Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa
File:                     F7ACE748AD3C11EA95DFF369C4F9AE02.roa (raw, json)
Hash identifier:          GRwg8JZTbKC89rWvXTv/6n/kqtdBd5A/8LhPMwprq/E=
Subject key identifier:   E6:7C:36:51:B2:B8:4C:1B:F1:CD:9C:36:50:38:99:7F:9E:FF:BB:82
Certificate issuer:       /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial:       1208
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:36:31 +0000
ROA not before:           Mon 06 Jan 2025 17:45:31 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     24373
IP address blocks:        103.127.248.0/22 maxlen: 24
                          2404:2b40::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4616 (0x1208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
        Validity
            Not Before: Jan  6 17:45:31 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a44eef-4586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:73:95:2f:42:08:ff:fc:cd:46:e0:b4:98:
                    0b:0d:67:73:58:38:6b:12:f9:a5:11:0b:55:69:3b:
                    82:ec:4b:fa:4f:e8:36:59:f7:4a:fa:c8:92:51:3a:
                    35:be:ee:10:71:9e:43:92:21:08:95:22:fe:d7:01:
                    c0:e0:c1:d4:a1:31:b7:94:8e:d3:65:d4:c8:90:f4:
                    79:15:da:cb:9b:ca:57:bd:c9:ad:3d:bd:f7:70:b6:
                    e4:07:53:d6:cd:ca:ae:5e:14:69:9e:ec:69:58:1d:
                    eb:88:82:74:66:34:bf:78:ae:4d:75:05:cd:37:d4:
                    dc:71:6a:e2:6b:8b:68:85:2b:4f:7f:91:1b:70:05:
                    05:b9:ab:b9:97:99:1c:6e:42:21:b2:3e:ee:8e:4d:
                    3e:c4:6e:ad:5f:4b:ab:8d:97:46:ec:c5:31:50:8b:
                    c4:ed:b7:e8:c5:58:b8:f4:0f:4a:f8:27:57:b2:92:
                    61:27:2b:27:b9:8e:0e:f5:3b:bb:0a:62:90:b7:03:
                    7a:73:2e:57:ca:e3:7a:cc:18:6e:19:28:66:84:3a:
                    5f:ea:6d:bb:46:db:76:c5:87:d7:6c:bd:fe:58:51:
                    b4:8f:6f:c1:aa:c9:0b:ae:50:26:94:68:59:5a:2f:
                    58:b3:df:69:fd:d5:3a:31:95:f4:87:fd:18:3c:ff:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:36:51:B2:B8:4C:1B:F1:CD:9C:36:50:38:99:7F:9E:FF:BB:82
            X509v3 Authority Key Identifier:
                keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.248.0/22
                IPv6:
                  2404:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:ed:18:61:77:0c:cd:31:38:6c:01:c1:31:67:19:1e:60:
         77:1f:58:b9:7a:89:df:44:f6:de:ad:32:b5:da:a2:52:60:75:
         6c:96:c8:86:19:aa:64:cf:e4:e6:7b:d0:e3:e4:59:6a:17:e8:
         fd:3b:a7:03:00:3b:96:74:8c:29:88:ba:ea:b8:2e:df:f9:5f:
         a4:de:63:5a:b2:20:3d:41:2b:18:01:7d:5a:b7:a4:27:f6:ad:
         55:58:2a:16:57:5e:7a:66:87:e8:1f:ee:ee:2c:aa:00:76:49:
         7d:71:32:fc:62:48:31:af:30:7d:52:02:8e:36:b7:48:6c:55:
         ef:f6:85:ef:3c:f8:fd:e0:d2:45:de:e7:a4:93:df:d3:ea:d6:
         20:a0:ba:38:75:53:00:c5:20:cd:95:b2:7d:37:f8:c8:ec:e1:
         ef:82:60:d5:70:be:5c:3f:49:ff:18:31:b5:cd:9b:4e:e2:fb:
         ad:9c:53:1c:90:7f:11:b2:63:34:05:39:89:a1:2d:0d:8e:ed:
         3f:33:42:43:0f:38:2c:43:f2:d7:55:16:d6:03:be:be:bc:60:
         55:ae:fc:76:b6:be:bc:ae:cb:e7:bd:70:22:3c:de:9c:01:3a:
         09:85:c4:a5:7c:ab:e6:09:a4:3a:0b:0b:68:76:a4:a5:b5:21:
         6a:28:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:30 2026 by rpki-client