Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa
File:                     3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (raw, json)
Hash identifier:          AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=
Subject key identifier:   4C:82:22:BC:92:BD:C0:6E:D3:50:C2:26:0A:22:CC:A2:F1:4F:08:79
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       14F5
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa
Signing time:             Sun 01 Mar 2026 15:31:22 +0000
ROA not before:           Sun 01 Feb 2026 07:18:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     32519
IP address blocks:        103.117.100.0/22 maxlen: 24
                          103.135.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5365 (0x14f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Feb  1 07:18:38 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45bca-b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:16:c6:1f:43:95:ee:f3:9c:a4:11:12:3b:
                    17:65:4a:4f:51:1b:6d:74:48:54:a1:d9:e1:2c:61:
                    b4:1c:d9:d3:90:14:32:4b:c2:a6:64:dc:c2:cd:98:
                    8f:c4:ac:60:8a:8e:24:b2:18:62:5d:e7:44:75:f2:
                    04:02:95:b2:56:2e:ec:0c:3d:72:88:61:7c:a6:04:
                    6c:23:cd:83:77:a9:c1:35:42:25:d4:b7:e8:90:e6:
                    6e:95:30:1f:12:1e:14:88:26:c7:b0:b5:4a:4f:f8:
                    66:a0:9d:2f:64:19:8f:40:66:53:13:19:07:09:41:
                    89:96:ef:84:ed:3a:3e:a0:7a:bb:36:5b:77:f9:0a:
                    21:b0:db:6d:2a:e9:38:96:7a:e9:31:c6:5a:19:0b:
                    ac:f8:08:77:e4:e2:78:2a:84:f3:e5:23:90:84:eb:
                    43:85:74:38:ff:bd:ed:c0:ce:d3:f8:7e:e1:ea:f4:
                    14:6d:fd:bd:04:06:11:c8:13:0e:89:47:1d:ac:88:
                    6e:11:e6:06:c6:45:9d:98:53:cf:7c:64:65:12:0f:
                    8d:1d:1d:a0:71:89:e2:9d:0a:de:d9:c6:ee:18:2f:
                    6e:82:d2:88:c1:ce:7a:a1:55:98:48:f4:11:2e:b8:
                    cd:e1:24:9c:c0:b3:bc:a6:98:63:b0:d0:03:39:50:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:22:BC:92:BD:C0:6E:D3:50:C2:26:0A:22:CC:A2:F1:4F:08:79
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22
                  103.135.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:55:52:a1:5b:fc:3e:38:fa:56:b5:82:e7:ac:75:9c:83:
         aa:72:ff:7f:84:1a:cd:20:32:29:56:a3:7c:c0:a4:37:f6:bb:
         b7:c6:33:89:2d:63:9b:41:6d:85:2b:52:d4:17:0a:35:88:55:
         9d:04:43:d8:a9:53:7c:f7:c1:ca:87:1c:d6:b3:71:3b:fa:d2:
         f8:59:bc:5d:98:a4:7b:7f:1b:f2:dc:0a:af:3a:be:1b:98:8d:
         c5:ff:9d:ff:83:8f:07:76:90:92:95:c6:32:06:19:68:64:35:
         c9:59:6b:2d:a3:e4:18:8f:b9:a6:b1:8e:60:4e:ca:46:ce:b2:
         e2:6c:d1:d1:46:70:2a:b0:35:a2:bc:37:52:e1:3f:f9:db:e8:
         97:d4:90:a1:16:40:96:1d:5a:83:bd:ac:d0:04:0e:38:4d:e4:
         41:08:c2:05:3a:8a:00:54:3b:80:68:01:3e:65:d7:42:cd:c4:
         d4:85:69:de:1b:13:89:17:ec:fe:da:19:c4:28:23:17:95:d1:
         7a:8e:21:36:3f:f3:40:29:54:e4:71:d5:ba:e0:ab:e6:8a:29:
         82:4a:47:63:d7:3a:50:5d:be:bf:f0:b4:b4:99:c9:c4:d5:0d:
         84:1f:0d:f3:95:08:22:53:a7:77:53:84:41:54:bf:88:e3:92:
         33:6b:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:12 2026 by rpki-client