Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/349EFE924E6511EBBFE35D1AC4F9AE02.roa
File:                     349EFE924E6511EBBFE35D1AC4F9AE02.roa (raw, json)
Hash identifier:          yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=
Subject key identifier:   8B:A9:E1:5C:7F:FA:0B:E8:C9:22:2C:9E:AA:75:31:36:17:43:5F:96
Certificate issuer:       /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial:       0780
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/349EFE924E6511EBBFE35D1AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:11:20 +0000
ROA not before:           Tue 24 Feb 2026 21:18:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136189
IP address blocks:        103.83.122.0/24 maxlen: 24
                          103.83.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
        Validity
            Not Before: Feb 24 21:18:37 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44908-6285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:e1:9d:bf:04:22:6c:c1:15:23:95:cb:ce:
                    dc:96:ae:87:13:08:e3:b5:76:87:92:cc:bd:d9:a2:
                    5b:f0:65:fc:84:90:a5:a5:ee:c4:cc:86:eb:29:72:
                    7d:60:cd:2d:e3:b6:58:fc:19:d2:51:1c:3e:c3:fb:
                    0b:95:5a:24:2c:31:e5:70:7a:41:89:e8:01:d2:bd:
                    d4:d7:05:dc:65:9b:43:05:21:14:56:08:36:ae:bc:
                    29:ea:b5:3d:24:8b:d1:24:b8:9f:94:88:7e:8b:74:
                    6a:50:44:df:c6:69:10:94:58:89:44:94:e1:3d:a5:
                    21:af:73:81:0f:a4:53:40:65:0a:23:4e:29:1e:3a:
                    c5:3d:76:a7:48:b6:3e:54:c9:91:b0:a1:93:8e:ad:
                    69:40:3f:0c:02:b3:f9:2c:f0:a1:97:b5:66:71:6a:
                    c9:5e:c0:8f:48:15:d3:f5:92:76:1f:1f:d6:6a:85:
                    c9:8f:35:ee:8f:e0:ac:7c:da:05:86:22:59:01:85:
                    90:6a:24:04:30:3d:20:76:56:29:e2:3f:a2:73:02:
                    7d:65:71:b5:91:40:ae:63:2e:27:d7:3c:04:ad:3d:
                    3a:d1:f6:d4:86:e8:73:59:71:2f:11:a8:cf:e6:19:
                    34:f2:8f:cb:81:c7:af:e4:e6:77:12:3b:38:5f:f8:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:E1:5C:7F:FA:0B:E8:C9:22:2C:9E:AA:75:31:36:17:43:5F:96
            X509v3 Authority Key Identifier:
                keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/349EFE924E6511EBBFE35D1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:87:61:de:ed:9f:bc:f5:1d:cf:2b:7b:3b:2b:48:5a:05:
         24:d0:5a:9b:5a:a8:85:1e:b2:f6:dd:8e:78:ed:11:5a:b2:ba:
         ee:31:69:6f:4c:24:8a:00:9f:8f:b7:41:ec:48:a0:ca:00:bd:
         2f:6d:75:95:da:36:66:ae:ca:16:0e:6c:44:6c:44:20:ed:2d:
         80:98:dd:88:19:f9:45:15:31:8f:60:f0:ee:8d:9b:48:74:2c:
         a2:76:cf:28:8c:20:e0:f1:40:a3:c0:ba:8a:b6:d2:d2:17:a7:
         9e:92:b6:ea:9c:ff:0c:53:e7:06:cd:41:6d:d8:ae:f7:31:0e:
         80:1e:9e:20:40:23:b5:68:16:df:13:93:8d:a8:36:7b:90:b0:
         c8:42:d8:12:9b:0e:74:d4:6a:01:7a:38:9b:3b:12:7d:9c:e1:
         9e:06:e7:66:a0:97:39:d4:f1:5e:00:2b:76:02:e8:d6:f6:87:
         88:7e:6c:a9:18:3f:36:ec:ff:a9:2c:c6:c2:6f:98:51:d8:60:
         fb:a0:82:b3:61:9f:e2:a6:c0:15:31:60:c8:ba:9f:f0:51:a4:
         e9:70:69:34:36:ce:1a:b8:ed:38:57:70:58:2a:fd:55:05:22:
         bd:fb:7b:02:57:d7:02:10:cf:2b:4b:05:a2:96:c9:c1:b1:66:
         4c:9c:19:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:30 2026 by rpki-client