Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa
File:                     E983DB547CB711F0AC8F9D6EC4F9AE02.roa (raw, json)
Hash identifier:          Awm4uip9Ffjb+qp0f6kJe6UxE7s+bzDgwOH35kP6xkY=
Subject key identifier:   45:3B:0B:85:42:14:65:06:C1:24:F2:B5:59:5F:EF:2B:3B:E2:59:A5
Certificate issuer:       /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial:       64
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:27:56 +0000
ROA not before:           Tue 19 Aug 2025 04:49:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58634
IP address blocks:        103.2.192.0/24 maxlen: 24
                          103.2.193.0/24 maxlen: 24
                          103.2.194.0/24 maxlen: 24
                          103.2.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
                          rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
        Validity
            Not Before: Aug 19 04:49:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3dc6c-bf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:8e:f1:4a:8e:29:c5:4b:c3:1b:6c:f5:3b:
                    5b:0f:5e:88:b0:d4:9e:c7:1b:b7:93:5e:8d:51:ab:
                    a1:f7:ae:84:c7:d2:27:db:69:8c:f7:57:dc:12:0b:
                    bc:cb:4d:d3:0a:95:0f:83:7a:15:de:42:1e:c7:ec:
                    c2:73:74:35:77:23:6d:44:78:7b:6c:bf:a6:69:2e:
                    4e:87:4a:20:56:18:d8:55:eb:5f:87:73:51:bd:54:
                    0f:2c:46:75:16:0b:69:52:be:9e:7d:29:8d:a7:eb:
                    e4:52:3e:c3:5e:bb:0d:64:ac:a0:19:7c:35:b3:ba:
                    7d:3f:e7:8d:e6:d2:cc:e2:89:a5:fb:42:3d:f2:dd:
                    2b:85:fe:0d:db:d5:0d:51:ad:66:af:56:ac:62:54:
                    17:d8:20:71:cc:97:7d:22:5a:1b:e5:03:0b:60:c5:
                    54:c5:89:54:4b:19:89:17:d7:7e:f0:37:6e:b4:bc:
                    ad:47:f3:df:e3:21:96:d8:84:39:6c:e4:c8:13:2e:
                    6f:27:28:31:9b:76:f6:55:2f:8a:f3:58:05:a7:69:
                    73:76:89:02:21:a7:1f:9f:2a:21:1b:e7:ea:70:36:
                    4e:56:b9:74:f5:19:e6:c0:44:12:99:36:53:04:66:
                    d8:e5:0d:fd:f3:2f:73:21:eb:54:08:4e:f0:ba:97:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:0B:85:42:14:65:06:C1:24:F2:B5:59:5F:EF:2B:3B:E2:59:A5
            X509v3 Authority Key Identifier:
                keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:18:fa:75:5d:90:36:a5:48:f7:c8:5b:9b:37:c3:ec:77:12:
         dc:2a:e8:cd:f0:72:ee:76:c7:ce:c7:e6:f5:24:c0:b6:d4:a3:
         ad:4b:2c:4d:dc:1b:05:af:07:27:17:e6:b9:25:6f:e5:ef:62:
         14:fc:6f:be:67:e6:03:7a:33:18:6a:01:80:a6:e1:d6:d5:66:
         ec:04:f5:43:95:ec:01:4e:0a:d6:17:b5:7d:ac:da:f5:f5:3b:
         b0:16:74:00:c8:45:e5:28:35:f9:a0:82:00:a2:d9:63:b1:b1:
         be:a0:1b:99:ed:4f:fc:cd:e4:f4:dc:3b:58:bf:b5:cb:da:62:
         72:92:84:a4:66:d1:03:70:81:38:22:f9:6b:8f:90:09:90:1e:
         48:eb:98:ff:db:4c:cb:2f:27:d8:ac:59:97:06:4e:53:4f:79:
         06:5d:d0:55:40:c2:ac:07:c8:03:3c:61:d0:fc:c3:d0:76:54:
         50:ef:46:12:cc:01:a6:26:6d:b8:a1:94:2b:32:93:40:b5:ff:
         10:03:85:d4:15:59:34:3d:fe:e8:65:ee:73:5d:db:ff:98:28:
         61:8a:36:db:c1:76:47:ef:a9:89:08:82:91:52:84:0e:44:f8:
         6f:49:8b:77:66:ad:54:61:d5:08:a8:36:df:c6:89:55:87:7a:
         f1:1b:ae:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:54 2026 by rpki-client