:67:78:d8:2d:6c:37:
                    b9:26:0a:de:a4:01:0f:2a:b9:77:dc:98:76:d4:68:
                    af:a3:37:cf:93:df:a1:5f:35:a9:af:6a:9d:84:26:
                    b6:b2:8e:e1:40:94:9d:72:de:4e:47:6b:16:1b:a5:
                    a8:df:35:28:56:2a:25:81:d6:67:3f:0f:66:af:c5:
                    13:3d:b7:e2:68:e9:a4:52:9f:07:db:49:01:f3:5d:
                    92:26:23:95:e8:b2:20:ad:69:58:5d:cd:8e:9f:63:
                    b8:45:f8:91:7f:0e:88:13:80:83:51:e6:a7:e8:3e:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:CB:79:F0:B2:2B:D2:1D:B3:C8:B9:F1:02:F5:D0:3B:07:EF:AC
            X509v3 Authority Key Identifier:
                keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/12331DA8098111F0B807472DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.62.0/23
                IPv6:
                  2401:ede0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:5c:8c:35:a9:e6:ed:95:c2:8c:a8:32:b6:9e:d4:09:98:
         b5:7a:c0:de:94:8f:ff:68:3d:56:5b:b6:31:d1:67:e2:2b:13:
         32:ee:36:05:c3:fa:48:82:65:21:93:88:e1:50:6c:4f:dc:2c:
         c9:f5:96:83:dc:61:f3:b5:92:c8:5a:1c:4e:9e:df:81:65:26:
         85:69:e9:26:fe:de:5a:b1:9a:64:2c:70:70:bb:45:47:72:d3:
         f6:44:44:10:0b:5d:b3:fd:f3:18:b5:df:26:ae:d9:06:e2:d6:
         e8:b9:ec:23:33:12:7b:db:1e:15:bf:41:b8:ed:78:17:83:9e:
         8a:c2:fa:50:01:3e:86:9c:2a:0a:41:5f:51:80:6e:b1:67:f1:
         1e:19:5b:67:31:c0:7b:c0:17:cb:67:56:9e:6e:6f:19:8a:8b:
         b0:a2:ae:ec:1c:b9:5c:14:bf:7a:f6:72:02:22:23:19:d8:5f:
         50:bb:43:3f:d2:73:70:ee:19:42:99:47:06:0d:90:cf:c6:53:
         18:b9:1a:7c:d5:62:68:dd:96:b0:47:5e:1d:05:0f:ce:7d:cb:
         99:98:a3:67:c6:3b:f9:4b:2f:2e:69:a9:f3:8e:74:e4:ec:03:
         2a:85:51:94:f4:79:1c:16:bc:76:ff:f6:02:bc:d8:50:c9:c6:
         1d:38:70:eb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx
MjYyRTM0M0IwHhcNMjUxMjI5MDMyMzMwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2ExYy02NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2SHyUxpuJ+NFkaf+kJ0BrafdhwEalENJlNZ5R7U95N1KwbB4uq77n/jxYU2t
hPTy4CJj+Zfs9h2W8TA/o/tvKGdq8Ww35GvM2c7IOt6Ejutd32KNzYStP59VWinC
mVIqIAKvib8apgSK31UhMHpJL1A7VQUcDkD7dtlNHEHm0kbbDSQnu1yYpOOgOxXg
3eRneNgtbDe5JgrepAEPKrl33Jh21GivozfPk9+hXzWpr2qdhCa2so7hQJSdct5O
R2sWG6Wo3zUoViolgdZnPw9mr8UTPbfiaOmkUp8H20kB812SJiOV6LIgrWlYXc2O
n2O4RfiRfw6IE4CDUean6D4ujwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEP8y3nw
sivSHbPIufEC9dA7B++sMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5
OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzRFNjIvNzAyQTAyOENDOTlGMTFFRUE4MTU4RTc5QzRGOUFFMDIvMTIzMzFEQTgw
OTgxMTFGMEI4MDc0NzJEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZyo+MA0EAgACMAcDBQAkAe3gMA0GCSqGSIb3DQEBCwUAA4IBAQCt
2lyMNanm7ZXCjKgytp7UCZi1esDelI//aD1WW7Yx0WfiKxMy7jYFw/pIgmUhk4jh
UGxP3CzJ9ZaD3GHztZLIWhxOnt+BZSaFaekm/t5asZpkLHBwu0VHctP2REQQC12z
/fMYtd8mrtkG4tbouewjMxJ72x4Vv0G47XgXg56KwvpQAT6GnCoKQV9RgG6xZ/Ee
GVtnMcB7wBfLZ1aebm8Ziouwoq7sHLlcFL969nICIiMZ2F9Qu0M/0nNw7hlCmUcG
DZDPxlMYuRp81WJo3ZawR14dBQ/OfcuZmKNnxjv5Sy8uaanzjnTk7AMqhVGU9Hkc
Frx2//YCvNhQycYdOHDr
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:35 2026 by rpki-client