Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/8446564EF96611E8BE431B17C4F9AE02.roa
File:                     8446564EF96611E8BE431B17C4F9AE02.roa (raw, json)
Hash identifier:          SuCfXUzHhGXYwpw+Q5ScTt0t8XfPevQs+szeN47KRDI=
Subject key identifier:   14:DA:F4:2C:27:8F:53:DF:FC:A9:8E:D6:FC:50:2F:57:31:0D:DC:63
Certificate issuer:       /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial:       1232
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/8446564EF96611E8BE431B17C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:54:02 +0000
ROA not before:           Thu 22 May 2025 17:29:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38303
IP address blocks:        103.114.174.0/23 maxlen: 23
                          103.114.174.0/24 maxlen: 24
                          103.114.175.0/24 maxlen: 24
                          103.219.114.0/23 maxlen: 23
                          103.219.114.0/24 maxlen: 24
                          103.219.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4658 (0x1232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
        Validity
            Not Before: May 22 17:29:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a436ea-24a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:19:81:38:74:10:b8:c7:87:f4:a9:92:91:
                    06:f1:17:44:4d:3d:f8:10:b9:3b:e9:ef:78:a3:ff:
                    d4:d7:f6:08:1e:3c:e3:73:18:7b:bd:63:a7:18:12:
                    f7:b0:ee:bb:02:06:9d:cf:02:5a:5d:53:fa:6d:ab:
                    95:1d:3b:30:bb:df:12:1a:74:2b:3c:bf:f7:77:5c:
                    95:ed:e2:8f:65:d4:7c:fc:01:70:71:25:7d:a4:7a:
                    22:9e:47:98:ea:7d:89:4b:e7:6d:20:ed:5b:bc:bd:
                    13:78:45:c4:44:1b:cc:48:06:f4:32:07:4a:41:63:
                    69:ef:b1:f6:e3:5c:8a:6b:dd:33:25:4f:dc:32:12:
                    1d:71:ee:1c:69:ad:f4:f3:c3:50:19:53:fe:4d:9d:
                    6e:70:48:b8:5d:e1:40:79:75:12:5f:8f:5c:6a:e7:
                    37:d7:59:b7:0b:45:ae:af:1f:90:37:5d:46:9e:e9:
                    95:52:65:0b:c9:74:51:c9:0e:b4:8b:fb:bb:0b:4f:
                    d8:b2:46:b4:18:b2:a9:71:ea:31:ee:42:6d:c1:97:
                    b9:73:32:91:47:c1:ed:a3:58:b7:9d:e8:1e:18:2e:
                    fc:a9:ea:b2:1c:11:91:5a:c7:ae:5d:84:11:1b:78:
                    8f:91:cf:05:b9:0f:31:9d:ad:95:9e:76:0f:96:04:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DA:F4:2C:27:8F:53:DF:FC:A9:8E:D6:FC:50:2F:57:31:0D:DC:63
            X509v3 Authority Key Identifier:
                keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/8446564EF96611E8BE431B17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.174.0/23
                  103.219.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:70:cc:88:62:b2:32:3c:2f:39:f6:86:10:2e:45:60:cd:b1:
         be:01:82:8d:e1:90:b7:e3:3e:82:cd:d4:99:83:cb:95:fc:9f:
         79:71:bf:7b:b2:db:e8:53:12:af:c9:5a:7f:05:73:28:52:c7:
         98:18:25:aa:0c:0a:fd:26:cc:73:1a:d6:75:ad:6b:7e:29:c4:
         1c:c4:83:e9:92:42:78:80:07:87:74:d5:5e:ca:07:a0:c4:8d:
         14:fc:89:a3:69:7a:8e:b3:24:6b:a0:ba:30:6c:54:b6:c8:68:
         53:11:8f:32:ef:16:54:21:6d:b8:8d:98:18:13:a8:8b:41:26:
         fc:7a:8f:7f:86:50:e1:bc:21:0d:e7:82:33:bc:85:60:ec:51:
         19:65:c3:eb:53:ba:33:65:78:97:57:3e:3c:59:c5:76:36:75:
         b9:c0:a2:bd:e7:94:37:f1:68:89:9e:bb:e2:bf:6e:93:5d:14:
         d0:bf:9b:23:a7:1c:c4:bd:12:a3:b2:42:4e:70:94:60:7b:2f:
         a9:91:f4:ed:4e:2a:7e:01:42:1a:8e:a7:c1:fb:43:88:a9:25:
         6b:27:47:02:77:a1:8c:e6:bd:15:c9:45:37:73:1b:cb:6d:f7:
         2c:1a:98:63:a6:63:b4:a6:f8:36:b1:cf:8f:4a:48:a6:13:ad:
         7c:de:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:49 2026 by rpki-client