Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa
File:                     11F818F81F7311EC9027050AC4F9AE02.roa (raw, json)
Hash identifier:          EBh/ckQNlDc4ahR7RMYLM7PgmugIX2cx8X7/ugjUn30=
Subject key identifier:   1D:A6:B7:95:D1:23:E3:D6:65:33:A0:FE:91:FE:CB:8C:3A:8A:70:6B
Certificate issuer:       /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial:       056C
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:56:07 +0000
ROA not before:           Wed 23 Jul 2025 00:06:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140888
IP address blocks:        103.152.236.0/23 maxlen: 23
                          103.152.236.0/24 maxlen: 24
                          103.152.237.0/24 maxlen: 24
                          2406:3740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
        Validity
            Not Before: Jul 23 00:06:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40d37-fcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:89:03:80:9c:dd:a1:2b:04:fc:74:bc:34:
                    96:0a:7c:44:ee:c6:e6:4e:ca:c5:81:fc:bd:e2:5e:
                    93:65:64:51:29:67:cc:e3:1f:d0:10:f3:0d:bd:25:
                    53:d4:fd:9d:c9:cb:f0:24:9f:c1:30:d8:70:4b:1d:
                    2b:d7:4a:4b:a5:83:8a:23:78:81:32:a0:ee:e3:de:
                    d9:65:67:dc:5c:9e:b6:18:53:49:53:ad:19:46:41:
                    11:24:f3:39:b0:12:0b:a7:0d:14:af:e4:9d:87:08:
                    20:06:d3:78:83:21:5b:c0:81:67:57:e9:b0:bc:20:
                    aa:d0:ba:39:6f:7d:61:09:08:71:ad:6d:fc:d6:47:
                    47:f4:b6:d1:e9:4b:8b:ab:02:e3:bb:c9:b0:00:1a:
                    32:73:d8:80:02:a6:0b:af:99:e7:5b:cd:f0:d5:42:
                    4b:61:5c:77:cd:11:bc:0b:d8:91:ad:75:4e:21:dd:
                    66:d8:5f:f1:bc:fd:75:af:15:48:52:e1:db:93:86:
                    07:da:f1:c5:f0:d6:b4:2d:ab:9b:43:bf:8b:6d:6d:
                    94:40:e1:10:a2:13:11:28:44:92:b6:49:0d:80:46:
                    70:2d:e1:1b:4f:36:43:9c:40:8d:11:f0:8d:29:0a:
                    9c:78:c4:08:a7:6e:ad:eb:a8:c4:9b:db:8a:64:e9:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A6:B7:95:D1:23:E3:D6:65:33:A0:FE:91:FE:CB:8C:3A:8A:70:6B
            X509v3 Authority Key Identifier:
                keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.236.0/23
                IPv6:
                  2406:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:fa:3c:8b:80:c4:ad:ee:76:2f:07:b9:f5:bc:bd:d3:62:
         a3:6e:22:03:a2:58:06:52:47:65:a4:d5:df:37:5d:3d:ec:38:
         33:e7:12:a3:1f:2d:82:9e:30:88:14:23:05:1d:92:37:a5:cd:
         30:e2:75:ec:72:98:a7:51:f9:3a:a4:0b:17:7a:c8:17:88:68:
         17:98:ac:dc:8c:93:30:f8:bf:4f:b2:12:91:a7:94:27:fd:75:
         7f:56:de:72:3f:8c:a0:62:35:78:59:f3:5d:96:dc:0d:07:fa:
         66:25:58:32:52:b5:46:7c:c9:2d:aa:84:90:2e:29:ce:bc:53:
         54:bc:86:de:f1:4c:ed:8a:b2:5f:09:64:89:a9:cd:e0:e3:8d:
         d3:76:5f:31:94:58:8e:f1:08:ae:6d:75:78:53:17:8c:34:88:
         c5:24:51:8a:60:25:5f:91:e9:c9:3e:4e:28:d9:bb:14:fe:58:
         3b:de:5f:30:8d:da:49:09:08:7f:7c:bd:53:d2:4c:f0:10:36:
         07:27:02:2b:b0:7b:18:80:2c:39:d9:0c:46:d2:ea:3d:ab:d0:
         37:8d:b8:e4:4e:97:5a:af:bf:7a:fe:fe:33:cd:4f:ed:81:22:
         8f:22:1e:7e:4f:0d:88:f9:10:e1:35:b5:b7:84:f1:30:a5:6d:
         34:bc:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:46 2026 by rpki-client