Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa
File:                     38043DF4938B11EEA552D487C4F9AE02.roa (raw, json)
Hash identifier:          x5qGty7DG9DDwMgdv4AnwJYPyag0LzLyPAi6zvUlIbY=
Subject key identifier:   EB:CA:3E:99:86:75:8E:85:B3:F3:7B:4E:54:B8:50:E2:EF:94:17:BC
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       03AD
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:58:25 +0000
ROA not before:           Sat 29 Mar 2025 01:56:39 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     62816
IP address blocks:        103.186.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Mar 29 01:56:39 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ffb0-3468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:65:48:e4:4e:72:64:c8:73:f5:76:ab:8b:
                    b8:72:fd:4b:8c:c4:27:d0:e6:6f:53:84:da:e0:89:
                    2a:e3:6e:e7:c3:ff:77:91:ed:e0:60:aa:1c:2f:f9:
                    d2:fc:3a:95:9b:02:13:80:c6:f3:1d:87:53:c6:d9:
                    52:95:74:46:63:10:9c:cf:4f:0d:69:3c:63:15:bc:
                    4b:00:78:b4:f7:24:10:79:a9:c5:1a:f2:c1:1b:f0:
                    59:a9:f5:bd:ec:46:ed:aa:09:cc:28:0d:fa:73:eb:
                    9a:a5:7a:e3:01:17:1a:d9:ec:ca:14:11:85:a6:2e:
                    e9:f4:c0:a9:51:b9:e3:65:2f:d9:5b:1b:2a:5c:c3:
                    87:8a:18:6d:71:dc:db:37:84:61:8c:2e:d4:39:40:
                    8d:9c:ed:97:71:54:09:fd:e6:7b:fc:76:00:35:23:
                    35:b4:9b:90:70:f4:b9:ed:28:11:e9:bf:f4:52:0c:
                    89:85:0b:1b:33:1c:85:04:46:67:1b:c6:1b:4c:aa:
                    4d:34:e3:91:34:19:cb:8e:1a:c3:c7:31:d4:42:51:
                    71:6e:78:42:b7:5e:60:29:e6:83:90:50:57:c3:d1:
                    29:e4:81:65:b3:b4:e4:65:d5:fe:ba:63:f8:1e:af:
                    34:3e:b8:86:43:0c:58:d3:c6:75:33:1b:0a:67:66:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CA:3E:99:86:75:8E:85:B3:F3:7B:4E:54:B8:50:E2:EF:94:17:BC
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:4d:5b:d2:dc:fd:30:d4:d3:80:96:f3:5c:21:9c:18:00:
         d8:b4:e6:ac:32:0e:92:a3:6a:70:cb:e3:78:cf:5e:31:a6:78:
         74:a4:ce:b5:ea:a2:d6:ec:ea:79:b6:c2:49:90:9d:b6:d4:dc:
         b0:70:4d:ca:d5:d4:b0:ba:e4:ea:36:02:b9:42:18:28:55:c2:
         dd:b1:df:b1:47:b8:55:17:d8:d9:9d:20:8e:d7:86:18:0c:4e:
         c7:8a:f1:d6:c6:2f:a4:d6:d9:14:25:d9:88:42:ee:2f:d1:dc:
         79:f7:d1:2f:28:08:fe:8f:d0:7e:d9:2b:26:b8:7f:21:70:fc:
         bb:b0:60:b0:fb:3b:9c:a7:f5:57:d1:1b:93:e3:a6:2c:98:64:
         7a:95:20:db:4c:fa:de:15:3c:eb:00:4d:f2:79:ef:cd:bd:3a:
         0c:2e:3a:dd:01:e6:5c:90:b2:77:1c:79:09:9d:fb:63:01:3e:
         99:5e:cd:c4:d3:20:e4:75:50:d7:11:cb:3b:7b:32:9a:3c:74:
         ea:ff:aa:a8:88:8f:b9:5d:4d:7b:60:26:aa:ca:a9:4f:bf:87:
         3f:71:14:85:f8:a1:77:0d:d8:e6:79:14:d2:d5:64:ad:28:a7:
         87:10:ab:13:a6:0d:e8:c9:e8:04:82:98:62:da:5d:f6:ad:b5:
         8a:55:63:c2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5MzUxMTAvBgNVBAUTKDdBNjBDMDRCODdENkM2Q0IyNTFGMTUyOTdFRTI1QUQy
REE1MDVFMEUwHhcNMjUwMzI5MDE1NjM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmZiMC0zNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/xlSOROcmTIc/V2q4u4cv1LjMQn0OZvU4Ta4Ikq427nw/93ke3gYKocL/nS
/DqVmwITgMbzHYdTxtlSlXRGYxCcz08NaTxjFbxLAHi09yQQeanFGvLBG/BZqfW9
7EbtqgnMKA36c+uapXrjARca2ezKFBGFpi7p9MCpUbnjZS/ZWxsqXMOHihhtcdzb
N4RhjC7UOUCNnO2XcVQJ/eZ7/HYANSM1tJuQcPS57SgR6b/0UgyJhQsbMxyFBEZn
G8YbTKpNNOORNBnLjhrDxzHUQlFxbnhCt15gKeaDkFBXw9Ep5IFls7TkZdX+umP4
Hq80PriGQwxY08Z1MxsKZ2YH+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOvKPpmG
dY6Fs/N7TlS4UOLvlBe8MB8GA1UdIwQYMBaAFHpgwEuH1sbLJR8VKX7iWtLaUF4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDkzNS8zMUIzRDE2MEQw
NDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hzc2xIeFVwZnVKYTB0cFFY
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtREFTNGZXeHNzbEh4VXBmdUphMHRwUVhnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDA5MzUvMzFCM0QxNjBEMDQ4MTFFQzlFODE4MTM1QzRGOUFFMDIvMzgwNDNERjQ5
MzhCMTFFRUE1NTJENDg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7pxMA0GCSqGSIb3DQEBCwUAA4IBAQBTPE1b0tz9MNTTgJbzXCGc
GADYtOasMg6So2pwy+N4z14xpnh0pM616qLW7Op5tsJJkJ221NywcE3K1dSwuuTq
NgK5QhgoVcLdsd+xR7hVF9jZnSCO14YYDE7HivHWxi+k1tkUJdmIQu4v0dx599Ev
KAj+j9B+2SsmuH8hcPy7sGCw+zucp/VX0RuT46YsmGR6lSDbTPreFTzrAE3yee/N
vToMLjrdAeZckLJ3HHkJnftjAT6ZXs3E0yDkdVDXEcs7ezKaPHTq/6qoiI+5XU17
YCaqyqlPv4c/cRSF+KF3DdjmeRTS1WStKKeHEKsTpg3oyegEgphi2l32rbWKVWPC
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:21 2026 by rpki-client