Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/E683FA78277E11EE9D54C13AC4F9AE02.roa
File:                     E683FA78277E11EE9D54C13AC4F9AE02.roa (raw, json)
Hash identifier:          Q69Jd2CKv3N0hKhfT8WmhRK6BPn1TZKEbmyBCHn0IFQ=
Subject key identifier:   52:16:6C:AC:02:A1:26:C6:03:27:48:43:E3:19:F1:1B:2E:66:A3:24
Certificate issuer:       /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37
Certificate serial:       0D1A
Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/E683FA78277E11EE9D54C13AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:39:21 +0000
ROA not before:           Thu 20 Mar 2025 18:27:47 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38026
IP address blocks:        103.110.57.0/24 maxlen: 24
                          103.110.58.0/24 maxlen: 24
                          103.110.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37
        Validity
            Not Before: Mar 20 18:27:47 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42569-2168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1e:23:e6:97:f6:bf:7b:b2:b8:e2:95:ac:9e:
                    5e:72:91:cf:f8:68:84:71:8b:f1:a2:69:fd:de:6a:
                    9b:53:b0:bf:ea:f0:5d:27:e4:51:43:b9:0d:e4:f9:
                    5e:1e:ae:70:62:d0:ff:1b:7d:64:e6:2c:ef:74:21:
                    ff:32:c9:8f:81:bc:39:f4:c5:b9:e2:07:cc:35:48:
                    02:4c:79:c3:f3:16:9c:a4:d3:f6:70:36:99:23:a2:
                    95:3a:1d:da:e0:3a:be:78:44:c7:4d:59:e5:c5:5b:
                    72:ed:75:ca:7e:40:01:22:20:c0:35:57:ef:f4:e3:
                    bf:ae:1e:88:9a:c8:0d:02:0e:41:91:f5:5f:b2:7a:
                    26:c5:b3:5a:33:0f:de:37:21:c1:39:79:a9:b9:00:
                    e5:4f:b8:dd:e4:38:0e:f2:62:7f:b3:80:11:cd:ae:
                    f7:35:00:24:82:bf:f3:06:df:8a:ae:22:29:dc:2d:
                    e8:97:d8:e6:a6:5c:b6:7f:aa:96:40:b8:37:96:3f:
                    f1:29:b6:84:4a:75:2b:30:7a:c3:ea:a7:e2:41:8d:
                    c6:8a:90:28:4d:5e:b8:35:0a:e0:ff:e3:a7:56:42:
                    41:3a:67:c6:75:4f:db:0b:4f:72:85:bb:54:79:05:
                    e1:43:a7:d1:ce:2b:37:5a:46:1f:c6:b2:b8:7d:74:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:6C:AC:02:A1:26:C6:03:27:48:43:E3:19:F1:1B:2E:66:A3:24
            X509v3 Authority Key Identifier:
                keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/E683FA78277E11EE9D54C13AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.57.0-103.110.59.255

    Signature Algorithm: sha256WithRSAEncryption
         15:61:45:a6:e3:59:df:29:54:a2:6c:3d:7a:4a:78:99:72:08:
         0f:a9:96:cc:ca:cf:bf:60:65:5c:83:a5:1f:3f:c7:6f:82:e6:
         2b:0c:3c:ec:69:d4:b6:a9:a6:5b:2b:4b:0d:a1:bb:52:37:5b:
         2f:39:89:00:fe:6f:f0:65:3a:39:ac:b3:44:46:e1:23:23:42:
         dd:bb:8b:c9:8d:0f:f3:d9:92:5d:34:82:dd:d6:ca:ea:2e:3e:
         16:f3:fe:67:3c:e4:55:95:9f:d0:a0:45:aa:57:c8:78:8b:2c:
         d3:29:ee:ce:43:82:55:71:10:d4:bd:40:d1:e8:d0:07:b5:6c:
         35:53:09:42:ea:c8:33:52:fe:78:49:0b:62:42:5b:0f:a1:77:
         0c:b8:4f:9b:be:57:d0:9c:1a:e1:0a:f8:73:fb:96:86:4b:74:
         f2:c6:a7:21:88:95:4e:f4:ef:bb:e8:7e:fe:42:fc:1d:a5:b5:
         a6:2b:34:32:93:cf:e9:5e:94:e3:7f:a5:1b:22:8d:d5:d7:18:
         a3:32:71:6c:5d:6f:22:bb:31:cd:2a:e7:d7:db:77:d2:cc:d0:
         02:82:5b:50:22:bd:77:61:ad:4d:8c:24:7d:4b:f4:8a:1c:b9:
         51:cf:5e:94:21:84:25:3e:ef:52:06:48:80:da:bf:c6:95:51:
         7f:4d:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:48 2026 by rpki-client