Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa
File:                     059432729E6A11EEB0983523C4F9AE02.roa (raw, json)
Hash identifier:          0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=
Subject key identifier:   21:89:54:20:8C:99:E1:88:52:99:E5:30:C2:16:43:6C:DF:95:C3:CC
Certificate issuer:       /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial:       0C3C
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:56:19 +0000
ROA not before:           Sun 28 Dec 2025 19:15:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64063
IP address blocks:        103.200.92.0/22 maxlen: 24
                          2407:3380::/36 maxlen: 36
                          2407:3380:1000::/36 maxlen: 36
                          2407:3380:2000::/36 maxlen: 36
                          2407:3380:3000::/36 maxlen: 36
                          2407:3380:4000::/36 maxlen: 36
                          2407:3380:5000::/36 maxlen: 36
                          2407:3380:6000::/36 maxlen: 36
                          2407:3380:7000::/36 maxlen: 36
                          2407:3380:8000::/36 maxlen: 36
                          2407:3380:9000::/36 maxlen: 36
                          2407:3380:a000::/36 maxlen: 36
                          2407:3380:b000::/36 maxlen: 36
                          2407:3380:c000::/36 maxlen: 36
                          2407:3380:d000::/36 maxlen: 36
                          2407:3380:e000::/36 maxlen: 36
                          2407:3380:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
                          rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3132 (0xc3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
        Validity
            Not Before: Dec 28 19:15:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44583-14d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:50:d3:67:3c:98:cc:ec:9a:69:c3:2c:6b:
                    c0:aa:1c:f1:f0:0c:cc:df:17:63:12:b7:6a:89:13:
                    c1:45:20:31:7e:92:9e:2b:c8:92:b3:08:3b:35:d7:
                    4c:13:2b:fd:b3:b4:5c:29:ec:99:10:84:df:3b:3e:
                    17:75:50:7a:81:49:c2:6a:17:e2:1d:ee:30:b5:0c:
                    46:bc:f2:06:54:31:32:94:9a:c1:81:7f:3b:f0:ee:
                    3a:e4:d9:c4:20:c4:ae:84:69:d5:c8:c8:ba:e4:91:
                    41:79:c4:e9:b9:e4:83:31:0d:94:17:50:75:c1:45:
                    31:09:e9:28:96:3b:10:4c:db:07:9c:ee:fb:90:3e:
                    d6:dd:0d:fa:dd:3f:ff:bb:31:7c:77:57:7c:43:99:
                    2e:e8:cb:60:e8:3e:02:46:9f:1e:d5:07:b5:2c:78:
                    b7:cf:b8:10:60:7d:5a:1c:46:39:ca:ad:c7:97:40:
                    cf:0e:7b:6c:ab:a1:0b:e4:47:05:ca:c1:be:b7:1c:
                    09:0c:59:ad:93:b7:4a:ff:59:b1:17:d8:a6:70:83:
                    98:3c:9d:10:47:0d:86:a3:d3:21:19:04:14:36:d4:
                    75:06:d8:41:8d:d9:8e:cb:94:5c:d8:f1:93:c4:d2:
                    44:56:e9:8c:22:11:72:7e:52:f7:63:73:6c:a9:34:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:89:54:20:8C:99:E1:88:52:99:E5:30:C2:16:43:6C:DF:95:C3:CC
            X509v3 Authority Key Identifier:
                keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/059432729E6A11EEB0983523C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.92.0/22
                IPv6:
                  2407:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:85:9f:64:62:c7:92:ad:dc:81:9f:ee:ee:cb:c0:88:86:9c:
         15:57:bb:91:a2:bb:2c:4a:9e:82:70:30:47:81:d8:bf:43:79:
         b5:31:82:ad:c0:fb:6c:e4:d8:0a:71:e7:9a:b8:6b:43:7c:01:
         26:16:d6:7c:6f:7e:ab:e5:cb:37:8a:be:4d:a8:a5:08:94:58:
         63:f8:7e:3f:8b:67:9b:dc:6f:ce:a7:66:73:50:60:85:c4:c8:
         64:b2:33:86:ae:87:97:db:64:37:16:8d:f8:fa:52:bf:93:ea:
         87:8f:32:49:15:37:13:52:8d:c0:47:94:4d:90:15:09:1b:c9:
         0f:c1:94:73:0f:3d:59:a0:fe:35:38:c0:64:78:26:94:ba:b2:
         fe:7d:01:9f:fc:95:33:6d:91:a2:0c:16:58:be:63:f0:ff:19:
         7f:aa:11:eb:95:19:7a:f0:5f:7f:eb:e6:6d:bb:1b:f7:1c:bd:
         7e:63:dc:e8:58:ab:97:11:05:b2:d5:37:37:84:28:8e:07:d1:
         ec:50:e3:b8:39:3c:1f:76:fa:58:fc:d1:3f:65:5f:bc:00:6b:
         e4:15:01:01:4f:c7:70:70:e8:df:4d:04:2c:3e:e6:2e:34:c4:
         27:b9:81:df:30:ad:fe:83:91:70:4b:e3:1e:89:ef:61:0e:09:
         65:e2:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:46 2026 by rpki-client