Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3B03239684CE11EF9D90A966C4F9AE02.roa
File:                     3B03239684CE11EF9D90A966C4F9AE02.roa (raw, json)
Hash identifier:          AF8Guce4RO4Svw7K45PwgWF9YPRlLDoCQm5gXdcSPh4=
Subject key identifier:   86:2D:90:E2:D8:20:1F:ED:FF:2C:02:68:CE:01:5E:16:58:AD:C0:67
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       0757
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3B03239684CE11EF9D90A966C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:04:45 +0000
ROA not before:           Wed 18 Feb 2026 21:18:57 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Feb 18 21:18:57 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a471ad-8feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:c0:7d:dc:7a:f5:2f:36:e6:88:06:c0:3c:
                    e0:61:26:5a:f1:5f:d3:f2:5e:17:5b:3e:2b:f7:ce:
                    d3:70:b1:11:20:1d:95:aa:80:0a:da:5b:b9:42:13:
                    70:89:43:77:33:02:24:43:0f:e5:16:be:af:c8:24:
                    50:b9:33:60:a7:01:3a:76:44:40:cb:68:0a:51:de:
                    d7:90:b9:b0:fc:f0:1f:e5:33:11:5d:6b:57:03:26:
                    6f:e7:69:7d:ef:0f:a5:ad:69:53:fe:a9:c7:cb:17:
                    1b:f2:8b:3b:75:9f:1b:ba:27:7c:76:29:15:3e:cd:
                    00:89:57:36:44:6e:ff:05:a9:04:65:0e:e2:dc:42:
                    f7:80:38:e1:b5:84:ab:3b:f6:73:af:5e:48:12:d3:
                    24:64:69:35:c2:54:a1:72:dd:00:9a:7f:2c:d6:14:
                    c7:26:de:bb:af:52:5d:cb:a5:df:99:ec:96:18:c3:
                    82:2e:ce:2a:a8:c7:75:db:4d:54:2f:9e:6f:4e:84:
                    f5:c4:1f:08:27:e8:5b:6b:af:73:67:be:0e:21:ce:
                    68:e0:4b:b1:b4:9e:06:de:fc:aa:fe:71:2f:a1:c0:
                    b9:d1:e3:a1:27:29:70:29:39:57:10:b3:d9:af:c9:
                    8b:90:da:9e:1b:23:2b:21:8c:56:3d:32:6c:dd:29:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:90:E2:D8:20:1F:ED:FF:2C:02:68:CE:01:5E:16:58:AD:C0:67
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3B03239684CE11EF9D90A966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:f8:0d:93:ef:50:31:94:ff:68:79:f4:99:0c:e7:23:83:
         82:fa:80:05:36:0e:7e:16:7d:ef:f4:95:e1:20:e3:9b:74:16:
         d6:fb:7f:74:82:74:26:b2:e6:ea:0f:0c:27:d7:db:4c:a6:1a:
         0f:4d:6c:fa:16:7b:43:e3:2c:54:57:b0:d2:84:7a:86:15:f3:
         48:a4:d4:26:df:a7:4f:34:94:db:ad:91:ec:ee:59:67:f4:da:
         0d:23:21:cc:fd:24:6f:d0:a0:2d:e6:52:cf:05:c1:c3:eb:87:
         63:38:e7:7e:23:1c:45:5e:74:48:d0:4e:a2:1a:0f:a8:a3:43:
         56:a2:25:cf:35:b2:b4:da:92:5e:d9:20:04:9a:98:9c:c7:71:
         9e:e0:d8:e5:c6:32:43:a2:e4:7a:45:b9:75:25:c0:74:68:eb:
         c9:b5:f8:41:6d:bf:49:07:02:99:ea:9d:28:48:90:0a:c7:18:
         f4:33:db:98:b9:71:c9:c0:b1:b4:4d:d6:cd:22:94:a5:8b:3c:
         58:d4:bb:f2:05:90:49:97:40:2e:3f:99:70:85:e8:16:64:ee:
         58:16:03:9f:9b:6c:1f:a6:52:58:e4:d3:a1:d0:45:60:cc:1f:
         ee:5a:47:ad:88:82:6a:c8:2b:0a:f3:52:73:08:8c:0e:73:ec:
         82:47:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:56 2026 by rpki-client