Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F097281C169A11EF8927EC2DC4F9AE02.roa
File:                     F097281C169A11EF8927EC2DC4F9AE02.roa (raw, json)
Hash identifier:          KirEUGjAdAYwlJ1vX/xexGJU4YLpCT+izGcMYNz9uNQ=
Subject key identifier:   F6:DB:90:75:06:13:9F:3F:49:7D:AA:42:46:5A:6A:31:D7:E3:C6:C7
Certificate issuer:       /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial:       0791
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F097281C169A11EF8927EC2DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:04:34 +0000
ROA not before:           Tue 02 Dec 2025 21:24:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     62468
IP address blocks:        43.251.116.0/23 maxlen: 24
                          103.42.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
        Validity
            Not Before: Dec  2 21:24:44 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a471a2-4e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:b7:e3:2c:06:8f:da:03:b8:7a:89:bf:4d:
                    4b:c1:e8:13:00:dd:4d:89:ce:96:78:7b:3c:67:d7:
                    c0:80:3a:3c:1c:9e:4e:5b:ba:0b:01:fe:11:6e:d8:
                    3a:e0:b3:a7:1d:0b:5a:0d:2b:f6:b9:f5:f9:7c:17:
                    4e:2e:61:1c:6f:75:e7:23:63:01:44:ff:e1:81:06:
                    7c:01:cb:f0:a0:b1:db:ef:26:7b:d9:f0:9e:e6:7f:
                    f7:ce:ed:31:68:c4:bd:d5:b7:9c:7e:e9:74:93:d4:
                    ce:9e:7e:2d:0f:07:5e:f0:ab:fe:08:2f:df:c1:18:
                    31:3c:dc:e7:82:19:3c:c1:ea:18:9d:0a:0d:fa:17:
                    d3:21:42:e0:70:d8:ca:2a:73:67:3a:d7:b8:60:45:
                    3f:55:16:2a:da:59:f8:76:fd:4a:3b:ae:9d:eb:0e:
                    67:dc:75:31:5e:e6:5c:70:fe:35:d7:1c:e7:2c:aa:
                    98:24:40:c5:09:63:27:f9:a6:44:01:eb:00:01:56:
                    11:4e:88:97:b2:f1:7d:0f:0d:a6:fa:a2:a9:38:98:
                    bc:66:fe:2e:3c:a2:66:e7:91:f5:5a:ee:e8:e8:24:
                    95:36:6f:ab:a0:f4:be:f5:b4:fc:1f:f2:85:9c:b4:
                    01:12:c4:ed:58:e0:35:be:27:32:2b:6d:b7:26:67:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:90:75:06:13:9F:3F:49:7D:AA:42:46:5A:6A:31:D7:E3:C6:C7
            X509v3 Authority Key Identifier:
                keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F097281C169A11EF8927EC2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.116.0/23
                  103.42.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:04:44:fc:93:a1:97:35:dc:ad:14:44:84:70:8d:ed:f0:
         9c:22:20:ff:5a:8a:2e:6f:03:c0:75:58:b6:78:8c:f4:96:fb:
         81:4b:45:ce:d7:c0:e8:c2:91:3e:a8:3a:14:11:d8:a0:ba:24:
         48:1d:d7:9b:b7:31:05:81:44:ff:3f:1d:5b:e9:39:33:bb:8e:
         41:7a:13:25:ef:57:3c:73:f0:d2:44:ab:9d:d6:68:9f:2a:b0:
         1a:68:18:b9:67:33:50:1b:e7:c7:9f:b6:f3:71:e6:89:b2:7a:
         5c:34:3e:92:98:cd:80:8c:be:da:4f:8f:45:31:78:25:ce:1e:
         ed:77:64:c2:1c:42:34:87:a7:db:42:1c:11:e3:17:b0:48:79:
         3a:1d:4a:8e:de:7f:5e:49:28:37:6b:51:fa:bf:68:1c:b7:9a:
         12:71:43:f5:a6:f6:30:b4:4b:6b:27:cb:88:7b:61:75:39:15:
         c9:aa:21:68:c0:54:3c:a4:a3:e1:a7:4b:1a:01:eb:9e:c0:72:
         c3:02:25:19:50:82:4e:35:50:23:fc:87:57:56:f4:5f:0f:f8:
         1f:4c:34:0c:b3:9c:db:03:94:97:58:4c:ea:99:63:7e:a9:5e:
         3b:8b:74:33:53:b5:82:f8:8f:9a:cb:6b:58:86:4a:97:be:00:
         0a:a3:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:24 2026 by rpki-client